CVE-2014-6278

🗓️ 30 Sep 2014 10:00:00Reported by debianType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 427 Views🌐 WEB

CVE-2014-6278 GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary commands via a crafted environment

Reporter	Title	Published	Views	Family All 186
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Bash affect IBM Workload Deployer (CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277, CVE-2014-6278)	15 Jun 201807:01	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Bash affect IBM SmartCloud Entry Appliance (CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277, CVE-2014-6278)	19 Jul 202000:49	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in bash affect IBM Flex System Chassis Management Module (CMM)	31 Jan 201902:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Bash affect certain Brocade products that IBM resells for use with IBM BladeCenter (CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277, CVE-2014-6278)	31 Jan 201901:35	–	ibm
IBM Security Bulletins	Security Bulletins for IBM Tealeaf Customer Experience offerings	16 Jun 201819:35	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Bash affect certain IBM N Series products (CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277, CVE-2014-6278)	18 Jun 201800:08	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Bash affect IBM Smart Analytics System 5600 (CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277, CVE-2014-6278)	16 Jun 201813:58	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Bash affect IBM PureData System for Operational Analytics (CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277, CVE-2014-6278)	18 Oct 201903:50	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Bash affect IBM Flex System Manager (FSM): (CVE-2014-6271, CVE-2014-6277, CVE-2014-6278, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187)	31 Jan 201901:30	–	ibm
IBM Security Bulletins	Security Bulletin: UPDATE: Vulnerabilities in Bash affect AIX Toolbox for Linux Applications (CVE-2014-6271, CVE-2014-6277, CVE-2014-6278, CVE-2014-7169, CVE-2014-7186, and CVE-2014-7187)	15 Sep 202112:14	–	ibm

NVD

Node

gnu bashMatch1.14.0

gnu bashMatch1.14.1

gnu bashMatch1.14.2

gnu bashMatch1.14.3

gnu bashMatch1.14.4

gnu bashMatch1.14.5

gnu bashMatch1.14.6

gnu bashMatch1.14.7

gnu bashMatch2.0

gnu bashMatch2.01

gnu bashMatch2.01.1

gnu bashMatch2.02

gnu bashMatch2.02.1

gnu bashMatch2.03

gnu bashMatch2.04

gnu bashMatch2.05

gnu bashMatch2.05a

gnu bashMatch2.05b

gnu bashMatch3.0

gnu bashMatch3.0.16

gnu bashMatch3.1

gnu bashMatch3.2

gnu bashMatch3.2.48

gnu bashMatch4.0

gnu bashMatch4.0rc1

gnu bashMatch4.1

gnu bashMatch4.2

gnu bashMatch4.3

Source	Link
secunia	www.secunia.com/advisories/59907
marc	www.marc.info/
secunia	www.secunia.com/advisories/61550
marc	www.marc.info/
www-01	www.www-01.ibm.com/support/docview.wss
novell	www.novell.com/support/kb/doc.php
security-tracker	www.security-tracker.debian.org/tracker/CVE-2014-6278
www-01	www.www-01.ibm.com/support/docview.wss
lists	www.lists.opensuse.org/opensuse-updates/2014-10/msg00025.html
www-01	www.www-01.ibm.com/support/docview.wss

Parameter	Position	Path	Description	CWE
User-Agent	header	target.com/tarantella/cgi-bin/modules.cgi	ShellShock-like vulnerability (CVE-2014-6278) allows remote command execution via crafted environment variables; evidenced by a POC using a malicious User-Agent header.	CWE-78

22 Apr 2026 16:07Current

9.9High risk

Vulners AI Score9.9

CVSS 210

CVSS 3.18.8

EPSS0.91694

SSVC