CVE-2014-6278

🗓️ 30 Sep 2014 10:00:00Reported by debianType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 505 Views🌐 WEB

CVE-2014-6278 GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary commands via a crafted environment

Reporter	Title	Published	Views	Family All 195
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Bash affect IBM Workload Deployer (CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277, CVE-2014-6278)	15 Jun 201807:01	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Bash affect IBM SmartCloud Entry Appliance (CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277, CVE-2014-6278)	19 Jul 202000:49	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in bash affect IBM Flex System Chassis Management Module (CMM)	31 Jan 201902:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Bash affect certain Brocade products that IBM resells for use with IBM BladeCenter (CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277, CVE-2014-6278)	31 Jan 201901:35	–	ibm
IBM Security Bulletins	Security Bulletins for IBM Tealeaf Customer Experience offerings	16 Jun 201819:35	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Bash affect certain IBM N Series products (CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277, CVE-2014-6278)	18 Jun 201800:08	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Bash affect IBM Smart Analytics System 5600 (CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277, CVE-2014-6278)	16 Jun 201813:58	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Bash affect IBM PureData System for Operational Analytics (CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277, CVE-2014-6278)	18 Oct 201903:50	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Bash affect IBM Flex System Manager (FSM): (CVE-2014-6271, CVE-2014-6277, CVE-2014-6278, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187)	31 Jan 201901:30	–	ibm
IBM Security Bulletins	Security Bulletin: UPDATE: Vulnerabilities in Bash affect AIX Toolbox for Linux Applications (CVE-2014-6271, CVE-2014-6277, CVE-2014-6278, CVE-2014-7169, CVE-2014-7186, and CVE-2014-7187)	15 Sep 202112:14	–	ibm

NVD

Node

gnu bashMatch1.14.0

gnu bashMatch1.14.1

gnu bashMatch1.14.2

gnu bashMatch1.14.3

gnu bashMatch1.14.4

gnu bashMatch1.14.5

gnu bashMatch1.14.6

gnu bashMatch1.14.7

gnu bashMatch2.0

gnu bashMatch2.01

gnu bashMatch2.01.1

gnu bashMatch2.02

gnu bashMatch2.02.1

gnu bashMatch2.03

gnu bashMatch2.04

gnu bashMatch2.05

gnu bashMatch2.05a

gnu bashMatch2.05b

gnu bashMatch3.0

gnu bashMatch3.0.16

gnu bashMatch3.1

gnu bashMatch3.2

gnu bashMatch3.2.48

gnu bashMatch4.0

gnu bashMatch4.0rc1

gnu bashMatch4.1

gnu bashMatch4.2

gnu bashMatch4.3

Source	Link
support	www.support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html
marc	www.marc.info/
secunia	www.secunia.com/advisories/61565
marc	www.marc.info/
secunia	www.secunia.com/advisories/61471
exploit-db	www.exploit-db.com/exploits/39887/
oracle	www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html
marc	www.marc.info/
secunia	www.secunia.com/advisories/61313
lists	www.lists.opensuse.org/opensuse-updates/2014-10/msg00025.html

Parameter	Position	Path	Description	CWE
User-Agent	header	/tarantella/cgi-bin/modules.cgi	ShellShock (CVE-2014-6278) remote code execution via crafted environment variables in Bash affecting CGI scripts (tarantella/modules.cgi); demonstrated via User-Agent header.	CWE-78

17 Jun 2026 00:12Current

8.4High risk

Vulners AI Score8.4

CVSS 210

CVSS 3.18.8

EPSS0.99621

SSVC