CVE-2014-6271

CVE-2014-6271 (Shellshock) affects GNU Bash up to 4.3, enabling remote code execution by processing trailing strings after function definitions in environment variables. Exploitation vectors include OpenSSH ForceCommand, mod_cgi/mod_cgid in Apache, DHCP client scripts, and other environment-passi...

CVE-2014-7169

CVE-2014-7169 affects GNU Bash up to 4.3, where parsing of function definitions in environment variables can be exploited to run commands or impact other attributes across privilege boundaries (notably via ForceCommand in OpenSSH sshd and via mod_cgi/mod_cgid in Apache, as well as DHCP client scr...

CVE-2014-6278

CVE-2014-6278 affects GNU Bash up to 4.3 bash43-026, where parsing of function definitions inside environment variable values is flawed, enabling remote arbitrary command execution across privilege boundaries. Documented vectors include ForceCommand in OpenSSH sshd, mod_cgi/mod_cgid in Apache, an...

CVE-2014-6277

CVE-2014-6277 affects GNU Bash up to version 4.3 with the patch level bash43-026. It abuses how Bash parses function definitions inside environment variables, enabling remote code execution or denial of service via crafted environments that cross privilege boundaries (e.g., across sshd ForceComma...

CVE-2014-7186

A vulnerability exists in the GNU Bash command-line interpreter (specifically bash43-026 ) due to memory errors during the execution of the parse.y library’s redirection function. This issue, known as the redir_stack issue, occurs during the crafted use of here documents . Successful exploitation...

CVE-2014-7187

A vulnerability exists in the GNU Bash command-line interpreter (specifically in bash version 4.3 and prior) due to an off-by-one error in the read_token_word function of the parse.y library. This flaw occurs when processing deeply nested for loops (the "word_lineno" issue), allowing an attacker ...