Bash vulnerabilities

3 known vulnerabilities in Bash from GNU. 3 are rated high or critical, and 3 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 10.0 High severity

  GNU Bash OS Command Injection Exploited

  CVE-2014-6278Sep 30, 2014GNUEPSS 99.7%

  GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary commands via a crafted environment, as demonstrated by vectors involving the ForceCommand fe

• 9.8 Critical severity

  GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Exploited

  CVE-2014-7169Sep 25, 2014GNUEPSS 99.9%

  GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as

• 9.8 Critical severity

  GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Exploited

  CVE-2014-6271Sep 24, 2014GNUEPSS 100%

  GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature