The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service…

Description

The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted use of here documents, aka the "redir_stack" issue.

Scores

EPSS (exploitation in 30 days)

64.3% · top 0.8% of all CVEs (3 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 10.0.

Weakness

• n/a
• CWE-119 (opens in a new tab)All about CWE-119 and its CVEs

Affected products

• n/a

  • affected n/a

References (125)

• http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.html (opens in a new tab)x_refsource_MISCx_transferred
• http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897 (opens in a new tab)x_refsource_CONFIRMx_transferred
• http://www-01.ibm.com/support/docview.wss?uid=swg21685749 (opens in a new tab)x_refsource_CONFIRMx_transferred
• HPSBMU03165 (opens in a new tab)vendor-advisoryx_refsource_HPx_transferred
• https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk102673&src=securityAlerts (opens in a new tab)x_refsource_CONFIRMx_transferred
• HPSBST03131 (opens in a new tab)vendor-advisoryx_refsource_HPx_transferred
• SSRT101819 (opens in a new tab)vendor-advisoryx_refsource_HPx_transferred
• 20141001 NEW VMSA-2014-0010 - VMware product updates address critical Bash security vulnerabilities (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
• HPSBMU03245 (opens in a new tab)vendor-advisoryx_refsource_HPx_transferred
• openSUSE-SU-2014:1229 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
• http://www-01.ibm.com/support/docview.wss?uid=swg21686084 (opens in a new tab)x_refsource_CONFIRMx_transferred
• http://www-01.ibm.com/support/docview.wss?uid=swg21686479 (opens in a new tab)x_refsource_CONFIRMx_transferred
• 61188 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• JVN#55667175 (opens in a new tab)third-party-advisoryx_refsource_JVNx_transferred
• openSUSE-SU-2014:1254 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
• 60433 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• [oss-security] 20140925 Fwd: Non-upstream patches for bash (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
• HPSBMU03143 (opens in a new tab)vendor-advisoryx_refsource_HPx_transferred
• HPSBMU03182 (opens in a new tab)vendor-advisoryx_refsource_HPx_transferred
• HPSBST03155 (opens in a new tab)vendor-advisoryx_refsource_HPx_transferred
• http://www-01.ibm.com/support/docview.wss?uid=swg21685541 (opens in a new tab)x_refsource_CONFIRMx_transferred
• http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html (opens in a new tab)x_refsource_CONFIRMx_transferred
• 61636 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 61816 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 61442 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• HPSBMU03246 (opens in a new tab)vendor-advisoryx_refsource_HPx_transferred
• 61283 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• SSRT101711 (opens in a new tab)vendor-advisoryx_refsource_HPx_transferred
• APPLE-SA-2015-09-30-3 (opens in a new tab)vendor-advisoryx_refsource_APPLEx_transferred
• https://kc.mcafee.com/corporate/index?page=content&id=SB10085 (opens in a new tab)x_refsource_CONFIRMx_transferred
• 61654 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315 (opens in a new tab)x_refsource_CONFIRMx_transferred
• 62312 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html (opens in a new tab)x_refsource_CONFIRMx_transferred
• HPSBMU03217 (opens in a new tab)vendor-advisoryx_refsource_HPx_transferred
• RHSA-2014:1312 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• http://www-01.ibm.com/support/docview.wss?uid=swg21685604 (opens in a new tab)x_refsource_CONFIRMx_transferred
• SSRT101868 (opens in a new tab)vendor-advisoryx_refsource_HPx_transferred
• 61703 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• USN-2364-1 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
• 61065 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• HPSBST03129 (opens in a new tab)vendor-advisoryx_refsource_HPx_transferred
• HPSBMU03144 (opens in a new tab)vendor-advisoryx_refsource_HPx_transferred
• http://www-01.ibm.com/support/docview.wss?uid=swg21686445 (opens in a new tab)x_refsource_CONFIRMx_transferred
• http://www-01.ibm.com/support/docview.wss?uid=swg21686131 (opens in a new tab)x_refsource_CONFIRMx_transferred
• JVNDB-2014-000126 (opens in a new tab)third-party-advisoryx_refsource_JVNDBx_transferred
• 61641 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• SUSE-SU-2014:1247 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10648 (opens in a new tab)x_refsource_CONFIRMx_transferred
• http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898 (opens in a new tab)x_refsource_CONFIRMx_transferred
• http://www-01.ibm.com/support/docview.wss?uid=swg21685914 (opens in a new tab)x_refsource_CONFIRMx_transferred
• 20141001 FW: NEW VMSA-2014-0010 - VMware product updates address critical Bash security vulnerabilities (opens in a new tab)mailing-listx_refsource_FULLDISCx_transferred
• MDVSA-2015:164 (opens in a new tab)vendor-advisoryx_refsource_MANDRIVAx_transferred
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04497075 (opens in a new tab)x_refsource_CONFIRMx_transferred
• https://support.apple.com/HT205267 (opens in a new tab)x_refsource_CONFIRMx_transferred
• 60024 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html (opens in a new tab)x_refsource_MISCx_transferred
• 61622 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 20140926 GNU Bash Environment Variable Command Injection Vulnerability (opens in a new tab)vendor-advisoryx_refsource_CISCOx_transferred
• http://support.novell.com/security/cve/CVE-2014-7186.html (opens in a new tab)x_refsource_CONFIRMx_transferred
• [oss-security] 20140928 Re: CVE-2014-6271: remote code execution through bash (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
• 62343 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 61565 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• https://www.suse.com/support/shellshock/ (opens in a new tab)x_refsource_CONFIRMx_transferred
• http://support.apple.com/HT204244 (opens in a new tab)x_refsource_CONFIRMx_transferred
• HPSBST03157 (opens in a new tab)vendor-advisoryx_refsource_HPx_transferred
• 61313 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• SSRT101830 (opens in a new tab)vendor-advisoryx_refsource_HPx_transferred
• 61873 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• [oss-security] 20140926 Re: Fwd: Non-upstream patches for bash (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
• 61485 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• openSUSE-SU-2014:1242 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
• 61618 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04518183 (opens in a new tab)x_refsource_CONFIRMx_transferred
• HPSBST03154 (opens in a new tab)vendor-advisoryx_refsource_HPx_transferred
• http://www-01.ibm.com/support/docview.wss?uid=isg3T1021272 (opens in a new tab)x_refsource_CONFIRMx_transferred
• HPSBGN03142 (opens in a new tab)vendor-advisoryx_refsource_HPx_transferred
• 61312 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 60193 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• http://www.vmware.com/security/advisories/VMSA-2014-0010.html (opens in a new tab)x_refsource_CONFIRMx_transferred
• 61479 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 60063 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 60034 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 59907 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 58200 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• HPSBST03181 (opens in a new tab)vendor-advisoryx_refsource_HPx_transferred
• 61643 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• http://www.novell.com/support/kb/doc.php?id=7015721 (opens in a new tab)x_refsource_CONFIRMx_transferred
• http://www-01.ibm.com/support/docview.wss?uid=swg21687079 (opens in a new tab)x_refsource_CONFIRMx_transferred
• 61503 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• http://www-01.ibm.com/support/docview.wss?uid=swg21686246 (opens in a new tab)x_refsource_CONFIRMx_transferred
• RHSA-2014:1354 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915 (opens in a new tab)x_refsource_CONFIRMx_transferred
• http://www.qnap.com/i/en/support/con_show.php?cid=61 (opens in a new tab)x_refsource_CONFIRMx_transferred
• HPSBST03148 (opens in a new tab)vendor-advisoryx_refsource_HPx_transferred
• 61552 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 61780 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279 (opens in a new tab)x_refsource_CONFIRMx_transferred
• https://support.citrix.com/article/CTX200223 (opens in a new tab)x_refsource_CONFIRMx_transferred
• http://www-01.ibm.com/support/docview.wss?uid=swg21686447 (opens in a new tab)x_refsource_CONFIRMx_transferred
• 62228 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• HPSBGN03138 (opens in a new tab)vendor-advisoryx_refsource_HPx_transferred
• 60044 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 61291 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• HPSBHF03125 (opens in a new tab)vendor-advisoryx_refsource_HPx_transferred
• 61287 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 61711 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• http://www-01.ibm.com/support/docview.wss?uid=isg3T1021361 (opens in a new tab)x_refsource_CONFIRMx_transferred
• APPLE-SA-2015-01-27-4 (opens in a new tab)vendor-advisoryx_refsource_APPLEx_transferred
• HPSBGN03141 (opens in a new tab)vendor-advisoryx_refsource_HPx_transferred
• RHSA-2014:1311 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• 61128 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• https://support.citrix.com/article/CTX200217 (opens in a new tab)x_refsource_CONFIRMx_transferred
• 61471 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 60055 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 61550 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 61633 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• http://www-01.ibm.com/support/docview.wss?uid=swg21686494 (opens in a new tab)x_refsource_CONFIRMx_transferred
• https://kb.bluecoat.com/index?page=content&id=SA82 (opens in a new tab)x_refsource_CONFIRMx_transferred
• SUSE-SU-2014:1259 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
• 61328 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• http://www-01.ibm.com/support/docview.wss?uid=swg21685733 (opens in a new tab)x_refsource_CONFIRMx_transferred
• 61129 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 61603 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879 (opens in a new tab)x_refsource_CONFIRMx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2014-7186](https://trackcve.app/badge/CVE-2014-7186.svg)](https://trackcve.app/cve/CVE-2014-7186)

Record last updated 6 Aug 2024, 12:40 UTC.