CVE-2014-7169: GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
Published Sep 25, 2014
·Updated
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the modcgi and modcgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271.
Other sources
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271.
— CISA
Affected Software
373 affected components
GNU Bash=1.14.0
GNU Bash=1.14.1
GNU Bash=1.14.2
GNU Bash=1.14.3
GNU Bash=1.14.4
GNU Bash=1.14.5
GNU Bash=1.14.6
GNU Bash=1.14.7
GNU Bash=2.0
GNU Bash=2.01
GNU Bash=2.01.1
GNU Bash=2.02
GNU Bash=2.02.1
GNU Bash=2.03
GNU Bash=2.04
GNU Bash=2.05
GNU Bash=2.05-a
GNU Bash=2.05-b
GNU Bash=3.0
GNU Bash=3.0.16
GNU Bash=3.1
GNU Bash=3.2
GNU Bash=3.2.48
GNU Bash=4.0
GNU Bash=4.0-rc1
GNU Bash=4.1
GNU Bash=4.2
GNU Bash=4.3
GNU Bourne-Again Shell (Bash)
GNU Bash<=4.3
Arista EOS>=4.9.0<4.9.12
Arista EOS>=4.10.0<4.10.9
Arista EOS>=4.11.0<4.11.11
Arista EOS>=4.12.0<4.12.9
Arista EOS>=4.13.0<4.13.9
Arista EOS>=4.14.0<4.14.4f
Oracle Linux=4
Oracle Linux=5
Oracle Linux=6
QNAP QTS<4.1.1
QNAP QTS=4.1.1
QNAP QTS=4.1.1-build_0927
Mageia Mageia=3.0
Mageia Mageia=4.0
redhat Gluster Storage Server For On-premise=2.1
redhat Virtualization=3.4
redhat Enterprise Linux=4.0
redhat Enterprise Linux=5.0
redhat Enterprise Linux=6.0
redhat Enterprise Linux=7.0
redhat Enterprise Linux Desktop=5.0
redhat Enterprise Linux Desktop=6.0
redhat Enterprise Linux Desktop=7.0
redhat Enterprise Linux Eus=5.9
redhat Enterprise Linux Eus=6.4
redhat Enterprise Linux Eus=6.5
redhat Enterprise Linux Eus=7.3
redhat Enterprise Linux Eus=7.4
redhat Enterprise Linux Eus=7.5
redhat Enterprise Linux Eus=7.6
redhat Enterprise Linux Eus=7.7
redhat Enterprise Linux For Ibm Z Systems=5.9_s390x
redhat Enterprise Linux For Ibm Z Systems=6.4_s390x
redhat Enterprise Linux For Ibm Z Systems=6.5_s390x
redhat Enterprise Linux For Ibm Z Systems=7.3_s390x
redhat Enterprise Linux For Ibm Z Systems=7.4_s390x
redhat Enterprise Linux For Ibm Z Systems=7.5_s390x
redhat Enterprise Linux For Ibm Z Systems=7.6_s390x
redhat Enterprise Linux For Ibm Z Systems=7.7_s390x
redhat Enterprise Linux For Power Big Endian=5.0_ppc
redhat Enterprise Linux For Power Big Endian=5.9_ppc
redhat Enterprise Linux For Power Big Endian=6.0_ppc64
redhat Enterprise Linux For Power Big Endian=6.4_ppc64
redhat Enterprise Linux For Power Big Endian=7.0_ppc64
redhat Enterprise Linux For Power Big Endian Eus=6.5_ppc64
redhat Enterprise Linux For Power Big Endian Eus=7.3_ppc64
redhat Enterprise Linux For Power Big Endian Eus=7.4_ppc64
redhat Enterprise Linux For Power Big Endian Eus=7.5_ppc64
redhat Enterprise Linux For Power Big Endian Eus=7.6_ppc64
redhat Enterprise Linux For Power Big Endian Eus=7.7_ppc64
redhat Enterprise Linux For Scientific Computing=6.0
redhat Enterprise Linux For Scientific Computing=7.0
redhat Enterprise Linux Server=5.0
redhat Enterprise Linux Server=6.0
redhat Enterprise Linux Server=7.0
redhat Enterprise Linux Server Aus=5.6
redhat Enterprise Linux Server Aus=5.9
redhat Enterprise Linux Server Aus=6.2
redhat Enterprise Linux Server Aus=6.4
redhat Enterprise Linux Server Aus=6.5
redhat Enterprise Linux Server Aus=7.3
redhat Enterprise Linux Server Aus=7.4
redhat Enterprise Linux Server Aus=7.6
redhat Enterprise Linux Server Aus=7.7
redhat Enterprise Linux Server From Rhui=5.0
redhat Enterprise Linux Server From Rhui=6.0
redhat Enterprise Linux Server From Rhui=7.0
redhat Enterprise Linux Server Tus=6.5
redhat Enterprise Linux Server Tus=7.3
redhat Enterprise Linux Server Tus=7.6
redhat Enterprise Linux Server Tus=7.7
redhat Enterprise Linux Workstation=5.0
redhat Enterprise Linux Workstation=6.0
redhat Enterprise Linux Workstation=7.0
SUSE Studio onsite=1.3
openSUSE openSUSE=12.3
openSUSE openSUSE=13.1
openSUSE openSUSE=13.2
SUSE Linux Enterprise Desktop=11-sp3
SUSE Linux Enterprise Desktop=12
SUSE Linux Enterprise Server=10-sp3
SUSE Linux Enterprise Server=10-sp4
SUSE Linux Enterprise Server=11-sp1
SUSE Linux Enterprise Server=11-sp2
SUSE Linux Enterprise Server=11-sp3
SUSE Linux Enterprise Server Vmware=11-sp3
SUSE Linux Enterprise Server=12
SUSE Linux Enterprise Software Development Kit=11-sp3
SUSE Linux Enterprise Software Development Kit=12
Debian Debian Linux=7.0
IBM Infosphere Guardium Database Activity Monitoring=8.2
IBM Infosphere Guardium Database Activity Monitoring=9.0
IBM Infosphere Guardium Database Activity Monitoring=9.1
IBM PureApplication System>=1.0.0.0<=1.0.0.4
IBM PureApplication System>=1.1.0.0<=1.1.0.4
IBM PureApplication System=2.0.0.0
IBM QRadar Risk Manager=7.1.0
IBM QRadar Security Information and Event Manager=7.1.0
IBM QRadar Security Information and Event Manager=7.1.0-mr1
IBM QRadar Security Information and Event Manager=7.1.0-mr2
IBM QRadar Security Information and Event Manager=7.1.1
IBM QRadar Security Information and Event Manager=7.1.1-p1
IBM QRadar Security Information and Event Manager=7.1.1-p2
IBM QRadar Security Information and Event Manager=7.1.1-p3
IBM QRadar Security Information and Event Manager=7.1.2
IBM QRadar Security Information and Event Manager=7.1.2-p1
IBM QRadar Security Information and Event Manager=7.1.2-p10
IBM QRadar Security Information and Event Manager=7.1.2-p11
IBM QRadar Security Information and Event Manager=7.1.2-p12
IBM QRadar Security Information and Event Manager=7.1.2-p13
IBM QRadar Security Information and Event Manager=7.1.2-p2
IBM QRadar Security Information and Event Manager=7.1.2-p3
IBM QRadar Security Information and Event Manager=7.1.2-p4
IBM QRadar Security Information and Event Manager=7.1.2-p5
IBM QRadar Security Information and Event Manager=7.1.2-p6
IBM QRadar Security Information and Event Manager=7.1.2-p7
IBM QRadar Security Information and Event Manager=7.1.2-p8
IBM QRadar Security Information and Event Manager=7.1.2-p9
IBM QRadar Security Information and Event Manager=7.2
IBM QRadar Security Information and Event Manager=7.2.0
IBM QRadar Security Information and Event Manager=7.2.0-p1
IBM QRadar Security Information and Event Manager=7.2.0-p2
IBM QRadar Security Information and Event Manager=7.2.0-p3
IBM QRadar Security Information and Event Manager=7.2.1
IBM QRadar Security Information and Event Manager=7.2.1-p1
IBM QRadar Security Information and Event Manager=7.2.1-p2
IBM QRadar Security Information and Event Manager=7.2.1-p3
IBM QRadar Security Information and Event Manager=7.2.2
IBM QRadar Security Information and Event Manager=7.2.2-p1
IBM QRadar Security Information and Event Manager=7.2.2-p2
IBM QRadar Security Information and Event Manager=7.2.2-p3
IBM QRadar Security Information and Event Manager=7.2.2-p4
IBM QRadar Security Information and Event Manager=7.2.3
IBM QRadar Security Information and Event Manager=7.2.3-p1
IBM QRadar Security Information and Event Manager=7.2.3-p2
IBM QRadar Security Information and Event Manager=7.2.3-p3
IBM QRadar Security Information and Event Manager=7.2.3-p4
IBM QRadar Security Information and Event Manager=7.2.4
IBM QRadar Security Information and Event Manager=7.2.4-p1
IBM QRadar Security Information and Event Manager=7.2.4-p2
IBM QRadar Security Information and Event Manager=7.2.4-p3
IBM QRadar Security Information and Event Manager=7.2.4-p4
IBM QRadar Security Information and Event Manager=7.2.4-p5
IBM QRadar Security Information and Event Manager=7.2.4-p6
IBM QRadar Security Information and Event Manager=7.2.5
IBM QRadar Security Information and Event Manager=7.2.5-p1
IBM QRadar Security Information and Event Manager=7.2.5-p2
IBM QRadar Security Information and Event Manager=7.2.5-p3
IBM QRadar Security Information and Event Manager=7.2.5-p4
IBM QRadar Security Information and Event Manager=7.2.5-p5
IBM QRadar Security Information and Event Manager=7.2.5-p6
IBM QRadar Security Information and Event Manager=7.2.6
IBM QRadar Security Information and Event Manager=7.2.6-p1
IBM QRadar Security Information and Event Manager=7.2.6-p2
IBM QRadar Security Information and Event Manager=7.2.6-p3
IBM QRadar Security Information and Event Manager=7.2.6-p4
IBM QRadar Security Information and Event Manager=7.2.6-p5
IBM QRadar Security Information and Event Manager=7.2.6-p6
IBM QRadar Security Information and Event Manager=7.2.6-p7
IBM QRadar Security Information and Event Manager=7.2.7
IBM QRadar Security Information and Event Manager=7.2.7-p1
IBM QRadar Security Information and Event Manager=7.2.7-p2
IBM QRadar Security Information and Event Manager=7.2.7-p3
IBM QRadar Security Information and Event Manager=7.2.7-p4
IBM QRadar Security Information and Event Manager=7.2.8
IBM QRadar Security Information and Event Manager=7.2.8-p1
IBM QRadar Security Information and Event Manager=7.2.8-p10
IBM QRadar Security Information and Event Manager=7.2.8-p11
IBM QRadar Security Information and Event Manager=7.2.8-p12
IBM QRadar Security Information and Event Manager=7.2.8-p13
IBM QRadar Security Information and Event Manager=7.2.8-p14
IBM QRadar Security Information and Event Manager=7.2.8-p15
IBM QRadar Security Information and Event Manager=7.2.8-p16
IBM QRadar Security Information and Event Manager=7.2.8-p2
IBM QRadar Security Information and Event Manager=7.2.8-p3
IBM QRadar Security Information and Event Manager=7.2.8-p4
IBM QRadar Security Information and Event Manager=7.2.8-p5
IBM QRadar Security Information and Event Manager=7.2.8-p6
IBM QRadar Security Information and Event Manager=7.2.8-p7
IBM QRadar Security Information and Event Manager=7.2.8-p8
IBM QRadar Security Information and Event Manager=7.2.8-p9
IBM QRadar Security Information and Event Manager=7.2.8.15
IBM QRadar Security Information and Event Manager=7.2.9
IBM QRadar Vulnerability Manager=7.2.0
IBM QRadar Vulnerability Manager=7.2.1
IBM QRadar Vulnerability Manager=7.2.2
IBM QRadar Vulnerability Manager=7.2.3
IBM QRadar Vulnerability Manager=7.2.4
IBM QRadar Vulnerability Manager=7.2.6-p1
IBM QRadar Vulnerability Manager=7.2.6-p2
IBM QRadar Vulnerability Manager=7.2.6-p3
IBM QRadar Vulnerability Manager=7.2.6-p4
IBM QRadar Vulnerability Manager=7.2.6-p5
IBM QRadar Vulnerability Manager=7.2.6-p6
IBM QRadar Vulnerability Manager=7.2.6-p7
IBM QRadar Vulnerability Manager=7.2.8
IBM QRadar Vulnerability Manager=7.2.8-p1
IBM QRadar Vulnerability Manager=7.2.8-p10
IBM QRadar Vulnerability Manager=7.2.8-p11
IBM QRadar Vulnerability Manager=7.2.8-p12
IBM QRadar Vulnerability Manager=7.2.8-p13
IBM QRadar Vulnerability Manager=7.2.8-p14
IBM QRadar Vulnerability Manager=7.2.8-p15
IBM QRadar Vulnerability Manager=7.2.8-p16
IBM QRadar Vulnerability Manager=7.2.8-p17
IBM QRadar Vulnerability Manager=7.2.8-p2
IBM QRadar Vulnerability Manager=7.2.8-p3
IBM QRadar Vulnerability Manager=7.2.8-p4
IBM QRadar Vulnerability Manager=7.2.8-p5
IBM QRadar Vulnerability Manager=7.2.8-p6
IBM QRadar Vulnerability Manager=7.2.8-p7
IBM QRadar Vulnerability Manager=7.2.8-p8
IBM QRadar Vulnerability Manager=7.2.8-p9
IBM Smartcloud Entry Appliance=2.3.0
IBM Smartcloud Entry Appliance=2.4.0
IBM Smartcloud Entry Appliance=3.1.0
IBM Smartcloud Entry Appliance=3.2.0
IBM SmartCloud Provisioning=2.1.0
IBM Software Defined Network For Virtual Environments<1.2.1
IBM Software Defined Network For Virtual Environments<1.2.1
IBM Software Defined Network For Virtual Environments<1.2.1
IBM Starter Kit For Cloud=2.2.0
IBM Workload Deployer>=3.1.0<=3.1.0.7
IBM Security Access Manager For Mobile 8.0 Firmware=8.0.0.1
IBM Security Access Manager For Mobile 8.0 Firmware=8.0.0.2
IBM Security Access Manager For Mobile 8.0 Firmware=8.0.0.3
IBM Security Access Manager For Mobile 8.0 Firmware=8.0.0.5
IBM Security Access Manager For Web 7.0 Firmware=7.0.0.1
IBM Security Access Manager For Web 7.0 Firmware=7.0.0.2
IBM Security Access Manager For Web 7.0 Firmware=7.0.0.3
IBM Security Access Manager For Web 7.0 Firmware=7.0.0.4
IBM Security Access Manager For Web 7.0 Firmware=7.0.0.5
IBM Security Access Manager For Web 7.0 Firmware=7.0.0.6
IBM Security Access Manager For Web 7.0 Firmware=7.0.0.7
IBM Security Access Manager For Web 7.0 Firmware=7.0.0.8
IBM Security Access Manager For Web 8.0 Firmware=8.0.0.2
IBM Security Access Manager For Web 8.0 Firmware=8.0.0.3
IBM Security Access Manager For Web 8.0 Firmware=8.0.0.5
All of the following
Any of the following
IBM Storwize V7000 Firmware>=1.1.0.0<1.4.3.5
IBM Storwize V7000 Firmware>=1.5.0.0<1.5.0.4
IBM Storwize V7000 Firmware>=7.2.0.0<7.2.0.9
IBM Storwize V7000 Firmware>=7.3.0.0<7.3.0.7
IBM Storwize V7000
All of the following
Any of the following
IBM Storwize V5000 Firmware>=1.1.0.0<7.1.0.11
IBM Storwize V5000 Firmware>=7.2.0.0<7.2.0.9
IBM Storwize V5000 Firmware>=7.3.0.0<7.3.0.7
IBM Storwize V5000
All of the following
Any of the following
IBM Storwize V3700 Firmware>=1.1.0.0<7.1.0.11
IBM Storwize V3700 Firmware>=7.2.0.0<7.2.0.9
IBM Storwize V3700 Firmware>=7.3.0.0<7.3.0.7
IBM Storwize V3700
All of the following
Any of the following
IBM Storwize V3500 Firmware>=1.1.0.0<7.1.0.11
IBM Storwize V3500 Firmware>=7.2.0.0<7.2.0.9
IBM Storwize V3500 Firmware>=7.3.0.0<7.3.0.7
IBM Storwize V3500
All of the following
Any of the following
IBM Flex System V7000 Firmware>=1.1.0.0<7.1.0.11
IBM Flex System V7000 Firmware>=7.2.0.0<7.2.0.9
IBM Flex System V7000 Firmware>=7.3.0.0<7.3.0.7
IBM Flex System V7000
All of the following
Any of the following
IBM San Volume Controller Firmware>=1.1.0.0<7.1.0.11
IBM San Volume Controller Firmware>=7.2.0.0<7.2.0.9
IBM San Volume Controller Firmware>=7.3.0.0<7.3.0.7
IBM SAN Volume Controller
All of the following
Any of the following
IBM Stn6500 Firmware>=3.8.0.0<3.8.0.07
IBM Stn6500 Firmware>=3.9.1.0<3.9.1.08
IBM Stn6500 Firmware>=4.1.2.0<4.1.2.06
IBM Stn6500
All of the following
Any of the following
IBM Stn6800 Firmware>=3.8.0.0<3.8.0.07
IBM Stn6800 Firmware>=3.9.1.0<3.9.1.08
IBM Stn6800 Firmware>=4.1.2.0<4.1.2.06
IBM Stn6800
All of the following
Any of the following
IBM Stn7800 Firmware>=3.8.0.0<3.8.0.07
IBM Stn7800 Firmware>=3.9.1.0<3.9.1.08
IBM Stn7800 Firmware>=4.1.2.0<4.1.2.06
IBM Stn7800
Canonical Ubuntu Linux=10.04
Canonical Ubuntu Linux=12.04
Canonical Ubuntu Linux=14.04
Novell ZENworks Configuration Management=10.3
Novell ZENworks Configuration Management=11
Novell ZENworks Configuration Management=11.1
Novell ZENworks Configuration Management=11.2
Novell ZENworks Configuration Management=11.3.0
Novell Open Enterprise Server Linux Kernel=2.0-sp3
Novell Open Enterprise Server Linux Kernel=11.0-sp2
Checkpoint Security Gateway<r77.30
F5 BIG-IP Access Policy Manager>=10.1.0<=10.2.4
F5 BIG-IP Access Policy Manager>=11.0.0<=11.5.1
F5 BIG-IP Access Policy Manager=11.6.0
F5 BIG-IP Advanced Firewall Manager>=11.3.0<=11.5.1
F5 BIG-IP Advanced Firewall Manager=11.6.0
F5 BIG-IP Analytics>=11.0.0<=11.5.1
F5 BIG-IP Analytics=11.6.0
F5 Big-ip Application Acceleration Manager>=11.4.0<=11.5.1
F5 Big-ip Application Acceleration Manager=11.6.0
F5 BIG-IP Application Security Manager>=10.0.0<=10.2.4
F5 BIG-IP Application Security Manager>=11.0.0<=11.5.1
F5 BIG-IP Application Security Manager=11.6.0
F5 BIG-IP Edge Gateway>=10.1.0<=10.2.4
F5 BIG-IP Edge Gateway>=11.0.0<=11.3.0
F5 Big-ip Global Traffic Manager>=10.0.0<=10.2.4
F5 Big-ip Global Traffic Manager>=11.0.0<=11.5.1
F5 Big-ip Global Traffic Manager=11.6.0
F5 Big-ip Link Controller>=10.0.0<=10.2.4
F5 Big-ip Link Controller>=11.0.0<=11.5.1
F5 Big-ip Link Controller=11.6.0
F5 Big-ip Local Traffic Manager>=10.0.0<=10.2.4
F5 Big-ip Local Traffic Manager>=11.0.0<=11.5.1
F5 Big-ip Local Traffic Manager=11.6.0
F5 Big-ip Policy Enforcement Manager>=11.3.0<=11.5.1
F5 Big-ip Policy Enforcement Manager=11.6.0
F5 Big-ip Protocol Security Module>=10.0.0<=10.2.4
F5 Big-ip Protocol Security Module>=11.0.0<=11.4.1
F5 Big-ip Wan Optimization Manager>=10.0.0<=10.2.4
F5 Big-ip Wan Optimization Manager>=11.0.0<=11.3.0
F5 Big-ip Webaccelerator>=10.0.0<=10.2.4
F5 Big-ip Webaccelerator>=11.0.0<=11.3.0
F5 BIG-IQ Cloud>=4.0.0<=4.4.0
F5 BIG-IQ Device>=4.2.0<=4.4.0
F5 BIG-IQ Security>=4.0.0<=4.4.0
F5 Enterprise Manager>=2.1.0<=2.3.0
F5 Enterprise Manager>=3.0.0<=3.1.1
F5 Traffix Signaling Delivery Controller>=4.0.0<=4.0.5
F5 Traffix Signaling Delivery Controller=3.3.2
F5 Traffix Signaling Delivery Controller=3.4.1
F5 Traffix Signaling Delivery Controller=3.5.1
F5 Traffix Signaling Delivery Controller=4.1.0
All of the following
F5 Arx Firmware>=6.0.0<=6.4.0
F5 Arx
All of the following
Any of the following
Citrix Netscaler Sdx Firmware<9.3.67.5r1
Citrix Netscaler Sdx Firmware>=10<10.1.129.11r1
Citrix Netscaler Sdx Firmware>=10.5<10.5.52.11r1
Citrix Netscaler Sdx
VMware vCenter Server Appliance=5.0
VMware vCenter Server Appliance=5.0-update_1
VMware vCenter Server Appliance=5.0-update_2
VMware vCenter Server Appliance=5.1
VMware vCenter Server Appliance=5.1-update_1
VMware vCenter Server Appliance=5.1-update_2
VMware vCenter Server Appliance=5.5
VMware vCenter Server Appliance=5.5-update_1
VMware ESX=4.0
VMware ESX=4.1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
GNU Bashto a version that resolves this vulnerability.Fixed in 4.3 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch CVE-2014-6271
Event History
Sep 25, 2014
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Data Sourced
via NVD·01:55 AM
RemedyDescriptionSeverityWeaknessAffected Software
Jan 28, 2022
Known Exploited
via CISA·12:00 AM
Mar 1, 58274
Event
via NVD·07:15 AM
Frequently Asked Questions
1
What is the severity of CVE-2014-7169?
The severity of CVE-2014-7169 is classified as critical due to the potential for remote code execution and the ability to manipulate files.
2
How do I fix CVE-2014-7169?
To fix CVE-2014-7169, users should upgrade GNU Bash to version 4.3-026 or later.
3
What systems are affected by CVE-2014-7169?
CVE-2014-7169 affects GNU Bash versions up to and including 4.3, as well as various systems that utilize Bash as their shell.
4
What does CVE-2014-7169 exploit in GNU Bash?
CVE-2014-7169 exploits a vulnerability in how Bash processes environment variables, allowing attackers to execute arbitrary commands.
5
Can CVE-2014-7169 be exploited remotely?
Yes, CVE-2014-7169 can be exploited remotely, making it critical for affected systems to be patched promptly.