Skip to content
COOEY

FAIL › dossier

Bourne-Again Shell (Bash)

PRODUCT

· dossier confidence 50%

GNU Bash is a foundational Unix shell with a documented history of critical remote code execution vulnerabilities stemming from environment variable parsing flaws. Its track record requires strict version control and patching protocols for defense-industrial-base environments.

Failure events
2
Zero-days
0
RCEs
2
On KEV
2
Critical
0
Worst shame
85
PROFILE
CategoryOperating System / ShellWhat they doGNU Bash is a Unix shell and command language interpreter that provides an interactive line-oriented interface for executing commands and scripts.
SECURITY POSTURE

GNU Bash has a history of critical remote code execution vulnerabilities in its environment variable parsing logic, requiring urgent patches and careful version management.

Notable failures
  • CVE-2014-6271 RCE
  • CVE-2014-7169 RCE
Patterns: repeated unpatched edge-device RCEs
FAILURE HISTORY · 2
DATEEVENTSEVSUMMARY
2022-01-28 CVE-2014-6271 high A remote code execution flaw in GNU Bash allowed attackers to execute arbitrary code via environment variables in versions 4.3 and earlier.
2022-01-28 CVE-2014-7169 high A remote code execution flaw in GNU Bash allowed attackers to execute arbitrary code via environment variables, a known vulnerability that remains actively exploited in the wild.
Open questions: Current patch status for CVE-2014-6271 and CVE-2014-7169 · Impact of these vulnerabilities on modern DIB environments
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-08-17 03:55:04.160142+00:00