Exposures › CVE-2014-7169

CVE-2014-7169

Severity
high · on CISA KEV actively exploited
Source
CISA-KEV · kev
Published
2022-01-28
Reference
⚡ RCE ⌖ exploited in the wild shame 65/100 rceexploited-in-wild

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271.

Players implicated

gnu · vendorBourne-Again Shell (Bash) · product

Description

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.