CVEvulnerability

CVE-2014-6271

9.8 CRITICAL Known exploited Published 2014-09-24 Modified 2026-06-17 Official page ↗

CISA Known Exploited Vulnerability

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability — GNU Bourne-Again Shell (Bash)

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.

Added to KEV
2022-01-28
Remediation due
2022-07-28
Ransomware use
Unknown
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2014-6271
Status
Analyzed
Published
2014-09-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-78

Description

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka "ShellShock." NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.

Affected configurations

• gnu bash (<= 4.3) • arista eos (>= 4.9.0 < 4.9.12) • arista eos (>= 4.10.0 < 4.10.9) • arista eos (>= 4.11.0 < 4.11.11) • arista eos (>= 4.12.0 < 4.12.9) • arista eos (>= 4.13.0 < 4.13.9) • arista eos (>= 4.14.0 < 4.14.4f) • oracle linux 4 • oracle linux 5 • oracle linux 6 • qnap qts (< 4.1.1) • qnap qts 4.1.1 • mageia mageia 3.0 • mageia mageia 4.0 • redhat gluster storage server for on-premise 2.1 • redhat virtualization 3.4 • redhat enterprise linux 4.0 • redhat enterprise linux 5.0 • redhat enterprise linux 6.0 • redhat enterprise linux 7.0 • redhat enterprise linux desktop 5.0 • redhat enterprise linux desktop 6.0 • redhat enterprise linux desktop 7.0 • redhat enterprise linux eus 5.9 • redhat enterprise linux eus 6.4 • redhat enterprise linux eus 6.5 • redhat enterprise linux eus 7.3 • redhat enterprise linux eus 7.4 • redhat enterprise linux eus 7.5 • redhat enterprise linux eus 7.6 • redhat enterprise linux eus 7.7 • redhat enterprise linux for ibm z systems 5.9 s390x • redhat enterprise linux for ibm z systems 6.4 s390x • redhat enterprise linux for ibm z systems 6.5 s390x • redhat enterprise linux for ibm z systems 7.3 s390x • redhat enterprise linux for ibm z systems 7.4 s390x • redhat enterprise linux for ibm z systems 7.5 s390x • redhat enterprise linux for ibm z systems 7.6 s390x • redhat enterprise linux for ibm z systems 7.7 s390x • redhat enterprise linux for power big endian 5.0 ppc • redhat enterprise linux for power big endian 5.9 ppc • redhat enterprise linux for power big endian 6.0 ppc64 • redhat enterprise linux for power big endian 6.4 ppc64 • redhat enterprise linux for power big endian 7.0 ppc64 • redhat enterprise linux for power big endian eus 6.5 ppc64 • redhat enterprise linux for power big endian eus 7.3 ppc64 • redhat enterprise linux for power big endian eus 7.4 ppc64 • redhat enterprise linux for power big endian eus 7.5 ppc64 • redhat enterprise linux for power big endian eus 7.6 ppc64 • redhat enterprise linux for power big endian eus 7.7 ppc64 • redhat enterprise linux for scientific computing 6.0 • redhat enterprise linux for scientific computing 7.0 • redhat enterprise linux server 5.0 • redhat enterprise linux server 6.0 • redhat enterprise linux server 7.0 • redhat enterprise linux server aus 5.6 • redhat enterprise linux server aus 5.9 • redhat enterprise linux server aus 6.2 • redhat enterprise linux server aus 6.4 • redhat enterprise linux server aus 6.5 … and 168 more

Related

Weakness · CWE (1)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References