{ "CVE_data_meta" : { "ASSIGNER" : "cve@mitre.org", "ID" : "CVE-2014-7187", "STATE" : "PUBLIC" }, "affects" : { "vendor" : { "vendor_data" : [ { "product" : { "product_data" : [ { "product_name" : "n/a", "version" : { "version_data" : [ { "version_value" : "n/a" } ] } } ] }, "vendor_name" : "n/a" } ] } }, "data_format" : "MITRE", "data_type" : "CVE", "data_version" : "4.0", "description" : { "description_data" : [ { "lang" : "eng", "value" : "Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via deeply nested for loops, aka the \"word_lineno\" issue." } ] }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "eng", "value" : "n/a" } ] } ] }, "references" : { "reference_data" : [ { "name" : "20141001 NEW VMSA-2014-0010 - VMware product updates address critical Bash security vulnerabilities", "refsource" : "BUGTRAQ", "url" : "http://www.securityfocus.com/archive/1/archive/1/533593/100/0/threaded" }, { "name" : "20141001 FW: NEW VMSA-2014-0010 - VMware product updates address critical Bash security vulnerabilities", "refsource" : "FULLDISC", "url" : "http://seclists.org/fulldisclosure/2014/Oct/0" }, { "name" : "[oss-security] 20140925 Fwd: Non-upstream patches for bash", "refsource" : "MLIST", "url" : "http://openwall.com/lists/oss-security/2014/09/25/32" }, { "name" : "[oss-security] 20140926 Re: Fwd: Non-upstream patches for bash", "refsource" : "MLIST", "url" : "http://openwall.com/lists/oss-security/2014/09/26/2" }, { "name" : "[oss-security] 20140928 Re: CVE-2014-6271: remote code execution through bash", "refsource" : "MLIST", "url" : "http://openwall.com/lists/oss-security/2014/09/28/10" }, { "name" : "http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.html", "refsource" : "MISC", "url" : "http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.html" }, { "name" : "http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html", "refsource" : "MISC", "url" : "http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html" }, { "name" : "http://support.novell.com/security/cve/CVE-2014-7187.html", "refsource" : "CONFIRM", "url" : "http://support.novell.com/security/cve/CVE-2014-7187.html" }, { "name" : "https://www.suse.com/support/shellshock/", "refsource" : "CONFIRM", "url" : "https://www.suse.com/support/shellshock/" }, { "name" : "https://kb.bluecoat.com/index?page=content&id=SA82", "refsource" : "CONFIRM", "url" : "https://kb.bluecoat.com/index?page=content&id=SA82" }, { "name" : "http://www-01.ibm.com/support/docview.wss?uid=isg3T1021272", "refsource" : "CONFIRM", "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg3T1021272" }, { "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21685749", "refsource" : "CONFIRM", "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21685749" }, { "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21685914", "refsource" : "CONFIRM", "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21685914" }, { "name" : "http://www.novell.com/support/kb/doc.php?id=7015721", "refsource" : "CONFIRM", "url" : "http://www.novell.com/support/kb/doc.php?id=7015721" }, { "name" : "http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html", "refsource" : "CONFIRM", "url" : "http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html" }, { "name" : "http://www.vmware.com/security/advisories/VMSA-2014-0010.html", "refsource" : "CONFIRM", "url" : "http://www.vmware.com/security/advisories/VMSA-2014-0010.html" }, { "name" : "https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10648", "refsource" : "CONFIRM", "url" : "https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10648" }, { "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21686084", "refsource" : "CONFIRM", "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21686084" }, { "name" : "http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279", "refsource" : "CONFIRM", "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279" }, { "name" : "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879", "refsource" : "CONFIRM", "url" : "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879" }, { "name" : "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897", "refsource" : "CONFIRM", "url" : "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897" }, { "name" : "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898", "refsource" : "CONFIRM", "url" : "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898" }, { "name" : "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915", "refsource" : "CONFIRM", "url" : "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915" }, { "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21685604", "refsource" : "CONFIRM", "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21685604" }, { "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21685733", "refsource" : "CONFIRM", "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21685733" }, { "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21686131", "refsource" : "CONFIRM", "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21686131" }, { "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21686479", "refsource" : "CONFIRM", "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21686479" }, { "name" : "http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315", "refsource" : "CONFIRM", "url" : "http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315" }, { "name" : "https://support.citrix.com/article/CTX200217", "refsource" : "CONFIRM", "url" : "https://support.citrix.com/article/CTX200217" }, { "name" : "https://support.citrix.com/article/CTX200223", "refsource" : "CONFIRM", "url" : "https://support.citrix.com/article/CTX200223" }, { "name" : "https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html", "refsource" : "CONFIRM", "url" : "https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html" }, { "name" : "http://www-01.ibm.com/support/docview.wss?uid=isg3T1021361", "refsource" : "CONFIRM", "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg3T1021361" }, { "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21686246", "refsource" : "CONFIRM", "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21686246" }, { "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21686445", "refsource" : "CONFIRM", "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21686445" }, { "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21686494", "refsource" : "CONFIRM", "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21686494" }, { "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21687079", "refsource" : "CONFIRM", "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21687079" }, { "name" : "https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk102673&src=securityAlerts", "refsource" : "CONFIRM", "url" : "https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk102673&src=securityAlerts" }, { "name" : "http://www.qnap.com/i/en/support/con_show.php?cid=61", "refsource" : "CONFIRM", "url" : "http://www.qnap.com/i/en/support/con_show.php?cid=61" }, { "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21686447", "refsource" : "CONFIRM", "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21686447" }, { "name" : "http://support.apple.com/HT204244", "refsource" : "CONFIRM", "url" : "http://support.apple.com/HT204244" }, { "name" : "https://support.apple.com/HT205267", "refsource" : "CONFIRM", "url" : "https://support.apple.com/HT205267" }, { "name" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10085", "refsource" : "CONFIRM", "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10085" }, { "name" : "APPLE-SA-2015-01-27-4", "refsource" : "APPLE", "url" : "http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html" }, { "name" : "APPLE-SA-2015-09-30-3", "refsource" : "APPLE", "url" : "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html" }, { "name" : "20140926 GNU Bash Environment Variable Command Injection Vulnerability", "refsource" : "CISCO", "url" : "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bash" }, { "name" : "HPSBGN03138", "refsource" : "HP", "url" : "http://marc.info/?l=bugtraq&m=141330468527613&w=2" }, { "name" : "HPSBHF03125", "refsource" : "HP", "url" : "http://marc.info/?l=bugtraq&m=141345648114150&w=2" }, { "name" : "HPSBGN03141", "refsource" : "HP", "url" : "http://marc.info/?l=bugtraq&m=141383304022067&w=2" }, { "name" : "HPSBGN03142", "refsource" : "HP", "url" : "http://marc.info/?l=bugtraq&m=141383244821813&w=2" }, { "name" : "HPSBMU03143", "refsource" : "HP", "url" : "http://marc.info/?l=bugtraq&m=141383026420882&w=2" }, { "name" : "HPSBMU03144", "refsource" : "HP", "url" : "http://marc.info/?l=bugtraq&m=141383081521087&w=2" }, { "name" : "HPSBST03129", "refsource" : "HP", "url" : "http://marc.info/?l=bugtraq&m=141383196021590&w=2" }, { "name" : "HPSBST03131", "refsource" : "HP", "url" : "http://marc.info/?l=bugtraq&m=141383138121313&w=2" }, { "name" : "HPSBST03157", "refsource" : "HP", "url" : "http://marc.info/?l=bugtraq&m=141450491804793&w=2" }, { "name" : "HPSBMU03165", "refsource" : "HP", "url" : "http://marc.info/?l=bugtraq&m=141577137423233&w=2" }, { "name" : "HPSBMU03182", "refsource" : "HP", "url" : "http://marc.info/?l=bugtraq&m=141585637922673&w=2" }, { "name" : "HPSBST03154", "refsource" : "HP", "url" : "http://marc.info/?l=bugtraq&m=141577297623641&w=2" }, { "name" : "HPSBST03155", "refsource" : "HP", "url" : "http://marc.info/?l=bugtraq&m=141576728022234&w=2" }, { "name" : "HPSBST03181", "refsource" : "HP", "url" : "http://marc.info/?l=bugtraq&m=141577241923505&w=2" }, { "name" : "HPSBST03148", "refsource" : "HP", "url" : "http://marc.info/?l=bugtraq&m=141694386919794&w=2" }, { "name" : "HPSBMU03217", "refsource" : "HP", "url" : "http://marc.info/?l=bugtraq&m=141879528318582&w=2" }, { "name" : "HPSBMU03236", "refsource" : "HP", "url" : "http://marc.info/?l=bugtraq&m=142289270617409&w=2" }, { "name" : "HPSBMU03245", "refsource" : "HP", "url" : "http://marc.info/?l=bugtraq&m=142358026505815&w=2" }, { "name" : "HPSBMU03246", "refsource" : "HP", "url" : "http://marc.info/?l=bugtraq&m=142358078406056&w=2" }, { "name" : "SSRT101742", "refsource" : "HP", "url" : "http://marc.info/?l=bugtraq&m=142358026505815&w=2" }, { "name" : "SSRT101827", "refsource" : "HP", "url" : "http://marc.info/?l=bugtraq&m=141879528318582&w=2" }, { "name" : "SSRT101830", "refsource" : "HP", "url" : "http://marc.info/?l=bugtraq&m=142289270617409&w=2" }, { "name" : "HPSBGN03233", "refsource" : "HP", "url" : "http://marc.info/?l=bugtraq&m=142118135300698&w=2" }, { "name" : "SSRT101739", "refsource" : "HP", "url" : "http://marc.info/?l=bugtraq&m=142118135300698&w=2" }, { "name" : "SSRT101868", "refsource" : "HP", "url" : "http://marc.info/?l=bugtraq&m=142118135300698&w=2" }, { "name" : "HPSBMU03220", "refsource" : "HP", "url" : "http://marc.info/?l=bugtraq&m=142721162228379&w=2" }, { "name" : "SSRT101819", "refsource" : "HP", "url" : "http://marc.info/?l=bugtraq&m=142721162228379&w=2" }, { "name" : "MDVSA-2015:164", "refsource" : "MANDRIVA", "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2015:164" }, { "name" : "RHSA-2014:1311", "refsource" : "REDHAT", "url" : "http://rhn.redhat.com/errata/RHSA-2014-1311.html" }, { "name" : "RHSA-2014:1312", "refsource" : "REDHAT", "url" : "http://rhn.redhat.com/errata/RHSA-2014-1312.html" }, { "name" : "RHSA-2014:1354", "refsource" : "REDHAT", "url" : "http://rhn.redhat.com/errata/RHSA-2014-1354.html" }, { "name" : "SUSE-SU-2014:1247", "refsource" : "SUSE", "url" : "http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00042.html" }, { "name" : "SUSE-SU-2014:1259", "refsource" : "SUSE", "url" : "http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00048.html" }, { "name" : "openSUSE-SU-2014:1229", "refsource" : "SUSE", "url" : "http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00038.html" }, { "name" : "openSUSE-SU-2014:1242", "refsource" : "SUSE", "url" : "http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00041.html" }, { "name" : "openSUSE-SU-2014:1254", "refsource" : "SUSE", "url" : "http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.html" }, { "name" : "openSUSE-SU-2014:1308", "refsource" : "SUSE", "url" : "http://lists.opensuse.org/opensuse-updates/2014-10/msg00023.html" }, { "name" : "openSUSE-SU-2014:1310", "refsource" : "SUSE", "url" : "http://lists.opensuse.org/opensuse-updates/2014-10/msg00025.html" }, { "name" : "USN-2364-1", "refsource" : "UBUNTU", "url" : "http://www.ubuntu.com/usn/USN-2364-1" }, { "name" : "JVN#55667175", "refsource" : "JVN", "url" : "http://jvn.jp/en/jp/JVN55667175/index.html" }, { "name" : "JVNDB-2014-000126", "refsource" : "JVNDB", "url" : "http://jvndb.jvn.jp/jvndb/JVNDB-2014-000126" }, { "name" : "61479", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/61479" }, { "name" : "61618", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/61618" }, { "name" : "61622", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/61622" }, { "name" : "61636", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/61636" }, { "name" : "61641", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/61641" }, { "name" : "59907", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/59907" }, { "name" : "61283", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/61283" }, { "name" : "61485", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/61485" }, { "name" : "61503", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/61503" }, { "name" : "61552", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/61552" }, { "name" : "61565", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/61565" }, { "name" : "61603", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/61603" }, { "name" : "61633", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/61633" }, { "name" : "61643", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/61643" }, { "name" : "61654", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/61654" }, { "name" : "61703", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/61703" }, { "name" : "61188", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/61188" }, { "name" : "58200", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/58200" }, { "name" : "60034", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/60034" }, { "name" : "60055", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/60055" }, { "name" : "60193", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/60193" }, { "name" : "61065", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/61065" }, { "name" : "61128", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/61128" }, { "name" : "61129", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/61129" }, { "name" : "61287", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/61287" }, { "name" : "61312", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/61312" }, { "name" : "61313", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/61313" }, { "name" : "61328", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/61328" }, { "name" : "61442", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/61442" }, { "name" : "61550", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/61550" }, { "name" : "61816", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/61816" }, { "name" : "61855", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/61855" }, { "name" : "61857", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/61857" }, { "name" : "60024", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/60024" }, { "name" : "60063", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/60063" }, { "name" : "60044", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/60044" }, { "name" : "60433", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/60433" }, { "name" : "61291", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/61291" }, { "name" : "61873", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/61873" }, { "name" : "62312", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/62312" }, { "name" : "62343", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/62343" } ] } }