CVE-2014-7187
dhclient 4.1 - Bash Environment Variable Command Injection (Shellshock)
Severity Score
10.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
3
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via deeply nested for loops, aka the "word_lineno" issue.
Error de superación de límite (off-by-one) en la función read_token_word en parse.y en GNU Bash hasta 4.3 bash43-026 permite a atacantes remotos causar una denegación de servicio (acceso a array fuera de rango y caída de la aplicación) o posiblemente tener otro impacto no especificado a través de profundamente anidados para bucles, también conocido como el problema 'word_lineno'.
An off-by-one error was discovered in the way Bash was handling deeply nested flow control constructs. Depending on the layout of the .bss segment, this could allow arbitrary execution of code that would not otherwise be executed by Bash.
DNS reverse lookups can be used as a vector of attack for the bash shellshock vulnerability.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2014-09-25 CVE Reserved
- 2014-09-27 CVE Published
- 2014-09-29 First Exploit
- 2024-08-06 CVE Updated
- 2024-09-26 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
- CWE-193: Off-by-one Error
CAPEC
References (127)
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/36933 | 2014-09-29 | |
| https://www.exploit-db.com/exploits/34860 | 2014-10-02 | |
| http://openwall.com/lists/oss-security/2014/09/25/32 | 2024-08-06 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Gnu Search vendor "Gnu" | Bash Search vendor "Gnu" for product "Bash" | 1.14.0 Search vendor "Gnu" for product "Bash" and version "1.14.0" | - |
Affected
| ||||||
| Gnu Search vendor "Gnu" | Bash Search vendor "Gnu" for product "Bash" | 1.14.1 Search vendor "Gnu" for product "Bash" and version "1.14.1" | - |
Affected
| ||||||
| Gnu Search vendor "Gnu" | Bash Search vendor "Gnu" for product "Bash" | 1.14.2 Search vendor "Gnu" for product "Bash" and version "1.14.2" | - |
Affected
| ||||||
| Gnu Search vendor "Gnu" | Bash Search vendor "Gnu" for product "Bash" | 1.14.3 Search vendor "Gnu" for product "Bash" and version "1.14.3" | - |
Affected
| ||||||
| Gnu Search vendor "Gnu" | Bash Search vendor "Gnu" for product "Bash" | 1.14.4 Search vendor "Gnu" for product "Bash" and version "1.14.4" | - |
Affected
| ||||||
| Gnu Search vendor "Gnu" | Bash Search vendor "Gnu" for product "Bash" | 1.14.5 Search vendor "Gnu" for product "Bash" and version "1.14.5" | - |
Affected
| ||||||
| Gnu Search vendor "Gnu" | Bash Search vendor "Gnu" for product "Bash" | 1.14.6 Search vendor "Gnu" for product "Bash" and version "1.14.6" | - |
Affected
| ||||||
| Gnu Search vendor "Gnu" | Bash Search vendor "Gnu" for product "Bash" | 1.14.7 Search vendor "Gnu" for product "Bash" and version "1.14.7" | - |
Affected
| ||||||
| Gnu Search vendor "Gnu" | Bash Search vendor "Gnu" for product "Bash" | 2.0 Search vendor "Gnu" for product "Bash" and version "2.0" | - |
Affected
| ||||||
| Gnu Search vendor "Gnu" | Bash Search vendor "Gnu" for product "Bash" | 2.01 Search vendor "Gnu" for product "Bash" and version "2.01" | - |
Affected
| ||||||
| Gnu Search vendor "Gnu" | Bash Search vendor "Gnu" for product "Bash" | 2.01.1 Search vendor "Gnu" for product "Bash" and version "2.01.1" | - |
Affected
| ||||||
| Gnu Search vendor "Gnu" | Bash Search vendor "Gnu" for product "Bash" | 2.02 Search vendor "Gnu" for product "Bash" and version "2.02" | - |
Affected
| ||||||
| Gnu Search vendor "Gnu" | Bash Search vendor "Gnu" for product "Bash" | 2.02.1 Search vendor "Gnu" for product "Bash" and version "2.02.1" | - |
Affected
| ||||||
| Gnu Search vendor "Gnu" | Bash Search vendor "Gnu" for product "Bash" | 2.03 Search vendor "Gnu" for product "Bash" and version "2.03" | - |
Affected
| ||||||
| Gnu Search vendor "Gnu" | Bash Search vendor "Gnu" for product "Bash" | 2.04 Search vendor "Gnu" for product "Bash" and version "2.04" | - |
Affected
| ||||||
| Gnu Search vendor "Gnu" | Bash Search vendor "Gnu" for product "Bash" | 2.05 Search vendor "Gnu" for product "Bash" and version "2.05" | - |
Affected
| ||||||
| Gnu Search vendor "Gnu" | Bash Search vendor "Gnu" for product "Bash" | 2.05 Search vendor "Gnu" for product "Bash" and version "2.05" | a |
Affected
| ||||||
| Gnu Search vendor "Gnu" | Bash Search vendor "Gnu" for product "Bash" | 2.05 Search vendor "Gnu" for product "Bash" and version "2.05" | b |
Affected
| ||||||
| Gnu Search vendor "Gnu" | Bash Search vendor "Gnu" for product "Bash" | 3.0 Search vendor "Gnu" for product "Bash" and version "3.0" | - |
Affected
| ||||||
| Gnu Search vendor "Gnu" | Bash Search vendor "Gnu" for product "Bash" | 3.0.16 Search vendor "Gnu" for product "Bash" and version "3.0.16" | - |
Affected
| ||||||
| Gnu Search vendor "Gnu" | Bash Search vendor "Gnu" for product "Bash" | 3.1 Search vendor "Gnu" for product "Bash" and version "3.1" | - |
Affected
| ||||||
| Gnu Search vendor "Gnu" | Bash Search vendor "Gnu" for product "Bash" | 3.2 Search vendor "Gnu" for product "Bash" and version "3.2" | - |
Affected
| ||||||
| Gnu Search vendor "Gnu" | Bash Search vendor "Gnu" for product "Bash" | 3.2.48 Search vendor "Gnu" for product "Bash" and version "3.2.48" | - |
Affected
| ||||||
| Gnu Search vendor "Gnu" | Bash Search vendor "Gnu" for product "Bash" | 4.0 Search vendor "Gnu" for product "Bash" and version "4.0" | - |
Affected
| ||||||
| Gnu Search vendor "Gnu" | Bash Search vendor "Gnu" for product "Bash" | 4.0 Search vendor "Gnu" for product "Bash" and version "4.0" | rc1 |
Affected
| ||||||
| Gnu Search vendor "Gnu" | Bash Search vendor "Gnu" for product "Bash" | 4.1 Search vendor "Gnu" for product "Bash" and version "4.1" | - |
Affected
| ||||||
| Gnu Search vendor "Gnu" | Bash Search vendor "Gnu" for product "Bash" | 4.2 Search vendor "Gnu" for product "Bash" and version "4.2" | - |
Affected
| ||||||
| Gnu Search vendor "Gnu" | Bash Search vendor "Gnu" for product "Bash" | 4.3 Search vendor "Gnu" for product "Bash" and version "4.3" | - |
Affected
| ||||||