GNU Bash vulnerabilities
3 known CVE vulnerabilities in GNU Bash, translated and rated.
- CVE-2014-7187High
Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via deeply nested for loops.
- CVE-2014-7186High
The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted use of here documents.
- CVE-2014-6277High
GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, allowing remote attackers to execute arbitrary code or cause a denial of service via a crafted environment.