Back to CVE records
Critical 9.8Known exploited (CISA KEV)Published Sep 25, 2014
CVE-2014-7169GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or poss…
Updated under an hour ago ()
Does this affect you?
It affects gnu bash and 59 other products. Add what you run to find out whether that includes you.
CISA lists it as known exploited since Jan 28, 2022; federal agencies had to remediate by Jul 28, 2022. Treat that date as your deadline.
Do this next
Start free and add your stack
Free account, 1 product
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271.
- CVSS
- 9.8 CRITICAL (v3.1, CISA ADP)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- CWE-78
- Known exploited
- Added to CISA KEV Jan 28, 2022; federal remediation due Jul 28, 2022Apply updates per vendor instructions.
- EPSS (exploitation in the next 30 days)
- 99.94% (percentile 100)
- Assigned by
- mitre
- NVD analysis
- Analyzed
- Record last updated
- Oct 22, 2025
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
gnu bash gnu:bash | through 4.3 | NVD |
arista eos arista:eos | from 4.9.0 before 4.9.12; from 4.10.0 before 4.10.9; from 4.11.0 before 4.11.11; from 4.12.0 before 4.12.9; from 4.13.0 before 4.13.9; from 4.14.0 before 4.14.4f | NVD |
oracle linux oracle:linux | 4; 5; 6 | NVD |
qnap qts qnap:qts | before 4.1.1; 4.1.1; 4.1.1 | NVD |
mageia mageia mageia:mageia | 3.0; 4.0 | NVD |
redhat gluster_storage_server_for_on-premise redhat:gluster_storage_server_for_on-premise | 2.1 | NVD |
redhat virtualization redhat:virtualization | 3.4 | NVD |
redhat enterprise_linux redhat:enterprise_linux | 4.0; 5.0; 6.0; 7.0 | NVD |
redhat enterprise_linux_desktop redhat:enterprise_linux_desktop | 5.0; 6.0; 7.0 | NVD |
redhat enterprise_linux_eus redhat:enterprise_linux_eus | 5.9; 6.4; 6.5; 7.3; 7.4; 7.5; 7.6; 7.7 | NVD |
redhat enterprise_linux_for_ibm_z_systems redhat:enterprise_linux_for_ibm_z_systems | 5.9_s390x; 6.4_s390x; 6.5_s390x; 7.3_s390x; 7.4_s390x; 7.5_s390x; 7.6_s390x; 7.7_s390x | NVD |
redhat enterprise_linux_for_power_big_endian redhat:enterprise_linux_for_power_big_endian | 5.0_ppc; 5.9_ppc; 6.0_ppc64; 6.4_ppc64; 7.0_ppc64 | NVD |
redhat enterprise_linux_for_power_big_endian_eus redhat:enterprise_linux_for_power_big_endian_eus | 6.5_ppc64; 7.3_ppc64; 7.4_ppc64; 7.5_ppc64; 7.6_ppc64; 7.7_ppc64 | NVD |
redhat enterprise_linux_for_scientific_computing redhat:enterprise_linux_for_scientific_computing | 6.0; 7.0 | NVD |
redhat enterprise_linux_server redhat:enterprise_linux_server | 5.0; 6.0; 7.0 | NVD |
redhat enterprise_linux_server_aus redhat:enterprise_linux_server_aus | 5.6; 5.9; 6.2; 6.4; 6.5; 7.3; 7.4; 7.6; and 1 more ranges | NVD |
redhat enterprise_linux_server_from_rhui redhat:enterprise_linux_server_from_rhui | 5.0; 6.0; 7.0 | NVD |
redhat enterprise_linux_server_tus redhat:enterprise_linux_server_tus | 6.5; 7.3; 7.6; 7.7 | NVD |
redhat enterprise_linux_workstation redhat:enterprise_linux_workstation | 5.0; 6.0; 7.0 | NVD |
suse studio_onsite suse:studio_onsite | 1.3 | NVD |
opensuse opensuse opensuse:opensuse | 12.3; 13.1; 13.2 | NVD |
suse linux_enterprise_desktop suse:linux_enterprise_desktop | 11; 12 | NVD |
suse linux_enterprise_server suse:linux_enterprise_server | 10; 10; 11; 11; 11; 11; 12 | NVD |
suse linux_enterprise_software_development_kit suse:linux_enterprise_software_development_kit | 11; 12 | NVD |
debian debian_linux debian:debian_linux | 7.0 | NVD |
ibm infosphere_guardium_database_activity_monitoring ibm:infosphere_guardium_database_activity_monitoring | 8.2; 9.0; 9.1 | NVD |
ibm pureapplication_system ibm:pureapplication_system | from 1.0.0.0 through 1.0.0.4; from 1.1.0.0 through 1.1.0.4; 2.0.0.0 | NVD |
ibm qradar_risk_manager ibm:qradar_risk_manager | 7.1.0 | NVD |
ibm qradar_security_information_and_event_manager ibm:qradar_security_information_and_event_manager | 7.1.0; 7.1.0; 7.1.0; 7.1.1; 7.1.1; 7.1.1; 7.1.1; 7.1.2; and 78 more ranges | NVD |
ibm qradar_vulnerability_manager ibm:qradar_vulnerability_manager | 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; 7.2.6; 7.2.6; 7.2.6; and 22 more ranges | NVD |
ibm smartcloud_entry_appliance ibm:smartcloud_entry_appliance | 2.3.0; 2.4.0; 3.1.0; 3.2.0 | NVD |
ibm smartcloud_provisioning ibm:smartcloud_provisioning | 2.1.0 | NVD |
ibm software_defined_network_for_virtual_environments ibm:software_defined_network_for_virtual_environments | before 1.2.1; before 1.2.1; before 1.2.1 | NVD |
ibm starter_kit_for_cloud ibm:starter_kit_for_cloud | 2.2.0 | NVD |
ibm workload_deployer ibm:workload_deployer | from 3.1.0 through 3.1.0.7 | NVD |
ibm security_access_manager_for_mobile_8.0_firmware ibm:security_access_manager_for_mobile_8.0_firmware | 8.0.0.1; 8.0.0.2; 8.0.0.3; 8.0.0.5 | NVD |
ibm security_access_manager_for_web_7.0_firmware ibm:security_access_manager_for_web_7.0_firmware | 7.0.0.1; 7.0.0.2; 7.0.0.3; 7.0.0.4; 7.0.0.5; 7.0.0.6; 7.0.0.7; 7.0.0.8 | NVD |
ibm security_access_manager_for_web_8.0_firmware ibm:security_access_manager_for_web_8.0_firmware | 8.0.0.2; 8.0.0.3; 8.0.0.5 | NVD |
ibm storwize_v7000_firmware ibm:storwize_v7000_firmware | from 1.1.0.0 before 1.4.3.5; from 1.5.0.0 before 1.5.0.4; from 7.2.0.0 before 7.2.0.9; from 7.3.0.0 before 7.3.0.7 | NVD |
ibm storwize_v5000_firmware ibm:storwize_v5000_firmware | from 1.1.0.0 before 7.1.0.11; from 7.2.0.0 before 7.2.0.9; from 7.3.0.0 before 7.3.0.7 | NVD |
ibm storwize_v3700_firmware ibm:storwize_v3700_firmware | from 1.1.0.0 before 7.1.0.11; from 7.2.0.0 before 7.2.0.9; from 7.3.0.0 before 7.3.0.7 | NVD |
ibm storwize_v3500_firmware ibm:storwize_v3500_firmware | from 1.1.0.0 before 7.1.0.11; from 7.2.0.0 before 7.2.0.9; from 7.3.0.0 before 7.3.0.7 | NVD |
ibm flex_system_v7000_firmware ibm:flex_system_v7000_firmware | from 1.1.0.0 before 7.1.0.11; from 7.2.0.0 before 7.2.0.9; from 7.3.0.0 before 7.3.0.7 | NVD |
ibm san_volume_controller_firmware ibm:san_volume_controller_firmware | from 1.1.0.0 before 7.1.0.11; from 7.2.0.0 before 7.2.0.9; from 7.3.0.0 before 7.3.0.7 | NVD |
ibm stn6500_firmware ibm:stn6500_firmware | from 3.8.0.0 before 3.8.0.07; from 3.9.1.0 before 3.9.1.08; from 4.1.2.0 before 4.1.2.06 | NVD |
ibm stn6800_firmware ibm:stn6800_firmware | from 3.8.0.0 before 3.8.0.07; from 3.9.1.0 before 3.9.1.08; from 4.1.2.0 before 4.1.2.06 | NVD |
ibm stn7800_firmware ibm:stn7800_firmware | from 3.8.0.0 before 3.8.0.07; from 3.9.1.0 before 3.9.1.08; from 4.1.2.0 before 4.1.2.06 | NVD |
canonical ubuntu_linux canonical:ubuntu_linux | 10.04; 12.04; 14.04 | NVD |
novell zenworks_configuration_management novell:zenworks_configuration_management | 10.3; 11; 11.1; 11.2; 11.3.0 | NVD |
novell open_enterprise_server novell:open_enterprise_server | 2.0; 11.0 | NVD |
checkpoint security_gateway checkpoint:security_gateway | before r77.30 | NVD |
f5 big-ip_access_policy_manager f5:big-ip_access_policy_manager | from 10.1.0 through 10.2.4; from 11.0.0 through 11.5.1; 11.6.0 | NVD |
f5 big-ip_advanced_firewall_manager f5:big-ip_advanced_firewall_manager | from 11.3.0 through 11.5.1; 11.6.0 | NVD |
f5 big-ip_analytics f5:big-ip_analytics | from 11.0.0 through 11.5.1; 11.6.0 | NVD |
f5 big-ip_application_acceleration_manager f5:big-ip_application_acceleration_manager | from 11.4.0 through 11.5.1; 11.6.0 | NVD |
f5 big-ip_application_security_manager f5:big-ip_application_security_manager | from 10.0.0 through 10.2.4; from 11.0.0 through 11.5.1; 11.6.0 | NVD |
f5 big-ip_edge_gateway f5:big-ip_edge_gateway | from 10.1.0 through 10.2.4; from 11.0.0 through 11.3.0 | NVD |
f5 big-ip_global_traffic_manager f5:big-ip_global_traffic_manager | from 10.0.0 through 10.2.4; from 11.0.0 through 11.5.1; 11.6.0 | NVD |
f5 big-ip_link_controller f5:big-ip_link_controller | from 10.0.0 through 10.2.4; from 11.0.0 through 11.5.1; 11.6.0 | NVD |
f5 big-ip_local_traffic_manager f5:big-ip_local_traffic_manager | from 10.0.0 through 10.2.4; from 11.0.0 through 11.5.1; 11.6.0 | NVD |
References
- http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.htmlx-refsource-misc
- http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897x-refsource-confirm
- http://www-01.ibm.com/support/docview.wss?uid=swg21685749x-refsource-confirm
- http://www.openwall.com/lists/oss-security/2014/09/24/32mailing-list, x-refsource-mlist
- http://marc.info/?l=bugtraq&m=141577137423233&w=2vendor-advisory, x-refsource-hp
- http://marc.info/?l=bugtraq&m=141216668515282&w=2vendor-advisory, x-refsource-hp, mailing-list
- https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk102673&src=securityAlertsx-refsource-confirm
- http://marc.info/?l=bugtraq&m=141383138121313&w=2vendor-advisory, x-refsource-hp
- http://marc.info/?l=bugtraq&m=142721162228379&w=2vendor-advisory, x-refsource-hp
- http://www.securityfocus.com/archive/1/533593/100/0/threadedmailing-list, x-refsource-bugtraq
- http://marc.info/?l=bugtraq&m=142358026505815&w=2vendor-advisory, x-refsource-hp
- http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00038.htmlvendor-advisory, x-refsource-suse, mailing-list, third-party-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21686084x-refsource-confirm
- http://www-01.ibm.com/support/docview.wss?uid=swg21686479x-refsource-confirm
- http://secunia.com/advisories/61188third-party-advisory, x-refsource-secunia
- http://jvn.jp/en/jp/JVN55667175/index.htmlthird-party-advisory, x-refsource-jvn
- http://secunia.com/advisories/61676third-party-advisory, x-refsource-secunia
- http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.htmlvendor-advisory, x-refsource-suse, mailing-list, third-party-advisory
- http://secunia.com/advisories/60433third-party-advisory, x-refsource-secunia
- http://marc.info/?l=bugtraq&m=141383026420882&w=2vendor-advisory, x-refsource-hp, mailing-list
- http://marc.info/?l=bugtraq&m=141585637922673&w=2vendor-advisory, x-refsource-hp
- http://rhn.redhat.com/errata/RHSA-2014-1306.htmlvendor-advisory, x-refsource-redhat
- http://marc.info/?l=bugtraq&m=141576728022234&w=2vendor-advisory, x-refsource-hp
- http://www-01.ibm.com/support/docview.wss?uid=swg21685541x-refsource-confirm
- http://secunia.com/advisories/61715third-party-advisory, x-refsource-secunia
- http://advisories.mageia.org/MGASA-2014-0393.htmlthird-party-advisory
- http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.htmlbroken-link
- http://jvndb.jvn.jp/jvndb/JVNDB-2014-000126third-party-advisory, vdb-entry
- http://lcamtuf.blogspot.com/2014/09/quick-notes-about-bash-bug-its-impact.htmlthird-party-advisory
- http://linux.oracle.com/errata/ELSA-2014-1306.htmlthird-party-advisory
- http://linux.oracle.com/errata/ELSA-2014-3075.htmlthird-party-advisory
- http://linux.oracle.com/errata/ELSA-2014-3077.htmlthird-party-advisory
- http://linux.oracle.com/errata/ELSA-2014-3078.htmlthird-party-advisory
- http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00041.htmlmailing-list, third-party-advisory
- http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00042.htmlmailing-list, third-party-advisory
- http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00048.htmlmailing-list, third-party-advisory
- http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00004.htmlmailing-list, third-party-advisory
- http://lists.opensuse.org/opensuse-updates/2014-10/msg00023.htmlmailing-list, third-party-advisory
- http://lists.opensuse.org/opensuse-updates/2014-10/msg00025.htmlmailing-list, third-party-advisory
- http://marc.info/?l=bugtraq&m=141216207813411&w=2mailing-list
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.