CVE-2014-7187
Fixed in a distro release EPSS 60%
Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via deeply nested for loops, aka the "word_lineno" issue.
Products: gnu bash
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | bash | 4.3-9.2 |
| Debian 13 | bash | 4.3-9.2 |
| Debian 14 | bash | 4.3-9.2 |
| Debian 6.0 | bash | 4.1-3+deb6u2 |
| Debian 7 | bash | 4.2+dfsg-0.1+deb7u3 |
| Red Hat Enterprise Linux 5 | bash | 0:3.2-33.el5_11.4 |
| Red Hat Enterprise Linux 5 | bash-debuginfo | 0:3.2-33.el5_11.4 |
| Red Hat Enterprise Linux 6 | bash | 0:4.1.2-15.el6_5.2 |
| Red Hat Enterprise Linux 6 | bash-debuginfo | 0:4.1.2-15.el6_5.2 |
| Red Hat Enterprise Linux 6 | bash-doc | 0:4.1.2-15.el6_5.2 |
| Red Hat Enterprise Linux 7 | bash | 0:4.2.45-5.el7_0.4 |
| Red Hat Enterprise Linux 7 | bash-debuginfo | 0:4.2.45-5.el7_0.4 |
| Red Hat Enterprise Linux 7 | bash-doc | 0:4.2.45-5.el7_0.4 |
| Red Hat rhel els 4 | bash | 0:3.0-27.el4.4 |
| Red Hat rhel els 4 | bash-debuginfo | 0:3.0-27.el4.4 |
| Red Hat rhel eus 5.9 | bash | 0:3.2-32.el5_9.3 |
| Red Hat rhel eus 5.9 | bash-debuginfo | 0:3.2-32.el5_9.3 |
| Red Hat rhel eus 6.4 | bash | 0:4.1.2-15.el6_4.2 |
| Red Hat rhel eus 6.4 | bash-debuginfo | 0:4.1.2-15.el6_4.2 |
| Red Hat rhel eus 6.4 | bash-doc | 0:4.1.2-15.el6_4.2 |
| Red Hat rhel mission critical 5.6 | bash | 0:3.2-24.el5_6.2 |
| Red Hat rhel mission critical 5.6 | bash-debuginfo | 0:3.2-24.el5_6.2 |
| Red Hat rhel mission critical 6.2 | bash | 0:4.1.2-9.el6_2.2 |
| Red Hat rhel mission critical 6.2 | bash-debuginfo | 0:4.1.2-9.el6_2.2 |
| Red Hat rhel mission critical 6.2 | bash-doc | 0:4.1.2-9.el6_2.2 |
| Red Hat rhel sjis 5 | bash | 0:3.2-32.el5_9.3.sjis.1 |
| Red Hat rhel sjis 5 | bash | 0:3.2-33.el5_11.1.sjis.2 |
| Red Hat rhel sjis 5 | bash-debuginfo | 0:3.2-33.el5_11.1.sjis.2 |
| Red Hat rhel sjis 5 | bash-debuginfo | 0:3.2-32.el5_9.3.sjis.1 |
| Red Hat rhel sjis 6 | bash | 0:4.1.2-15.el6_5.1.sjis.2 |
| Red Hat rhel sjis 6 | bash-debuginfo | 0:4.1.2-15.el6_5.1.sjis.2 |
| Red Hat rhel sjis 6 | bash-doc | 0:4.1.2-15.el6_5.1.sjis.2 |
| Red Hat rhev manager 3 | rhev-hypervisor6 | 0:6.5-20140930.1.el6ev |
| Ubuntu 14.04 LTS | bash | 4.3-7ubuntu1.4 |
| openSUSE Tumbleweed | bash | 7.0-92.1 |