Skip to content
OpenAdvisories
Critical 1 exploited CVE DSA-3035-1 3 CVEs

bash - security update

Published Sep 25, 2014 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 7 bash 4.2+dfsg-0.1+deb7u3

Vulnerabilities 3

  • Critical 9.8
    CVE-2014-7169 Exploited Public exploit EPSS 100%

    GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values o…

    KEV Jan 28, 2022
  • Unscored —
    CVE-2014-7186 Public exploit EPSS 64%

    The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial …

  • Unscored —
    CVE-2014-7187 Public exploit EPSS 58%

    Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers …