Skip to content
OpenAdvisories
High 1 exploited CVE ELSA-2014-1306 3 CVEs

Important: bash security update (Oracle Linux 7)

Published Sep 25, 2014 · Updated Sep 25, 2014

Ecosystem: Oracle Linux

Summary

[4.2.45-5.4]
- CVE-2014-7169
Resolves: #1146324

[4.2.45-5.3]
- amend patch to match upstream's
Related: #1146324

[4.2.45-5.2]
- Fix-up the patch
Related: #1141647

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 7 bash 0:4.2.45-5.el7_0.4
Oracle Linux · 7 bash-doc 0:4.2.45-5.el7_0.4

Vulnerabilities 3

  • Critical 9.8
    CVE-2014-7169 Exploited Public exploit EPSS 100%

    GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values o…

    bash bash Debian Ubuntu
    KEV Jan 28, 2022
  • Unscored —
    CVE-2014-7186 Public exploit EPSS 64%

    The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial …

    bash bash Debian Ubuntu
  • Unscored —
    CVE-2014-7187 Public exploit EPSS 58%

    Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers …

    bash bash Debian Ubuntu