Skip to content
OpenAdvisories
High 1 exploited CVE ELSA-2014-3092 2 CVEs

Important: bash security update (Oracle Linux 7)

Published Nov 20, 2014 · Updated Nov 20, 2014

Ecosystem: Oracle Linux

Summary

[4.2.45-5.4.0.1]
- Fix segfaults from CVE-2014-6277 and CVE-2014-6278 completely. [orabug 19905256]

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 7 bash 0:4.2.45-5.el7_0.4.0.1
Oracle Linux · 7 bash-doc 0:4.2.45-5.el7_0.4.0.1

Vulnerabilities 2

  • High 8.8
    CVE-2014-6278 Exploited Public exploit EPSS 100%

    GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, wh…

    bash bash Debian Ubuntu
    KEV Oct 2, 2025
  • Unscored —
    CVE-2014-6277 Public exploit EPSS 64%

    GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, wh…

    bash bash Debian Ubuntu