Skip to content
OpenAdvisories
Critical 2 exploited CVEs RHSA-2014:1354 5 CVEs

Red Hat Security Advisory: rhev-hypervisor6 security update

Published Sep 13, 2024 · Updated Jul 29, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · Rhev Manager 3 rhev_manager:3 rhev-hypervisor6 0:6.5-20140930.1.el6ev

Vulnerabilities 5

  • Critical 9.8
    CVE-2014-6271 Exploited Public exploit Scanner template EPSS 100%

    GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, whic…

    bash bash Debian Ubuntu
    KEV Jan 28, 2022
  • Critical 9.8
    CVE-2014-7169 Exploited Public exploit EPSS 100%

    GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values o…

    bash bash Debian Ubuntu
    KEV Jan 28, 2022
  • Unscored —
    CVE-2014-1568 EPSS 17%

    Mozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x before 3.17.1, as used in Moz…

    thunderbird firefox nss nss Debian Ubuntu
  • Unscored —
    CVE-2014-7186 Public exploit EPSS 64%

    The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial …

    bash bash Debian Ubuntu
  • Unscored —
    CVE-2014-7187 Public exploit EPSS 58%

    Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers …

    bash bash Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1141597
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1145429
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1146319
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1146791
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1146804
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1354.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-1568
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-1568
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-1568
  • article
    http://www.mozilla.org/security/announce/2014/mfsa2014-73.html
  • report
    https://access.redhat.com/security/cve/CVE-2014-6271
  • article
    https://access.redhat.com/security/vulnerabilities/shellshock
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-6271
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-6271
  • article
    https://access.redhat.com/articles/1200223
  • article
    https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack
  • article
    https://www.cisa.gov/known-exploited-vulnerabilities-catalog
  • report
    https://access.redhat.com/security/cve/CVE-2014-7169
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-7169
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-7169
  • report
    https://access.redhat.com/security/cve/CVE-2014-7186
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-7186
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-7186
  • report
    https://access.redhat.com/security/cve/CVE-2014-7187
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-7187
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-7187