Red Hat Security Advisory: bash Shift_JIS security update

Fixed packages 2

Vulnerabilities 3

• Critical 9.8
  CVE-2014-7169 Exploited Public exploit EPSS 100%

  GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values o…

  bash bash Debian Ubuntu
  Sep 25, 2014

  KEV Jan 28, 2022
• Unscored —
  CVE-2014-7186 Public exploit EPSS 64%

  The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial …

  bash bash Debian Ubuntu
  Sep 28, 2014
• Unscored —
  CVE-2014-7187 Public exploit EPSS 58%

  Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers …

  bash bash Debian Ubuntu
  Sep 28, 2014

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/articles/1200223
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1146319
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1865.json
• report
  https://access.redhat.com/security/cve/CVE-2014-7169
• article
  https://access.redhat.com/security/vulnerabilities/shellshock
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-7169
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-7169
• article
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• report
  https://access.redhat.com/security/cve/CVE-2014-7186
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1146791
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-7186
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-7186
• report
  https://access.redhat.com/security/cve/CVE-2014-7187
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1146804
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-7187
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-7187