Summary
Tavis Ormandy discovered that the security fix for Bash included in
USN-2362-1 was incomplete. An attacker could use this issue to bypass
certain environment restrictions. (CVE-2014-7169)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | bash | 4.3-7ubuntu1.2 |
Vulnerabilities 1
-
Critical 9.8
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values o…
KEV Jan 28, 2022
References
-
report
https://ubuntu.com/security/CVE-2014-7169