Skip to content
OpenAdvisories
Critical 1 exploited CVE USN-2363-2 1 CVE

bash vulnerability

Published Sep 26, 2014 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

USN-2363-1 fixed a vulnerability in Bash. Due to a build issue, the patch
for CVE-2014-7169 didn't get properly applied in the Ubuntu 14.04 LTS
package. This update fixes the problem.

We apologize for the inconvenience.

Original advisory details:

Tavis Ormandy discovered that the security fix for Bash included in
USN-2362-1 was incomplete. An attacker could use this issue to bypass
certain environment restrictions. (CVE-2014-7169)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS bash 4.3-7ubuntu1.3

Vulnerabilities 1

  • Critical 9.8
    CVE-2014-7169 Exploited Public exploit EPSS 100%

    GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values o…

    bash bash Debian Ubuntu
    KEV Jan 28, 2022

References

  • report
    https://ubuntu.com/security/CVE-2014-7169