Back

CVE-2014-6271

CRITICAL CISA KEV

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka "ShellShock." NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.

Published: Sep 24, 2014 Modified: Apr 22, 2026
CWE-78 CWE-78

CVSS Metrics

CVSSv3
Attack Vector: NETWORK Attack Complexity: LOW Privileges Required: NONE User Interaction: NONE Scope: UNCHANGED Confidentiality Impact: HIGH Integrity Impact: HIGH Availability Impact: HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products (334)

Vendor Product Version
gnu bash *
arista eos * ≥ 4.9.0 < 4.9.12
arista eos * ≥ 4.10.0 < 4.10.9
arista eos * ≥ 4.11.0 < 4.11.11
arista eos * ≥ 4.12.0 < 4.12.9
arista eos * ≥ 4.13.0 < 4.13.9
arista eos * ≥ 4.14.0 < 4.14.4f
oracle linux 4
oracle linux 5
oracle linux 6
qnap qts * < 4.1.1
qnap qts 4.1.1
qnap qts 4.1.1
mageia mageia 3.0
mageia mageia 4.0
redhat gluster_storage_server_for_on-premise 2.1
redhat virtualization 3.4
redhat enterprise_linux 4.0
redhat enterprise_linux 5.0
redhat enterprise_linux 6.0

…and 314 more

GitHub Security Advisory GHSA-6hfc-grwp-2p9c

GNU Bash through 4.3 processes trailing strings after function definitions in the values of...

Risk Scores

CVSS Score 9.8 / 10
EPSS Score 94.22%

Top 0% most likely to be exploited

Threat Score 97.5 / 100

CISA Known Exploited

Date Added: 2022-01-28
Due Date: 2022-07-28
Required Action:

Apply updates per vendor instructions.

Data Sources

NVD CISA KEV EPSS GitHub