CVE-2014-7169
GNU Bourne-Again Shell (Bash)
GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
What it is
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other GNU entries on the list
- InetUtils GNU InetUtils Argument Injection Vulnerability CVE-2026-24061 · Jan 26, 2026
- GNU Bash GNU Bash OS Command Injection Vulnerability CVE-2014-6278 · Oct 2, 2025
- GNU C Library GNU C Library Buffer Overflow Vulnerability CVE-2023-4911 · Nov 21, 2023
- Bourne-Again Shell (Bash) GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability CVE-2014-6271 · Jan 28, 2022