NetSight
IP …
critical10.0Public exploit code

CVE-2014-7186

The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access a…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted use of here documents, aka the "redir_stack" issue.

Affected products

VendorProductAffected versions
GnuBash
Versions 1.14.0, 1.14.1, 1.14.2, 1.14.3, 1.14.4, 1.14.5

Weakness classification

CWE-119

References