{"id":"CVE-2014-7187","state":"PUBLISHED","title":"Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and ","description":"Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via deeply nested for loops, aka the \"word_lineno\" issue.","publishedAt":"2014-09-28T19:00:00.000Z","updatedAt":"2024-08-06T12:40:19.211Z","severity":null,"assigner":"mitre","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.html","http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897","http://www-01.ibm.com/support/docview.wss?uid=swg21685749","http://marc.info/?l=bugtraq&m=141577137423233&w=2","https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk102673&src=securityAlerts","http://marc.info/?l=bugtraq&m=141383138121313&w=2","http://marc.info/?l=bugtraq&m=142721162228379&w=2","http://www.securityfocus.com/archive/1/533593/100/0/threaded","http://marc.info/?l=bugtraq&m=142358026505815&w=2","http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00038.html","http://www-01.ibm.com/support/docview.wss?uid=swg21686084","http://www-01.ibm.com/support/docview.wss?uid=swg21686479","http://secunia.com/advisories/61188","http://jvn.jp/en/jp/JVN55667175/index.html","http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.html","http://secunia.com/advisories/60433","http://openwall.com/lists/oss-security/2014/09/25/32","http://marc.info/?l=bugtraq&m=141383026420882&w=2","http://marc.info/?l=bugtraq&m=141585637922673&w=2","http://marc.info/?l=bugtraq&m=141576728022234&w=2","http://support.novell.com/security/cve/CVE-2014-7187.html","http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html","http://secunia.com/advisories/61636","http://secunia.com/advisories/61816","http://lists.opensuse.org/opensuse-updates/2014-10/msg00025.html","http://secunia.com/advisories/61442","http://marc.info/?l=bugtraq&m=142358078406056&w=2","http://secunia.com/advisories/61283","http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html","https://kc.mcafee.com/corporate/index?page=content&id=SB10085","http://lists.opensuse.org/opensuse-updates/2014-10/msg00023.html","http://secunia.com/advisories/61654","http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315","http://secunia.com/advisories/62312","https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html","http://marc.info/?l=bugtraq&m=141879528318582&w=2","http://rhn.redhat.com/errata/RHSA-2014-1312.html","http://www-01.ibm.com/support/docview.wss?uid=swg21685604","http://marc.info/?l=bugtraq&m=142118135300698&w=2","http://secunia.com/advisories/61703","http://www.ubuntu.com/usn/USN-2364-1","http://secunia.com/advisories/61065","http://marc.info/?l=bugtraq&m=141383196021590&w=2","http://marc.info/?l=bugtraq&m=141383081521087&w=2","http://www-01.ibm.com/support/docview.wss?uid=swg21686445","http://www-01.ibm.com/support/docview.wss?uid=swg21686131","http://jvndb.jvn.jp/jvndb/JVNDB-2014-000126","http://secunia.com/advisories/61641","http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00042.html","https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10648","http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898","http://www-01.ibm.com/support/docview.wss?uid=swg21685914","http://seclists.org/fulldisclosure/2014/Oct/0","http://www.mandriva.com/security/advisories?name=MDVSA-2015:164","https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04497075","https://support.apple.com/HT205267","http://secunia.com/advisories/60024","http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html","http://secunia.com/advisories/61622","http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bash","http://openwall.com/lists/oss-security/2014/09/28/10","http://secunia.com/advisories/62343","http://secunia.com/advisories/61565","https://www.suse.com/support/shellshock/","http://support.apple.com/HT204244","http://marc.info/?l=bugtraq&m=141450491804793&w=2","http://secunia.com/advisories/61313","http://marc.info/?l=bugtraq&m=142289270617409&w=2","http://secunia.com/advisories/61873","http://openwall.com/lists/oss-security/2014/09/26/2","http://secunia.com/advisories/61485","http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00041.html","http://secunia.com/advisories/61618","https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04518183","http://marc.info/?l=bugtraq&m=141577297623641&w=2","http://www-01.ibm.com/support/docview.wss?uid=isg3T1021272","http://marc.info/?l=bugtraq&m=141383244821813&w=2","http://secunia.com/advisories/61312","http://secunia.com/advisories/60193","http://www.vmware.com/security/advisories/VMSA-2014-0010.html","http://secunia.com/advisories/61479","http://secunia.com/advisories/60063","http://secunia.com/advisories/60034","http://secunia.com/advisories/59907","http://secunia.com/advisories/58200","http://marc.info/?l=bugtraq&m=141577241923505&w=2","http://secunia.com/advisories/61643","http://www.novell.com/support/kb/doc.php?id=7015721","http://www-01.ibm.com/support/docview.wss?uid=swg21687079","http://secunia.com/advisories/61503","http://www-01.ibm.com/support/docview.wss?uid=swg21686246","http://rhn.redhat.com/errata/RHSA-2014-1354.html","http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915","http://www.qnap.com/i/en/support/con_show.php?cid=61","http://marc.info/?l=bugtraq&m=141694386919794&w=2","http://secunia.com/advisories/61552","http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279","https://support.citrix.com/article/CTX200223","http://www-01.ibm.com/support/docview.wss?uid=swg21686447","http://marc.info/?l=bugtraq&m=141330468527613&w=2","http://secunia.com/advisories/61855","http://secunia.com/advisories/60044","http://secunia.com/advisories/61291","http://marc.info/?l=bugtraq&m=141345648114150&w=2","http://secunia.com/advisories/61287","http://www-01.ibm.com/support/docview.wss?uid=isg3T1021361","http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html","http://marc.info/?l=bugtraq&m=141383304022067&w=2","http://rhn.redhat.com/errata/RHSA-2014-1311.html","http://secunia.com/advisories/61128","https://support.citrix.com/article/CTX200217","http://secunia.com/advisories/60055","http://secunia.com/advisories/61550","http://secunia.com/advisories/61633","http://www-01.ibm.com/support/docview.wss?uid=swg21686494","https://kb.bluecoat.com/index?page=content&id=SA82","http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00048.html","http://secunia.com/advisories/61328","http://www-01.ibm.com/support/docview.wss?uid=swg21685733","http://secunia.com/advisories/61129","http://secunia.com/advisories/61603","http://secunia.com/advisories/61857","http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879"],"weaknesses":[],"ingestedAt":"2026-10-29T19:41:37.724Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2014/7xxx/CVE-2014-7187.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2014-7187","state":"PUBLISHED","datePublished":"2014-09-28T19:00:00.000Z","dateUpdated":"2024-08-06T12:40:19.211Z","assignerShortName":"mitre","assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateReserved":"2014-09-25T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via deeply nested for loops, aka the \"word_lineno\" issue."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.html","tags":["x_refsource_MISC"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897","tags":["x_refsource_CONFIRM"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21685749","tags":["x_refsource_CONFIRM"]},{"url":"http://marc.info/?l=bugtraq&m=141577137423233&w=2","name":"HPSBMU03165","tags":["vendor-advisory","x_refsource_HP"]},{"url":"https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk102673&src=securityAlerts","tags":["x_refsource_CONFIRM"]},{"url":"http://marc.info/?l=bugtraq&m=141383138121313&w=2","name":"HPSBST03131","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://marc.info/?l=bugtraq&m=142721162228379&w=2","name":"SSRT101819","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://www.securityfocus.com/archive/1/533593/100/0/threaded","name":"20141001 NEW VMSA-2014-0010 - VMware product updates address critical Bash security vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"http://marc.info/?l=bugtraq&m=142358026505815&w=2","name":"HPSBMU03245","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00038.html","name":"openSUSE-SU-2014:1229","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686084","tags":["x_refsource_CONFIRM"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686479","tags":["x_refsource_CONFIRM"]},{"url":"http://secunia.com/advisories/61188","name":"61188","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://jvn.jp/en/jp/JVN55667175/index.html","name":"JVN#55667175","tags":["third-party-advisory","x_refsource_JVN"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.html","name":"openSUSE-SU-2014:1254","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://secunia.com/advisories/60433","name":"60433","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://openwall.com/lists/oss-security/2014/09/25/32","name":"[oss-security] 20140925 Fwd: Non-upstream patches for bash","tags":["mailing-list","x_refsource_MLIST"]},{"url":"http://marc.info/?l=bugtraq&m=141383026420882&w=2","name":"HPSBMU03143","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://marc.info/?l=bugtraq&m=141585637922673&w=2","name":"HPSBMU03182","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://marc.info/?l=bugtraq&m=141576728022234&w=2","name":"HPSBST03155","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://support.novell.com/security/cve/CVE-2014-7187.html","tags":["x_refsource_CONFIRM"]},{"url":"http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html","tags":["x_refsource_CONFIRM"]},{"url":"http://secunia.com/advisories/61636","name":"61636","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://secunia.com/advisories/61816","name":"61816","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-10/msg00025.html","name":"openSUSE-SU-2014:1310","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://secunia.com/advisories/61442","name":"61442","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://marc.info/?l=bugtraq&m=142358078406056&w=2","name":"HPSBMU03246","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://secunia.com/advisories/61283","name":"61283","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html","name":"APPLE-SA-2015-09-30-3","tags":["vendor-advisory","x_refsource_APPLE"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10085","tags":["x_refsource_CONFIRM"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-10/msg00023.html","name":"openSUSE-SU-2014:1308","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://secunia.com/advisories/61654","name":"61654","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315","tags":["x_refsource_CONFIRM"]},{"url":"http://secunia.com/advisories/62312","name":"62312","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html","tags":["x_refsource_CONFIRM"]},{"url":"http://marc.info/?l=bugtraq&m=141879528318582&w=2","name":"HPSBMU03217","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1312.html","name":"RHSA-2014:1312","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21685604","tags":["x_refsource_CONFIRM"]},{"url":"http://marc.info/?l=bugtraq&m=142118135300698&w=2","name":"SSRT101868","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://secunia.com/advisories/61703","name":"61703","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.ubuntu.com/usn/USN-2364-1","name":"USN-2364-1","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"http://secunia.com/advisories/61065","name":"61065","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://marc.info/?l=bugtraq&m=141383196021590&w=2","name":"HPSBST03129","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://marc.info/?l=bugtraq&m=141383081521087&w=2","name":"HPSBMU03144","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686445","tags":["x_refsource_CONFIRM"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686131","tags":["x_refsource_CONFIRM"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2014-000126","name":"JVNDB-2014-000126","tags":["third-party-advisory","x_refsource_JVNDB"]},{"url":"http://marc.info/?l=bugtraq&m=141879528318582&w=2","name":"SSRT101827","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://secunia.com/advisories/61641","name":"61641","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00042.html","name":"SUSE-SU-2014:1247","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10648","tags":["x_refsource_CONFIRM"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898","tags":["x_refsource_CONFIRM"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21685914","tags":["x_refsource_CONFIRM"]},{"url":"http://seclists.org/fulldisclosure/2014/Oct/0","name":"20141001 FW: NEW VMSA-2014-0010 - VMware product updates address critical Bash security vulnerabilities","tags":["mailing-list","x_refsource_FULLDISC"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:164","name":"MDVSA-2015:164","tags":["vendor-advisory","x_refsource_MANDRIVA"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04497075","tags":["x_refsource_CONFIRM"]},{"url":"https://support.apple.com/HT205267","tags":["x_refsource_CONFIRM"]},{"url":"http://marc.info/?l=bugtraq&m=142721162228379&w=2","name":"HPSBMU03220","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://secunia.com/advisories/60024","name":"60024","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html","tags":["x_refsource_MISC"]},{"url":"http://secunia.com/advisories/61622","name":"61622","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bash","name":"20140926 GNU Bash Environment Variable Command Injection Vulnerability","tags":["vendor-advisory","x_refsource_CISCO"]},{"url":"http://openwall.com/lists/oss-security/2014/09/28/10","name":"[oss-security] 20140928 Re: CVE-2014-6271: remote code execution through bash","tags":["mailing-list","x_refsource_MLIST"]},{"url":"http://secunia.com/advisories/62343","name":"62343","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://secunia.com/advisories/61565","name":"61565","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"https://www.suse.com/support/shellshock/","tags":["x_refsource_CONFIRM"]},{"url":"http://support.apple.com/HT204244","tags":["x_refsource_CONFIRM"]},{"url":"http://marc.info/?l=bugtraq&m=141450491804793&w=2","name":"HPSBST03157","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://secunia.com/advisories/61313","name":"61313","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://marc.info/?l=bugtraq&m=142289270617409&w=2","name":"SSRT101830","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://marc.info/?l=bugtraq&m=142358026505815&w=2","name":"SSRT101742","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://secunia.com/advisories/61873","name":"61873","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://openwall.com/lists/oss-security/2014/09/26/2","name":"[oss-security] 20140926 Re: Fwd: Non-upstream patches for bash","tags":["mailing-list","x_refsource_MLIST"]},{"url":"http://secunia.com/advisories/61485","name":"61485","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00041.html","name":"openSUSE-SU-2014:1242","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://secunia.com/advisories/61618","name":"61618","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04518183","tags":["x_refsource_CONFIRM"]},{"url":"http://marc.info/?l=bugtraq&m=141577297623641&w=2","name":"HPSBST03154","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021272","tags":["x_refsource_CONFIRM"]},{"url":"http://marc.info/?l=bugtraq&m=141383244821813&w=2","name":"HPSBGN03142","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://secunia.com/advisories/61312","name":"61312","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://secunia.com/advisories/60193","name":"60193","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0010.html","tags":["x_refsource_CONFIRM"]},{"url":"http://secunia.com/advisories/61479","name":"61479","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://secunia.com/advisories/60063","name":"60063","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://secunia.com/advisories/60034","name":"60034","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://secunia.com/advisories/59907","name":"59907","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://secunia.com/advisories/58200","name":"58200","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://marc.info/?l=bugtraq&m=141577241923505&w=2","name":"HPSBST03181","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://secunia.com/advisories/61643","name":"61643","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.novell.com/support/kb/doc.php?id=7015721","tags":["x_refsource_CONFIRM"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21687079","tags":["x_refsource_CONFIRM"]},{"url":"http://secunia.com/advisories/61503","name":"61503","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686246","tags":["x_refsource_CONFIRM"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1354.html","name":"RHSA-2014:1354","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://marc.info/?l=bugtraq&m=142289270617409&w=2","name":"HPSBMU03236","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915","tags":["x_refsource_CONFIRM"]},{"url":"http://www.qnap.com/i/en/support/con_show.php?cid=61","tags":["x_refsource_CONFIRM"]},{"url":"http://marc.info/?l=bugtraq&m=141694386919794&w=2","name":"HPSBST03148","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://secunia.com/advisories/61552","name":"61552","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279","tags":["x_refsource_CONFIRM"]},{"url":"https://support.citrix.com/article/CTX200223","tags":["x_refsource_CONFIRM"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686447","tags":["x_refsource_CONFIRM"]},{"url":"http://marc.info/?l=bugtraq&m=141330468527613&w=2","name":"HPSBGN03138","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://secunia.com/advisories/61855","name":"61855","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://secunia.com/advisories/60044","name":"60044","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://secunia.com/advisories/61291","name":"61291","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://marc.info/?l=bugtraq&m=141345648114150&w=2","name":"HPSBHF03125","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://secunia.com/advisories/61287","name":"61287","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://marc.info/?l=bugtraq&m=142118135300698&w=2","name":"HPSBGN03233","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://marc.info/?l=bugtraq&m=142118135300698&w=2","name":"SSRT101739","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021361","tags":["x_refsource_CONFIRM"]},{"url":"http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html","name":"APPLE-SA-2015-01-27-4","tags":["vendor-advisory","x_refsource_APPLE"]},{"url":"http://marc.info/?l=bugtraq&m=141383304022067&w=2","name":"HPSBGN03141","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1311.html","name":"RHSA-2014:1311","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://secunia.com/advisories/61128","name":"61128","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"https://support.citrix.com/article/CTX200217","tags":["x_refsource_CONFIRM"]},{"url":"http://secunia.com/advisories/60055","name":"60055","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://secunia.com/advisories/61550","name":"61550","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://secunia.com/advisories/61633","name":"61633","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686494","tags":["x_refsource_CONFIRM"]},{"url":"https://kb.bluecoat.com/index?page=content&id=SA82","tags":["x_refsource_CONFIRM"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00048.html","name":"SUSE-SU-2014:1259","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://secunia.com/advisories/61328","name":"61328","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21685733","tags":["x_refsource_CONFIRM"]},{"url":"http://secunia.com/advisories/61129","name":"61129","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://secunia.com/advisories/61603","name":"61603","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://secunia.com/advisories/61857","name":"61857","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879","tags":["x_refsource_CONFIRM"]}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"mitre","dateUpdated":"2018-10-09T18:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca"},"datePublic":"2014-09-25T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2014-7187","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via deeply nested for loops, aka the \"word_lineno\" issue."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.html","refsource":"MISC","url":"http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.html"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=swg21685749","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=swg21685749"},{"name":"HPSBMU03165","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=141577137423233&w=2"},{"name":"https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk102673&src=securityAlerts","refsource":"CONFIRM","url":"https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk102673&src=securityAlerts"},{"name":"HPSBST03131","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=141383138121313&w=2"},{"name":"SSRT101819","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=142721162228379&w=2"},{"name":"20141001 NEW VMSA-2014-0010 - VMware product updates address critical Bash security vulnerabilities","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/533593/100/0/threaded"},{"name":"HPSBMU03245","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=142358026505815&w=2"},{"name":"openSUSE-SU-2014:1229","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00038.html"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=swg21686084","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686084"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=swg21686479","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686479"},{"name":"61188","refsource":"SECUNIA","url":"http://secunia.com/advisories/61188"},{"name":"JVN#55667175","refsource":"JVN","url":"http://jvn.jp/en/jp/JVN55667175/index.html"},{"name":"openSUSE-SU-2014:1254","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.html"},{"name":"60433","refsource":"SECUNIA","url":"http://secunia.com/advisories/60433"},{"name":"[oss-security] 20140925 Fwd: Non-upstream patches for bash","refsource":"MLIST","url":"http://openwall.com/lists/oss-security/2014/09/25/32"},{"name":"HPSBMU03143","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=141383026420882&w=2"},{"name":"HPSBMU03182","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=141585637922673&w=2"},{"name":"HPSBST03155","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=141576728022234&w=2"},{"name":"http://support.novell.com/security/cve/CVE-2014-7187.html","refsource":"CONFIRM","url":"http://support.novell.com/security/cve/CVE-2014-7187.html"},{"name":"http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html","refsource":"CONFIRM","url":"http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html"},{"name":"61636","refsource":"SECUNIA","url":"http://secunia.com/advisories/61636"},{"name":"61816","refsource":"SECUNIA","url":"http://secunia.com/advisories/61816"},{"name":"openSUSE-SU-2014:1310","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-updates/2014-10/msg00025.html"},{"name":"61442","refsource":"SECUNIA","url":"http://secunia.com/advisories/61442"},{"name":"HPSBMU03246","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=142358078406056&w=2"},{"name":"61283","refsource":"SECUNIA","url":"http://secunia.com/advisories/61283"},{"name":"APPLE-SA-2015-09-30-3","refsource":"APPLE","url":"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"},{"name":"https://kc.mcafee.com/corporate/index?page=content&id=SB10085","refsource":"CONFIRM","url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10085"},{"name":"openSUSE-SU-2014:1308","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-updates/2014-10/msg00023.html"},{"name":"61654","refsource":"SECUNIA","url":"http://secunia.com/advisories/61654"},{"name":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315","refsource":"CONFIRM","url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315"},{"name":"62312","refsource":"SECUNIA","url":"http://secunia.com/advisories/62312"},{"name":"https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html","refsource":"CONFIRM","url":"https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html"},{"name":"HPSBMU03217","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=141879528318582&w=2"},{"name":"RHSA-2014:1312","refsource":"REDHAT","url":"http://rhn.redhat.com/errata/RHSA-2014-1312.html"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=swg21685604","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=swg21685604"},{"name":"SSRT101868","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=142118135300698&w=2"},{"name":"61703","refsource":"SECUNIA","url":"http://secunia.com/advisories/61703"},{"name":"USN-2364-1","refsource":"UBUNTU","url":"http://www.ubuntu.com/usn/USN-2364-1"},{"name":"61065","refsource":"SECUNIA","url":"http://secunia.com/advisories/61065"},{"name":"HPSBST03129","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=141383196021590&w=2"},{"name":"HPSBMU03144","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=141383081521087&w=2"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=swg21686445","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686445"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=swg21686131","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686131"},{"name":"JVNDB-2014-000126","refsource":"JVNDB","url":"http://jvndb.jvn.jp/jvndb/JVNDB-2014-000126"},{"name":"SSRT101827","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=141879528318582&w=2"},{"name":"61641","refsource":"SECUNIA","url":"http://secunia.com/advisories/61641"},{"name":"SUSE-SU-2014:1247","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00042.html"},{"name":"https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10648","refsource":"CONFIRM","url":"https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10648"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=swg21685914","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=swg21685914"},{"name":"20141001 FW: NEW VMSA-2014-0010 - VMware product updates address critical Bash security vulnerabilities","refsource":"FULLDISC","url":"http://seclists.org/fulldisclosure/2014/Oct/0"},{"name":"MDVSA-2015:164","refsource":"MANDRIVA","url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:164"},{"name":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04497075","refsource":"CONFIRM","url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04497075"},{"name":"https://support.apple.com/HT205267","refsource":"CONFIRM","url":"https://support.apple.com/HT205267"},{"name":"HPSBMU03220","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=142721162228379&w=2"},{"name":"60024","refsource":"SECUNIA","url":"http://secunia.com/advisories/60024"},{"name":"http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html","refsource":"MISC","url":"http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html"},{"name":"61622","refsource":"SECUNIA","url":"http://secunia.com/advisories/61622"},{"name":"20140926 GNU Bash Environment Variable Command Injection Vulnerability","refsource":"CISCO","url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bash"},{"name":"[oss-security] 20140928 Re: CVE-2014-6271: remote code execution through bash","refsource":"MLIST","url":"http://openwall.com/lists/oss-security/2014/09/28/10"},{"name":"62343","refsource":"SECUNIA","url":"http://secunia.com/advisories/62343"},{"name":"61565","refsource":"SECUNIA","url":"http://secunia.com/advisories/61565"},{"name":"https://www.suse.com/support/shellshock/","refsource":"CONFIRM","url":"https://www.suse.com/support/shellshock/"},{"name":"http://support.apple.com/HT204244","refsource":"CONFIRM","url":"http://support.apple.com/HT204244"},{"name":"HPSBST03157","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=141450491804793&w=2"},{"name":"61313","refsource":"SECUNIA","url":"http://secunia.com/advisories/61313"},{"name":"SSRT101830","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=142289270617409&w=2"},{"name":"SSRT101742","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=142358026505815&w=2"},{"name":"61873","refsource":"SECUNIA","url":"http://secunia.com/advisories/61873"},{"name":"[oss-security] 20140926 Re: Fwd: Non-upstream patches for bash","refsource":"MLIST","url":"http://openwall.com/lists/oss-security/2014/09/26/2"},{"name":"61485","refsource":"SECUNIA","url":"http://secunia.com/advisories/61485"},{"name":"openSUSE-SU-2014:1242","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00041.html"},{"name":"61618","refsource":"SECUNIA","url":"http://secunia.com/advisories/61618"},{"name":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04518183","refsource":"CONFIRM","url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04518183"},{"name":"HPSBST03154","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=141577297623641&w=2"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021272","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021272"},{"name":"HPSBGN03142","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=141383244821813&w=2"},{"name":"61312","refsource":"SECUNIA","url":"http://secunia.com/advisories/61312"},{"name":"60193","refsource":"SECUNIA","url":"http://secunia.com/advisories/60193"},{"name":"http://www.vmware.com/security/advisories/VMSA-2014-0010.html","refsource":"CONFIRM","url":"http://www.vmware.com/security/advisories/VMSA-2014-0010.html"},{"name":"61479","refsource":"SECUNIA","url":"http://secunia.com/advisories/61479"},{"name":"60063","refsource":"SECUNIA","url":"http://secunia.com/advisories/60063"},{"name":"60034","refsource":"SECUNIA","url":"http://secunia.com/advisories/60034"},{"name":"59907","refsource":"SECUNIA","url":"http://secunia.com/advisories/59907"},{"name":"58200","refsource":"SECUNIA","url":"http://secunia.com/advisories/58200"},{"name":"HPSBST03181","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=141577241923505&w=2"},{"name":"61643","refsource":"SECUNIA","url":"http://secunia.com/advisories/61643"},{"name":"http://www.novell.com/support/kb/doc.php?id=7015721","refsource":"CONFIRM","url":"http://www.novell.com/support/kb/doc.php?id=7015721"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=swg21687079","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=swg21687079"},{"name":"61503","refsource":"SECUNIA","url":"http://secunia.com/advisories/61503"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=swg21686246","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686246"},{"name":"RHSA-2014:1354","refsource":"REDHAT","url":"http://rhn.redhat.com/errata/RHSA-2014-1354.html"},{"name":"HPSBMU03236","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=142289270617409&w=2"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915"},{"name":"http://www.qnap.com/i/en/support/con_show.php?cid=61","refsource":"CONFIRM","url":"http://www.qnap.com/i/en/support/con_show.php?cid=61"},{"name":"HPSBST03148","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=141694386919794&w=2"},{"name":"61552","refsource":"SECUNIA","url":"http://secunia.com/advisories/61552"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279"},{"name":"https://support.citrix.com/article/CTX200223","refsource":"CONFIRM","url":"https://support.citrix.com/article/CTX200223"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=swg21686447","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686447"},{"name":"HPSBGN03138","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=141330468527613&w=2"},{"name":"61855","refsource":"SECUNIA","url":"http://secunia.com/advisories/61855"},{"name":"60044","refsource":"SECUNIA","url":"http://secunia.com/advisories/60044"},{"name":"61291","refsource":"SECUNIA","url":"http://secunia.com/advisories/61291"},{"name":"HPSBHF03125","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=141345648114150&w=2"},{"name":"61287","refsource":"SECUNIA","url":"http://secunia.com/advisories/61287"},{"name":"HPSBGN03233","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=142118135300698&w=2"},{"name":"SSRT101739","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=142118135300698&w=2"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021361","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021361"},{"name":"APPLE-SA-2015-01-27-4","refsource":"APPLE","url":"http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html"},{"name":"HPSBGN03141","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=141383304022067&w=2"},{"name":"RHSA-2014:1311","refsource":"REDHAT","url":"http://rhn.redhat.com/errata/RHSA-2014-1311.html"},{"name":"61128","refsource":"SECUNIA","url":"http://secunia.com/advisories/61128"},{"name":"https://support.citrix.com/article/CTX200217","refsource":"CONFIRM","url":"https://support.citrix.com/article/CTX200217"},{"name":"60055","refsource":"SECUNIA","url":"http://secunia.com/advisories/60055"},{"name":"61550","refsource":"SECUNIA","url":"http://secunia.com/advisories/61550"},{"name":"61633","refsource":"SECUNIA","url":"http://secunia.com/advisories/61633"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=swg21686494","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686494"},{"name":"https://kb.bluecoat.com/index?page=content&id=SA82","refsource":"CONFIRM","url":"https://kb.bluecoat.com/index?page=content&id=SA82"},{"name":"SUSE-SU-2014:1259","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00048.html"},{"name":"61328","refsource":"SECUNIA","url":"http://secunia.com/advisories/61328"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=swg21685733","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=swg21685733"},{"name":"61129","refsource":"SECUNIA","url":"http://secunia.com/advisories/61129"},{"name":"61603","refsource":"SECUNIA","url":"http://secunia.com/advisories/61603"},{"name":"61857","refsource":"SECUNIA","url":"http://secunia.com/advisories/61857"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21685749","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=141577137423233&w=2","name":"HPSBMU03165","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk102673&src=securityAlerts","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=141383138121313&w=2","name":"HPSBST03131","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=142721162228379&w=2","name":"SSRT101819","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/533593/100/0/threaded","name":"20141001 NEW VMSA-2014-0010 - VMware product updates address critical Bash security vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=142358026505815&w=2","name":"HPSBMU03245","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00038.html","name":"openSUSE-SU-2014:1229","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686084","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686479","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/61188","name":"61188","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://jvn.jp/en/jp/JVN55667175/index.html","name":"JVN#55667175","tags":["third-party-advisory","x_refsource_JVN","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.html","name":"openSUSE-SU-2014:1254","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://secunia.com/advisories/60433","name":"60433","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://openwall.com/lists/oss-security/2014/09/25/32","name":"[oss-security] 20140925 Fwd: Non-upstream patches for bash","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=141383026420882&w=2","name":"HPSBMU03143","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=141585637922673&w=2","name":"HPSBMU03182","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=141576728022234&w=2","name":"HPSBST03155","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://support.novell.com/security/cve/CVE-2014-7187.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/61636","name":"61636","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/61816","name":"61816","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-10/msg00025.html","name":"openSUSE-SU-2014:1310","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://secunia.com/advisories/61442","name":"61442","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=142358078406056&w=2","name":"HPSBMU03246","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://secunia.com/advisories/61283","name":"61283","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html","name":"APPLE-SA-2015-09-30-3","tags":["vendor-advisory","x_refsource_APPLE","x_transferred"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10085","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-10/msg00023.html","name":"openSUSE-SU-2014:1308","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://secunia.com/advisories/61654","name":"61654","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/62312","name":"62312","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=141879528318582&w=2","name":"HPSBMU03217","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1312.html","name":"RHSA-2014:1312","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21685604","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=142118135300698&w=2","name":"SSRT101868","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://secunia.com/advisories/61703","name":"61703","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.ubuntu.com/usn/USN-2364-1","name":"USN-2364-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]},{"url":"http://secunia.com/advisories/61065","name":"61065","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=141383196021590&w=2","name":"HPSBST03129","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=141383081521087&w=2","name":"HPSBMU03144","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686445","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686131","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2014-000126","name":"JVNDB-2014-000126","tags":["third-party-advisory","x_refsource_JVNDB","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=141879528318582&w=2","name":"SSRT101827","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://secunia.com/advisories/61641","name":"61641","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00042.html","name":"SUSE-SU-2014:1247","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10648","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21685914","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2014/Oct/0","name":"20141001 FW: NEW VMSA-2014-0010 - VMware product updates address critical Bash security vulnerabilities","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:164","name":"MDVSA-2015:164","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04497075","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://support.apple.com/HT205267","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=142721162228379&w=2","name":"HPSBMU03220","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://secunia.com/advisories/60024","name":"60024","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://secunia.com/advisories/61622","name":"61622","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bash","name":"20140926 GNU Bash Environment Variable Command Injection Vulnerability","tags":["vendor-advisory","x_refsource_CISCO","x_transferred"]},{"url":"http://openwall.com/lists/oss-security/2014/09/28/10","name":"[oss-security] 20140928 Re: CVE-2014-6271: remote code execution through bash","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://secunia.com/advisories/62343","name":"62343","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/61565","name":"61565","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"https://www.suse.com/support/shellshock/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://support.apple.com/HT204244","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=141450491804793&w=2","name":"HPSBST03157","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://secunia.com/advisories/61313","name":"61313","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=142289270617409&w=2","name":"SSRT101830","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=142358026505815&w=2","name":"SSRT101742","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://secunia.com/advisories/61873","name":"61873","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://openwall.com/lists/oss-security/2014/09/26/2","name":"[oss-security] 20140926 Re: Fwd: Non-upstream patches for bash","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://secunia.com/advisories/61485","name":"61485","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00041.html","name":"openSUSE-SU-2014:1242","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://secunia.com/advisories/61618","name":"61618","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04518183","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=141577297623641&w=2","name":"HPSBST03154","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021272","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=141383244821813&w=2","name":"HPSBGN03142","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://secunia.com/advisories/61312","name":"61312","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/60193","name":"60193","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0010.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/61479","name":"61479","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/60063","name":"60063","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/60034","name":"60034","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/59907","name":"59907","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/58200","name":"58200","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=141577241923505&w=2","name":"HPSBST03181","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://secunia.com/advisories/61643","name":"61643","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.novell.com/support/kb/doc.php?id=7015721","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21687079","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/61503","name":"61503","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686246","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1354.html","name":"RHSA-2014:1354","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=142289270617409&w=2","name":"HPSBMU03236","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.qnap.com/i/en/support/con_show.php?cid=61","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=141694386919794&w=2","name":"HPSBST03148","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://secunia.com/advisories/61552","name":"61552","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://support.citrix.com/article/CTX200223","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686447","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=141330468527613&w=2","name":"HPSBGN03138","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://secunia.com/advisories/61855","name":"61855","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/60044","name":"60044","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/61291","name":"61291","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=141345648114150&w=2","name":"HPSBHF03125","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://secunia.com/advisories/61287","name":"61287","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=142118135300698&w=2","name":"HPSBGN03233","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=142118135300698&w=2","name":"SSRT101739","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021361","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html","name":"APPLE-SA-2015-01-27-4","tags":["vendor-advisory","x_refsource_APPLE","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=141383304022067&w=2","name":"HPSBGN03141","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1311.html","name":"RHSA-2014:1311","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://secunia.com/advisories/61128","name":"61128","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"https://support.citrix.com/article/CTX200217","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/60055","name":"60055","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/61550","name":"61550","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/61633","name":"61633","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686494","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://kb.bluecoat.com/index?page=content&id=SA82","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00048.html","name":"SUSE-SU-2014:1259","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://secunia.com/advisories/61328","name":"61328","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21685733","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/61129","name":"61129","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/61603","name":"61603","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/61857","name":"61857","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-06T12:40:19.211Z"}}]}}}