CVE-2014-7186

Publication date 26 September 2014

Last updated 24 July 2024


Ubuntu priority

The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted use of here documents, aka the "redir_stack" issue.

Status

Package Ubuntu Release Status
bash 14.04 LTS trusty
Fixed 4.3-7ubuntu1.4
12.04 LTS precise
Fixed 4.2-2ubuntu2.5
10.04 LTS lucid
Fixed 4.1-2ubuntu3.4

References

Related Ubuntu Security Notices (USN)

    • USN-2364-1
    • Bash vulnerabilities
    • 27 September 2014

Other references