CVE-2014-7186

Published: 26 September 2014

The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted use of here documents, aka the "redir_stack" issue.

Status

References

• http://www.openwall.com/lists/oss-security/2014/09/25/32
• https://ubuntu.com/security/notices/USN-2364-1
• https://www.cve.org/CVERecord?id=CVE-2014-7186
• NVD
• Launchpad
• Debian

Bugs

• https://bugzilla.redhat.com/show_bug.cgi?id=1146791