CVE-2014-7187
Publication date 26 September 2014
Last updated 24 July 2024
Ubuntu priority
Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via deeply nested for loops, aka the "word_lineno" issue.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| bash | 14.04 LTS trusty |
Fixed 4.3-7ubuntu1.4
|
References
Related Ubuntu Security Notices (USN)
- USN-2364-1
- Bash vulnerabilities
- 27 September 2014