CVE-2014-7187

Published: 26 September 2014

Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via deeply nested for loops, aka the "word_lineno" issue.

Status

References

• http://www.openwall.com/lists/oss-security/2014/09/25/32
• https://ubuntu.com/security/notices/USN-2364-1
• https://www.cve.org/CVERecord?id=CVE-2014-7187
• NVD
• Launchpad
• Debian

Bugs

• https://bugzilla.redhat.com/show_bug.cgi?id=1146804