CVE-2014-7169

Summary

CVE-2014-7169 is a vulnerability affecting GNU Bash up to version 4.3. This issue allows remote attackers to manipulate environment variables, resulting in potential file writes or unknown other impacts. Malformed function definitions in environment strings cause Bash to process trailing strings, which attackers can exploit. This vulnerability builds upon the incomplete fix for CVE-2014-6271, and it has been demonstrated to affect OpenSSH's ForceCommand feature, as well as the Apache HTTP Server's mod_cgi and mod_cgid modules. DHCP clients and other contexts where setting the environment occurs across a privilege boundary from Bash execution are potentially susceptible as well.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.