Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2014-7169

Quick assessment

Affected
n/a n/a
Exploitation
Confirmed exploitation in the wild; remediate immediately
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

GNU Bash是美国软件开发者布莱恩-福克斯（Brian J. Fox）为GNU计划而编写的一个Shell（命令语言解释器），它运行于类Unix操作系统中（Linux系统的默认Shell），并能够从标准输入设备或文件中读取、执行命令，同时也结合了一部分ksh和csh的特点。 GNU Bash 4.3 bash43-025及之前版本中存在安全漏洞，该漏洞源于程序没有正确处理环境变量值内的畸形函数定义。远程攻击者可借助特制的环境变量利用该漏洞写入文件。以下产品和模块受到影响：OpenSSH sshd中的Fo

AI Predicted 10.0 Difficulty: Trivial KEV EPSS 99.94% · P100
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2014-7169

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
GNU Bash 操作系统命令注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
GNU Bash是美国软件开发者布莱恩-福克斯（Brian J. Fox）为GNU计划而编写的一个Shell（命令语言解释器），它运行于类Unix操作系统中（Linux系统的默认Shell），并能够从标准输入设备或文件中读取、执行命令，同时也结合了一部分ksh和csh的特点。 GNU Bash 4.3 bash43-025及之前版本中存在安全漏洞，该漏洞源于程序没有正确处理环境变量值内的畸形函数定义。远程攻击者可借助特制的环境变量利用该漏洞写入文件。以下产品和模块受到影响：OpenSSH sshd中的Fo
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2014-7169

# POC Description Source Link Shenlong Link
1 DEPRECATED: Chef cookbook to audit & remediate "Shellshock" (BASH-CVE-2014-7169) https://github.com/chef-boneyard/bash-shellshock POC Details
2 None https://github.com/gina-alaska/bash-cve-2014-7169-cookbook POC Details
3 CVE-2014-7169 Shell Shock https://github.com/Gobinath-B/SHELL-SCHOCK POC Details
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2014-7169

请登录查看更多情报信息。

Vendor Advisories for CVE-2014-7169 (94)

Exploits & Public PoCs for CVE-2014-7169 (2)

Mailing List Discussions for CVE-2014-7169 (37)

Other References for CVE-2014-7169 (20)

Same Patch Batch · n/a · 2014-09-25 · 27 CVEs total

CVE-2014-6715 Android SlotMachine应用程序加密问题漏洞
CVE-2014-1568 Mozilla Network Security Services 安全漏洞
CVE-2014-3361 Cisco IOS 缓冲区溢出漏洞
CVE-2014-3360 Cisco IOS和IOS XE 操作系统命令注入漏洞
CVE-2014-3359 Cisco IOS和IOS XE 资源管理错误漏洞
CVE-2014-3358 Cisco IOS和IOS XE 操作系统命令注入漏洞
CVE-2014-3357 Cisco IOS和IOS XE 操作系统命令注入漏洞
CVE-2014-3356 Cisco IOS和IOS XE 缓冲区溢出漏洞
CVE-2014-3355 Cisco IOS和IOS XE 缓冲区溢出漏洞
CVE-2014-3354 Cisco IOS和IOS XE 输入验证漏洞
CVE-2014-6718 Android My Mobile Day应用程序加密问题漏洞
CVE-2014-6717 Android iTriage Health应用程序加密问题漏洞
CVE-2014-6716 Android fastin应用程序加密问题漏洞
CVE-2014-6702 Android StarSat International应用程序加密问题漏洞
CVE-2014-6714 Android WebMD应用程序加密问题漏洞
CVE-2014-6713 Android MedQuiz: Medical Chat and MCQs应用程序加密问题漏洞
CVE-2014-6712 Android Airlines International应用程序加密问题漏洞
CVE-2014-6711 Android ABC Lounge Webradio应用程序加密问题漏洞
CVE-2014-6710 Android Chifro Kids Coloring Game应用程序加密问题漏洞
CVE-2014-6709 Android TechRadar News应用程序加密问题漏洞

Showing top 20 of 27 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2014-7169

No comments yet

Leave a comment