Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2014-7186

Quick assessment

Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

GNU Bash是美国软件开发者布莱恩-福克斯（Brian J. Fox）为GNU计划而编写的一个Shell（命令语言解释器），它运行于类Unix操作系统中（Linux系统的默认Shell），并能够从标准输入设备或文件中读取、执行命令，同时也结合了一部分ksh和csh的特点。 GNU Bash 4.3 bash43-026及之前版本的parse.y文件中的redirection实现中存在安全漏洞。远程攻击者可借助特制的‘here’文档利用该漏洞造成拒绝服务（越边界数组访问和应用程序崩溃）。

AI Predicted 7.5 Difficulty: Easy EPSS 64.34% · P99
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2014-7186

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted use of here documents, aka the "redir_stack" issue.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
GNU Bash 缓冲区溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
GNU Bash是美国软件开发者布莱恩-福克斯（Brian J. Fox）为GNU计划而编写的一个Shell（命令语言解释器），它运行于类Unix操作系统中（Linux系统的默认Shell），并能够从标准输入设备或文件中读取、执行命令，同时也结合了一部分ksh和csh的特点。 GNU Bash 4.3 bash43-026及之前版本的parse.y文件中的redirection实现中存在安全漏洞。远程攻击者可借助特制的‘here’文档利用该漏洞造成拒绝服务（越边界数组访问和应用程序崩溃）。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2014-7186

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2014-7186

请登录查看更多情报信息。

Vendor Advisories for CVE-2014-7186 (76)

Exploits & Public PoCs for CVE-2014-7186 (1)

Mailing List Discussions for CVE-2014-7186 (30)

Other References for CVE-2014-7186 (11)

Same Patch Batch · n/a · 2014-09-28 · 42 CVEs total

CVE-2014-6762 Android bongomovie应用程序加密问题漏洞
CVE-2014-6752 Android Mindless Behavior Fan Base应用程序加密问题漏洞
CVE-2014-6753 Android sunnat e rasool应用程序加密问题漏洞
CVE-2014-6754 Android Vector Outage Manager应用程序加密问题漏洞
CVE-2014-6755 Android SDN Forum应用程序加密问题漏洞
CVE-2014-6756 Android Reddit Aww应用程序加密问题漏洞
CVE-2014-6757 Android Koran - AlqoranVideos应用程序加密问题漏洞
CVE-2014-6758 Android Qin Story应用程序加密问题漏洞
CVE-2014-6759 Android Downton Abbey Fan Portal应用程序加密问题漏洞
CVE-2014-6760 Android Harem Thief Dating应用程序加密问题漏洞
CVE-2014-6761 Android Aprende a Meditar应用程序加密问题漏洞
CVE-2014-6751 Android Grasshopper Beta应用程序加密问题漏洞
CVE-2014-6763 Android Codename Birdgame应用程序加密问题漏洞
CVE-2014-6764 Android Assyrian应用程序加密问题漏洞
CVE-2014-6765 Android No Fuss Home Loans应用程序加密问题漏洞
CVE-2014-6766 Android Afro-Beat应用程序加密问题漏洞
CVE-2014-6767 Android Juggle! FREE应用程序加密问题漏洞
CVE-2014-6768 Android Anywhere Anytime Yoga Workout应用程序加密问题漏洞
CVE-2014-6769 Android Meteo Belgique应用程序加密问题漏洞
CVE-2014-6770 Android Aerospace Jobs应用程序加密问题漏洞

Showing top 20 of 42 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2014-7186

No comments yet

Leave a comment