Red Hat Security AdvisoryRHSA-2014:1306
bash security update
Released 2014-09-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) bash-3.2-33.el5_11.4, bash-3.2-33.el5_11.4.i386, bash-3.2-33.el5_11.4.ia64 +1
- Red Hat Enterprise Linux Client (v. 7) bash-4.2.45-5.el7_0.4
- Red Hat Enterprise Linux Client Optional (v. 7) bash-doc-4.2.45-5.el7_0.4
- Red Hat Enterprise Linux ComputeNode (v. 7) bash-4.2.45-5.el7_0.4
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) bash-doc-4.2.45-5.el7_0.4
- Red Hat Enterprise Linux Desktop (v. 5 client) bash-3.2-33.el5_11.4, bash-3.2-33.el5_11.4.i386
- Red Hat Enterprise Linux Desktop (v. 6) bash-4.1.2-15.el6_5.2
- Red Hat Enterprise Linux Desktop Optional (v. 6) bash-4.1.2-15.el6_5.2, bash-doc-4.1.2-15.el6_5.2
- Red Hat Enterprise Linux HPC Node (v. 6) bash-4.1.2-15.el6_5.2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) bash-4.1.2-15.el6_5.2, bash-doc-4.1.2-15.el6_5.2
- Red Hat Enterprise Linux Server (v. 6) bash-4.1.2-15.el6_5.2
- Red Hat Enterprise Linux Server (v. 7) bash-4.2.45-5.el7_0.4
- Red Hat Enterprise Linux Server Optional (v. 6) bash-4.1.2-15.el6_5.2, bash-doc-4.1.2-15.el6_5.2
- Red Hat Enterprise Linux Server Optional (v. 7) bash-doc-4.2.45-5.el7_0.4
- Red Hat Enterprise Linux Workstation (v. 6) bash-4.1.2-15.el6_5.2
- Red Hat Enterprise Linux Workstation (v. 7) bash-4.2.45-5.el7_0.4
- Red Hat Enterprise Linux Workstation Optional (v. 6) bash-4.1.2-15.el6_5.2, bash-doc-4.1.2-15.el6_5.2
- Red Hat Enterprise Linux Workstation Optional (v. 7) bash-doc-4.2.45-5.el7_0.4
Fixes 3 records
Priority CRITICAL 100KEV
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown oth…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.9994 · Published 2014-09-25 · Fixed CWE-78
Priority HIGH 79
The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impa…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.64336 · Published 2014-09-28 · Partial fix CWE-119
Priority HIGH 77
Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unsp…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.60279 · Published 2014-09-28 · Fixed CWE-119
THREATIST.IORead the docs