Red Hat Security Advisory

RHSA-2014:1312

bash Shift_JIS security update

Released 2014-09-26 · Red Hat rating Important · View on Red Hat →

Fixed in

S-JIS for Red Hat Enteprise Linux 5 Server bash-3.2-33.el5_11.1.sjis.2, bash-3.2-33.el5_11.1.sjis.2.i386, bash-3.2-33.el5_11.1.sjis.2.ia64
S-JIS for Red Hat Enteprise Linux 6 Server bash-4.1.2-15.el6_5.1.sjis.2, bash-doc-4.1.2-15.el6_5.1.sjis.2

Fixes 3 records

TI-2014-05975 CVE-2014-7169 · GHSA-f7j6-xrjp-vffg

GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed…

CRITICAL 100KEV

GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown oth…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.9994 Published 2014-09-25 Fixed CWE-78

TI-2014-05988 CVE-2014-7186 · GHSA-w7vx-gpvr-f5cg

The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows…

HIGH 79

The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impa…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.64336 Published 2014-09-28 Partial fix CWE-119

TI-2014-05989 CVE-2014-7187 · GHSA-8m22-gm6f-5487

Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3…

HIGH 77

Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unsp…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.60279 Published 2014-09-28 Fixed CWE-119