{"schema":"threatline.record/2","record":{"id":"CVE-2014-7169","aliases":[],"summary":"GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability","details":"GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271.","categories":["Unclassified"],"product":"Bourne-Again Shell (Bash)","vendor":"GNU","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2014-7169","source_modified_at":"2025-10-22T00:05:36.027Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}],"defaultStatus":null}],"fixed_versions":[],"cvss":9.8,"severity":"Critical","kev":{"listed":true,"date_added":"2022-01-28","due_date":"2022-07-28","required_action":"Apply updates per vendor instructions.","ransomware_campaign_use":"Unknown"},"epss":{"probability":0.9994,"percentile":0.99973,"score_date":"2026-10-23"},"published_at":"2014-09-25T01:00:00.000Z","modified_at":"2025-10-22T00:05:36.027Z","provenance":[{"source":"CISA KEV","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23T17:00:09.9001Z"},{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2014-7169","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2025-10-22T00:05:36.027Z"},{"source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/34766","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2014-09-25"},{"source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/34895","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2014-10-06"},{"source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/35115","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2014-10-29"},{"source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/34765","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2014-09-25"},{"source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/34777","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2014-09-25"},{"source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/34860","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2014-10-02"},{"source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/34839","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2014-10-01"},{"source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/36609","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2015-04-02"},{"source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/34879","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2014-10-04"},{"source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/35146","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2014-11-03"},{"source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/34896","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2014-10-06"},{"source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/34862","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2014-10-02"},{"source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/36503","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2015-03-26"},{"source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/36504","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2015-03-26"},{"source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/36933","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2014-09-29"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2014-7169","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CISA KEV","CVE List","Exploit-DB","EPSS"],"references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-7169","source":"CISA KEV"},{"source":"CVE List","url":"https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk102673&src=securityAlerts","tags":["x_refsource_CONFIRM","x_transferred"]},{"source":"CVE List","url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10085","tags":["x_refsource_CONFIRM","x_transferred"]},{"source":"CVE List","url":"https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html","tags":["x_refsource_CONFIRM"]},{"source":"CVE List","url":"https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10648","tags":["x_refsource_CONFIRM"]},{"source":"CVE List","url":"https://access.redhat.com/node/1200223","tags":["x_refsource_CONFIRM"]},{"source":"CVE List","url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04497075","tags":["x_refsource_CONFIRM"]},{"source":"CVE List","url":"https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes","tags":["x_refsource_CONFIRM"]},{"source":"CVE List","url":"https://www.exploit-db.com/exploits/34879/","tags":["exploit","x_refsource_EXPLOIT-DB"]},{"source":"CVE List","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-7169","tags":["government-resource"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CISA ADP","ssvc":{"exploitation":"active","automatable":"yes","technical_impact":"total","assessed_at":"2025-02-10T19:31:47.209255Z"},"exploits":[{"source":"Exploit-DB","kind":"Remote exploit","name":"Bash - 'Shellshock' Environment Variables Command Injection","url":"https://www.exploit-db.com/exploits/34766","date":"2014-09-25","added":"2014-09-25","verified":true},{"source":"Exploit-DB","kind":"Webapps exploit","name":"Bash CGI - 'Shellshock' Remote Command Injection (Metasploit)","url":"https://www.exploit-db.com/exploits/34895","date":"2014-10-06","added":"2014-10-06","verified":true},{"source":"Exploit-DB","kind":"Remote exploit","name":"CUPS Filter - Bash Environment Variable Code Injection (Metasploit)","url":"https://www.exploit-db.com/exploits/35115","date":"2014-10-29","added":"2014-10-29","verified":true},{"source":"Exploit-DB","kind":"Remote exploit","name":"GNU Bash - 'Shellshock' Environment Variable Command Injection","url":"https://www.exploit-db.com/exploits/34765","date":"2014-09-25","added":"2014-09-25","verified":true},{"source":"Exploit-DB","kind":"Remote exploit","name":"GNU Bash - Environment Variable Command Injection (Metasploit)","url":"https://www.exploit-db.com/exploits/34777","date":"2014-09-25","added":"2014-09-25","verified":true},{"source":"Exploit-DB","kind":"Remote exploit","name":"GNU bash 4.3.11 - Environment Variable dhclient","url":"https://www.exploit-db.com/exploits/34860","date":"2014-10-02","added":"2014-10-02","verified":false},{"source":"Exploit-DB","kind":"Webapps exploit","name":"IPFire - CGI Web Interface (Authenticated) Bash Environment Variable Code Injection","url":"https://www.exploit-db.com/exploits/34839","date":"2014-10-01","added":"2014-10-01","verified":true},{"source":"Exploit-DB","kind":"Webapps exploit","name":"Kemp Load Master 7.1.16 - Multiple Vulnerabilities","url":"https://www.exploit-db.com/exploits/36609","date":"2015-04-02","added":"2015-04-02","verified":false},{"source":"Exploit-DB","kind":"Remote exploit","name":"OpenVPN 2.2.29 - 'Shellshock' Remote Command Injection","url":"https://www.exploit-db.com/exploits/34879","date":"2014-10-04","added":"2014-10-06","verified":false},{"source":"Exploit-DB","kind":"Webapps exploit","name":"PHP < 5.6.2 - 'Shellshock' Safe Mode / disable_functions Bypass / Command Injection","url":"https://www.exploit-db.com/exploits/35146","date":"2014-11-03","added":"2014-11-17","verified":false},{"source":"Exploit-DB","kind":"Remote exploit","name":"Postfix SMTP 4.2.x < 4.2.48 - 'Shellshock' Remote Command Injection","url":"https://www.exploit-db.com/exploits/34896","date":"2014-10-06","added":"2014-10-06","verified":true},{"source":"Exploit-DB","kind":"Remote exploit","name":"Pure-FTPd - External Authentication Bash Environment Variable Code Injection (Metasploit)","url":"https://www.exploit-db.com/exploits/34862","date":"2014-10-02","added":"2014-10-02","verified":true}],"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2025-10-22T00:05:36.027Z","content_hash":"42f9afee079464a13239c5910ca6d0fe4d1744c2904f9854f860404a2a5171f4"}}