Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2014-7169

KEV EPSS 89.06% · P100
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2014-7169

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
GNU Bash 操作系统命令注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
GNU Bash是美国软件开发者布莱恩-福克斯（Brian J. Fox）为GNU计划而编写的一个Shell（命令语言解释器），它运行于类Unix操作系统中（Linux系统的默认Shell），并能够从标准输入设备或文件中读取、执行命令，同时也结合了一部分ksh和csh的特点。 GNU Bash 4.3 bash43-025及之前版本中存在安全漏洞，该漏洞源于程序没有正确处理环境变量值内的畸形函数定义。远程攻击者可借助特制的环境变量利用该漏洞写入文件。以下产品和模块受到影响：OpenSSH sshd中的Fo
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2014-7169

#POC DescriptionSource LinkShenlong Link
1DEPRECATED: Chef cookbook to audit & remediate "Shellshock" (BASH-CVE-2014-7169)https://github.com/chef-boneyard/bash-shellshockPOC Details
2Nonehttps://github.com/gina-alaska/bash-cve-2014-7169-cookbookPOC Details
3CVE-2014-7169 Shell Shockhttps://github.com/Gobinath-B/SHELL-SCHOCKPOC Details
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2014-7169

请登录查看更多情报信息。
Advisory · 2Mailing list · 1

Same Patch Batch · n/a · 2014-09-25 · 27 CVEs total

CVE-2014-6715Android SlotMachine应用程序加密问题漏洞
CVE-2014-1568Mozilla Network Security Services 安全漏洞
CVE-2014-3361Cisco IOS 缓冲区溢出漏洞
CVE-2014-3360Cisco IOS和IOS XE 操作系统命令注入漏洞
CVE-2014-3359Cisco IOS和IOS XE 资源管理错误漏洞
CVE-2014-3358Cisco IOS和IOS XE 操作系统命令注入漏洞
CVE-2014-3357Cisco IOS和IOS XE 操作系统命令注入漏洞
CVE-2014-3356Cisco IOS和IOS XE 缓冲区溢出漏洞
CVE-2014-3355Cisco IOS和IOS XE 缓冲区溢出漏洞
CVE-2014-3354Cisco IOS和IOS XE 输入验证漏洞
CVE-2014-6718Android My Mobile Day应用程序加密问题漏洞
CVE-2014-6717Android iTriage Health应用程序加密问题漏洞
CVE-2014-6716Android fastin应用程序加密问题漏洞
CVE-2014-6702Android StarSat International应用程序加密问题漏洞
CVE-2014-6714Android WebMD应用程序加密问题漏洞
CVE-2014-6713Android MedQuiz: Medical Chat and MCQs应用程序加密问题漏洞
CVE-2014-6712Android Airlines International应用程序加密问题漏洞
CVE-2014-6711Android ABC Lounge Webradio应用程序加密问题漏洞
CVE-2014-6710Android Chifro Kids Coloring Game应用程序加密问题漏洞
CVE-2014-6709Android TechRadar News应用程序加密问题漏洞

Showing top 20 of 27 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2014-7169

No comments yet

Leave a comment