Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2014-7186

EPSS 89.35% · P100
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2014-7186

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted use of here documents, aka the "redir_stack" issue.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
GNU Bash 缓冲区溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
GNU Bash是美国软件开发者布莱恩-福克斯（Brian J. Fox）为GNU计划而编写的一个Shell（命令语言解释器），它运行于类Unix操作系统中（Linux系统的默认Shell），并能够从标准输入设备或文件中读取、执行命令，同时也结合了一部分ksh和csh的特点。 GNU Bash 4.3 bash43-026及之前版本的parse.y文件中的redirection实现中存在安全漏洞。远程攻击者可借助特制的‘here’文档利用该漏洞造成拒绝服务（越边界数组访问和应用程序崩溃）。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2014-7186

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2014-7186

Please Login to view more intelligence information

Same Patch Batch · n/a · 2014-09-28 · 42 CVEs total

CVE-2014-6762Android bongomovie应用程序加密问题漏洞
CVE-2014-6752Android Mindless Behavior Fan Base应用程序加密问题漏洞
CVE-2014-6753Android sunnat e rasool应用程序加密问题漏洞
CVE-2014-6754Android Vector Outage Manager应用程序加密问题漏洞
CVE-2014-6755Android SDN Forum应用程序加密问题漏洞
CVE-2014-6756Android Reddit Aww应用程序加密问题漏洞
CVE-2014-6757Android Koran - AlqoranVideos应用程序加密问题漏洞
CVE-2014-6758Android Qin Story应用程序加密问题漏洞
CVE-2014-6759Android Downton Abbey Fan Portal应用程序加密问题漏洞
CVE-2014-6760Android Harem Thief Dating应用程序加密问题漏洞
CVE-2014-6761Android Aprende a Meditar应用程序加密问题漏洞
CVE-2014-6751Android Grasshopper Beta应用程序加密问题漏洞
CVE-2014-6763Android Codename Birdgame应用程序加密问题漏洞
CVE-2014-6764Android Assyrian应用程序加密问题漏洞
CVE-2014-6765Android No Fuss Home Loans应用程序加密问题漏洞
CVE-2014-6766Android Afro-Beat应用程序加密问题漏洞
CVE-2014-6767Android Juggle! FREE应用程序加密问题漏洞
CVE-2014-6768Android Anywhere Anytime Yoga Workout应用程序加密问题漏洞
CVE-2014-6769Android Meteo Belgique应用程序加密问题漏洞
CVE-2014-6770Android Aerospace Jobs应用程序加密问题漏洞

Showing top 20 of 42 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2014-7186

No comments yet

Leave a comment