CVE-2014-6271

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

GNU — Bourne-Again Shell (Bash)

Added to KEV catalog: 28 January 2022
Federal remediation due date: 28 July 2022
Weakness classification (CWE): CWE-78

CISA Description

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2014-6271

View on NVD View on MITRE CVE View full CISA catalog

More GNU Vulnerabilities

CVE-2026-24061

GNU InetUtils Argument Injection Vulnerability

CVE-2014-6278

GNU Bash OS Command Injection Vulnerability

CVE-2023-4911

GNU C Library Buffer Overflow Vulnerability

CVE-2014-7169

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

Confirm Your Exposure

Is this vulnerability present in your environment?

CRS delivers independent VAPT assessments that identify exactly which known-exploited vulnerabilities exist in your network, applications, and infrastructure.

Explore VAPT Services