Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2014-7186 (GCVE-0-2014-7186)
Vulnerability from cvelistv5 – Published: 2014-09-28 19:00 – Updated: 2024-08-06 12:40
VLAI
EPSS
VEX
Summary
The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted use of here documents, aka the "redir_stack" issue.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
125 references
Date Public
2014-09-25 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T12:40:19.198Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21685749"
},
{
"name": "HPSBMU03165",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=141577137423233\u0026w=2"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=\u0026solutionid=sk102673\u0026src=securityAlerts"
},
{
"name": "HPSBST03131",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=141383138121313\u0026w=2"
},
{
"name": "SSRT101819",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=142721162228379\u0026w=2"
},
{
"name": "20141001 NEW VMSA-2014-0010 - VMware product updates address critical Bash security vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/533593/100/0/threaded"
},
{
"name": "HPSBMU03245",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=142358026505815\u0026w=2"
},
{
"name": "openSUSE-SU-2014:1229",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00038.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21686084"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21686479"
},
{
"name": "61188",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/61188"
},
{
"name": "JVN#55667175",
"tags": [
"third-party-advisory",
"x_refsource_JVN",
"x_transferred"
],
"url": "http://jvn.jp/en/jp/JVN55667175/index.html"
},
{
"name": "openSUSE-SU-2014:1254",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.html"
},
{
"name": "60433",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/60433"
},
{
"name": "[oss-security] 20140925 Fwd: Non-upstream patches for bash",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://openwall.com/lists/oss-security/2014/09/25/32"
},
{
"name": "HPSBMU03143",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=141383026420882\u0026w=2"
},
{
"name": "HPSBMU03182",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=141585637922673\u0026w=2"
},
{
"name": "HPSBST03155",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=141576728022234\u0026w=2"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21685541"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html"
},
{
"name": "61636",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/61636"
},
{
"name": "61816",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/61816"
},
{
"name": "61442",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/61442"
},
{
"name": "HPSBMU03246",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=142358078406056\u0026w=2"
},
{
"name": "61283",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/61283"
},
{
"name": "SSRT101711",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=142113462216480\u0026w=2"
},
{
"name": "APPLE-SA-2015-09-30-3",
"tags": [
"vendor-advisory",
"x_refsource_APPLE",
"x_transferred"
],
"url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10085"
},
{
"name": "61654",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/61654"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315"
},
{
"name": "62312",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/62312"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html"
},
{
"name": "HPSBMU03217",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=141879528318582\u0026w=2"
},
{
"name": "RHSA-2014:1312",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2014-1312.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21685604"
},
{
"name": "SSRT101868",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=142118135300698\u0026w=2"
},
{
"name": "61703",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/61703"
},
{
"name": "USN-2364-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2364-1"
},
{
"name": "61065",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/61065"
},
{
"name": "HPSBST03129",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=141383196021590\u0026w=2"
},
{
"name": "HPSBMU03144",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=141383081521087\u0026w=2"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21686445"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21686131"
},
{
"name": "JVNDB-2014-000126",
"tags": [
"third-party-advisory",
"x_refsource_JVNDB",
"x_transferred"
],
"url": "http://jvndb.jvn.jp/jvndb/JVNDB-2014-000126"
},
{
"name": "SSRT101827",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=141879528318582\u0026w=2"
},
{
"name": "61641",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/61641"
},
{
"name": "SUSE-SU-2014:1247",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00042.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10648"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21685914"
},
{
"name": "20141001 FW: NEW VMSA-2014-0010 - VMware product updates address critical Bash security vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_FULLDISC",
"x_transferred"
],
"url": "http://seclists.org/fulldisclosure/2014/Oct/0"
},
{
"name": "MDVSA-2015:164",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA",
"x_transferred"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:164"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-c04497075"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://support.apple.com/HT205267"
},
{
"name": "HPSBMU03220",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=142721162228379\u0026w=2"
},
{
"name": "60024",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/60024"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html"
},
{
"name": "61622",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/61622"
},
{
"name": "20140926 GNU Bash Environment Variable Command Injection Vulnerability",
"tags": [
"vendor-advisory",
"x_refsource_CISCO",
"x_transferred"
],
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bash"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://support.novell.com/security/cve/CVE-2014-7186.html"
},
{
"name": "[oss-security] 20140928 Re: CVE-2014-6271: remote code execution through bash",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://openwall.com/lists/oss-security/2014/09/28/10"
},
{
"name": "62343",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/62343"
},
{
"name": "61565",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/61565"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://www.suse.com/support/shellshock/"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://support.apple.com/HT204244"
},
{
"name": "HPSBST03157",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=141450491804793\u0026w=2"
},
{
"name": "61313",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/61313"
},
{
"name": "SSRT101830",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=142289270617409\u0026w=2"
},
{
"name": "SSRT101742",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=142358026505815\u0026w=2"
},
{
"name": "61873",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/61873"
},
{
"name": "[oss-security] 20140926 Re: Fwd: Non-upstream patches for bash",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://openwall.com/lists/oss-security/2014/09/26/2"
},
{
"name": "61485",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/61485"
},
{
"name": "openSUSE-SU-2014:1242",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00041.html"
},
{
"name": "61618",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/61618"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-c04518183"
},
{
"name": "HPSBST03154",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=141577297623641\u0026w=2"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=isg3T1021272"
},
{
"name": "HPSBGN03142",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=141383244821813\u0026w=2"
},
{
"name": "61312",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/61312"
},
{
"name": "60193",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/60193"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.vmware.com/security/advisories/VMSA-2014-0010.html"
},
{
"name": "61479",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/61479"
},
{
"name": "60063",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/60063"
},
{
"name": "60034",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/60034"
},
{
"name": "59907",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/59907"
},
{
"name": "58200",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/58200"
},
{
"name": "HPSBST03181",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=141577241923505\u0026w=2"
},
{
"name": "61643",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/61643"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.novell.com/support/kb/doc.php?id=7015721"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21687079"
},
{
"name": "61503",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/61503"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21686246"
},
{
"name": "RHSA-2014:1354",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2014-1354.html"
},
{
"name": "HPSBMU03236",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=142289270617409\u0026w=2"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.qnap.com/i/en/support/con_show.php?cid=61"
},
{
"name": "HPSBST03148",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=141694386919794\u0026w=2"
},
{
"name": "61552",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/61552"
},
{
"name": "61780",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/61780"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://support.citrix.com/article/CTX200223"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21686447"
},
{
"name": "62228",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/62228"
},
{
"name": "HPSBGN03138",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=141330468527613\u0026w=2"
},
{
"name": "60044",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/60044"
},
{
"name": "61291",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/61291"
},
{
"name": "HPSBHF03125",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=141345648114150\u0026w=2"
},
{
"name": "61287",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/61287"
},
{
"name": "HPSBGN03233",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=142118135300698\u0026w=2"
},
{
"name": "SSRT101739",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=142118135300698\u0026w=2"
},
{
"name": "61711",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/61711"
},
{
"name": "HPSBOV03228",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=142113462216480\u0026w=2"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=isg3T1021361"
},
{
"name": "APPLE-SA-2015-01-27-4",
"tags": [
"vendor-advisory",
"x_refsource_APPLE",
"x_transferred"
],
"url": "http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html"
},
{
"name": "HPSBGN03141",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=141383304022067\u0026w=2"
},
{
"name": "RHSA-2014:1311",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2014-1311.html"
},
{
"name": "61128",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/61128"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://support.citrix.com/article/CTX200217"
},
{
"name": "61471",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/61471"
},
{
"name": "60055",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/60055"
},
{
"name": "61550",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/61550"
},
{
"name": "61633",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/61633"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21686494"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://kb.bluecoat.com/index?page=content\u0026id=SA82"
},
{
"name": "SUSE-SU-2014:1259",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00048.html"
},
{
"name": "61328",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/61328"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21685733"
},
{
"name": "61129",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/61129"
},
{
"name": "61603",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/61603"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2014-09-25T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted use of here documents, aka the \"redir_stack\" issue."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-09T18:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21685749"
},
{
"name": "HPSBMU03165",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=141577137423233\u0026w=2"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=\u0026solutionid=sk102673\u0026src=securityAlerts"
},
{
"name": "HPSBST03131",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=141383138121313\u0026w=2"
},
{
"name": "SSRT101819",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=142721162228379\u0026w=2"
},
{
"name": "20141001 NEW VMSA-2014-0010 - VMware product updates address critical Bash security vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/533593/100/0/threaded"
},
{
"name": "HPSBMU03245",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=142358026505815\u0026w=2"
},
{
"name": "openSUSE-SU-2014:1229",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00038.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21686084"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21686479"
},
{
"name": "61188",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/61188"
},
{
"name": "JVN#55667175",
"tags": [
"third-party-advisory",
"x_refsource_JVN"
],
"url": "http://jvn.jp/en/jp/JVN55667175/index.html"
},
{
"name": "openSUSE-SU-2014:1254",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.html"
},
{
"name": "60433",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/60433"
},
{
"name": "[oss-security] 20140925 Fwd: Non-upstream patches for bash",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://openwall.com/lists/oss-security/2014/09/25/32"
},
{
"name": "HPSBMU03143",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=141383026420882\u0026w=2"
},
{
"name": "HPSBMU03182",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=141585637922673\u0026w=2"
},
{
"name": "HPSBST03155",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=141576728022234\u0026w=2"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21685541"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html"
},
{
"name": "61636",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/61636"
},
{
"name": "61816",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/61816"
},
{
"name": "61442",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/61442"
},
{
"name": "HPSBMU03246",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=142358078406056\u0026w=2"
},
{
"name": "61283",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/61283"
},
{
"name": "SSRT101711",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=142113462216480\u0026w=2"
},
{
"name": "APPLE-SA-2015-09-30-3",
"tags": [
"vendor-advisory",
"x_refsource_APPLE"
],
"url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10085"
},
{
"name": "61654",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/61654"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315"
},
{
"name": "62312",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/62312"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html"
},
{
"name": "HPSBMU03217",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=141879528318582\u0026w=2"
},
{
"name": "RHSA-2014:1312",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2014-1312.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21685604"
},
{
"name": "SSRT101868",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=142118135300698\u0026w=2"
},
{
"name": "61703",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/61703"
},
{
"name": "USN-2364-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2364-1"
},
{
"name": "61065",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/61065"
},
{
"name": "HPSBST03129",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=141383196021590\u0026w=2"
},
{
"name": "HPSBMU03144",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=141383081521087\u0026w=2"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21686445"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21686131"
},
{
"name": "JVNDB-2014-000126",
"tags": [
"third-party-advisory",
"x_refsource_JVNDB"
],
"url": "http://jvndb.jvn.jp/jvndb/JVNDB-2014-000126"
},
{
"name": "SSRT101827",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=141879528318582\u0026w=2"
},
{
"name": "61641",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/61641"
},
{
"name": "SUSE-SU-2014:1247",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00042.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10648"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21685914"
},
{
"name": "20141001 FW: NEW VMSA-2014-0010 - VMware product updates address critical Bash security vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_FULLDISC"
],
"url": "http://seclists.org/fulldisclosure/2014/Oct/0"
},
{
"name": "MDVSA-2015:164",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:164"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-c04497075"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://support.apple.com/HT205267"
},
{
"name": "HPSBMU03220",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=142721162228379\u0026w=2"
},
{
"name": "60024",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/60024"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html"
},
{
"name": "61622",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/61622"
},
{
"name": "20140926 GNU Bash Environment Variable Command Injection Vulnerability",
"tags": [
"vendor-advisory",
"x_refsource_CISCO"
],
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bash"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://support.novell.com/security/cve/CVE-2014-7186.html"
},
{
"name": "[oss-security] 20140928 Re: CVE-2014-6271: remote code execution through bash",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://openwall.com/lists/oss-security/2014/09/28/10"
},
{
"name": "62343",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/62343"
},
{
"name": "61565",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/61565"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://www.suse.com/support/shellshock/"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://support.apple.com/HT204244"
},
{
"name": "HPSBST03157",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=141450491804793\u0026w=2"
},
{
"name": "61313",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/61313"
},
{
"name": "SSRT101830",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=142289270617409\u0026w=2"
},
{
"name": "SSRT101742",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=142358026505815\u0026w=2"
},
{
"name": "61873",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/61873"
},
{
"name": "[oss-security] 20140926 Re: Fwd: Non-upstream patches for bash",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://openwall.com/lists/oss-security/2014/09/26/2"
},
{
"name": "61485",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/61485"
},
{
"name": "openSUSE-SU-2014:1242",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00041.html"
},
{
"name": "61618",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/61618"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-c04518183"
},
{
"name": "HPSBST03154",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=141577297623641\u0026w=2"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=isg3T1021272"
},
{
"name": "HPSBGN03142",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=141383244821813\u0026w=2"
},
{
"name": "61312",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/61312"
},
{
"name": "60193",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/60193"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.vmware.com/security/advisories/VMSA-2014-0010.html"
},
{
"name": "61479",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/61479"
},
{
"name": "60063",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/60063"
},
{
"name": "60034",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/60034"
},
{
"name": "59907",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/59907"
},
{
"name": "58200",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/58200"
},
{
"name": "HPSBST03181",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=141577241923505\u0026w=2"
},
{
"name": "61643",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/61643"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.novell.com/support/kb/doc.php?id=7015721"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21687079"
},
{
"name": "61503",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/61503"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21686246"
},
{
"name": "RHSA-2014:1354",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2014-1354.html"
},
{
"name": "HPSBMU03236",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=142289270617409\u0026w=2"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.qnap.com/i/en/support/con_show.php?cid=61"
},
{
"name": "HPSBST03148",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=141694386919794\u0026w=2"
},
{
"name": "61552",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/61552"
},
{
"name": "61780",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/61780"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://support.citrix.com/article/CTX200223"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21686447"
},
{
"name": "62228",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/62228"
},
{
"name": "HPSBGN03138",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=141330468527613\u0026w=2"
},
{
"name": "60044",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/60044"
},
{
"name": "61291",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/61291"
},
{
"name": "HPSBHF03125",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=141345648114150\u0026w=2"
},
{
"name": "61287",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/61287"
},
{
"name": "HPSBGN03233",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=142118135300698\u0026w=2"
},
{
"name": "SSRT101739",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=142118135300698\u0026w=2"
},
{
"name": "61711",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/61711"
},
{
"name": "HPSBOV03228",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=142113462216480\u0026w=2"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=isg3T1021361"
},
{
"name": "APPLE-SA-2015-01-27-4",
"tags": [
"vendor-advisory",
"x_refsource_APPLE"
],
"url": "http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html"
},
{
"name": "HPSBGN03141",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=141383304022067\u0026w=2"
},
{
"name": "RHSA-2014:1311",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2014-1311.html"
},
{
"name": "61128",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/61128"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://support.citrix.com/article/CTX200217"
},
{
"name": "61471",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/61471"
},
{
"name": "60055",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/60055"
},
{
"name": "61550",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/61550"
},
{
"name": "61633",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/61633"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21686494"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://kb.bluecoat.com/index?page=content\u0026id=SA82"
},
{
"name": "SUSE-SU-2014:1259",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00048.html"
},
{
"name": "61328",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/61328"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21685733"
},
{
"name": "61129",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/61129"
},
{
"name": "61603",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/61603"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2014-7186",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted use of here documents, aka the \"redir_stack\" issue."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.html",
"refsource": "MISC",
"url": "http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.html"
},
{
"name": "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897",
"refsource": "CONFIRM",
"url": "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897"
},
{
"name": "http://www-01.ibm.com/support/docview.wss?uid=swg21685749",
"refsource": "CONFIRM",
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21685749"
},
{
"name": "HPSBMU03165",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=141577137423233\u0026w=2"
},
{
"name": "https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=\u0026solutionid=sk102673\u0026src=securityAlerts",
"refsource": "CONFIRM",
"url": "https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=\u0026solutionid=sk102673\u0026src=securityAlerts"
},
{
"name": "HPSBST03131",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=141383138121313\u0026w=2"
},
{
"name": "SSRT101819",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=142721162228379\u0026w=2"
},
{
"name": "20141001 NEW VMSA-2014-0010 - VMware product updates address critical Bash security vulnerabilities",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/533593/100/0/threaded"
},
{
"name": "HPSBMU03245",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=142358026505815\u0026w=2"
},
{
"name": "openSUSE-SU-2014:1229",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00038.html"
},
{
"name": "http://www-01.ibm.com/support/docview.wss?uid=swg21686084",
"refsource": "CONFIRM",
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21686084"
},
{
"name": "http://www-01.ibm.com/support/docview.wss?uid=swg21686479",
"refsource": "CONFIRM",
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21686479"
},
{
"name": "61188",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/61188"
},
{
"name": "JVN#55667175",
"refsource": "JVN",
"url": "http://jvn.jp/en/jp/JVN55667175/index.html"
},
{
"name": "openSUSE-SU-2014:1254",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.html"
},
{
"name": "60433",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/60433"
},
{
"name": "[oss-security] 20140925 Fwd: Non-upstream patches for bash",
"refsource": "MLIST",
"url": "http://openwall.com/lists/oss-security/2014/09/25/32"
},
{
"name": "HPSBMU03143",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=141383026420882\u0026w=2"
},
{
"name": "HPSBMU03182",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=141585637922673\u0026w=2"
},
{
"name": "HPSBST03155",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=141576728022234\u0026w=2"
},
{
"name": "http://www-01.ibm.com/support/docview.wss?uid=swg21685541",
"refsource": "CONFIRM",
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21685541"
},
{
"name": "http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html",
"refsource": "CONFIRM",
"url": "http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html"
},
{
"name": "61636",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/61636"
},
{
"name": "61816",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/61816"
},
{
"name": "61442",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/61442"
},
{
"name": "HPSBMU03246",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=142358078406056\u0026w=2"
},
{
"name": "61283",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/61283"
},
{
"name": "SSRT101711",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=142113462216480\u0026w=2"
},
{
"name": "APPLE-SA-2015-09-30-3",
"refsource": "APPLE",
"url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
},
{
"name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10085",
"refsource": "CONFIRM",
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10085"
},
{
"name": "61654",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/61654"
},
{
"name": "http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315",
"refsource": "CONFIRM",
"url": "http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315"
},
{
"name": "62312",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/62312"
},
{
"name": "https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html",
"refsource": "CONFIRM",
"url": "https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html"
},
{
"name": "HPSBMU03217",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=141879528318582\u0026w=2"
},
{
"name": "RHSA-2014:1312",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2014-1312.html"
},
{
"name": "http://www-01.ibm.com/support/docview.wss?uid=swg21685604",
"refsource": "CONFIRM",
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21685604"
},
{
"name": "SSRT101868",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=142118135300698\u0026w=2"
},
{
"name": "61703",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/61703"
},
{
"name": "USN-2364-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2364-1"
},
{
"name": "61065",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/61065"
},
{
"name": "HPSBST03129",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=141383196021590\u0026w=2"
},
{
"name": "HPSBMU03144",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=141383081521087\u0026w=2"
},
{
"name": "http://www-01.ibm.com/support/docview.wss?uid=swg21686445",
"refsource": "CONFIRM",
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21686445"
},
{
"name": "http://www-01.ibm.com/support/docview.wss?uid=swg21686131",
"refsource": "CONFIRM",
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21686131"
},
{
"name": "JVNDB-2014-000126",
"refsource": "JVNDB",
"url": "http://jvndb.jvn.jp/jvndb/JVNDB-2014-000126"
},
{
"name": "SSRT101827",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=141879528318582\u0026w=2"
},
{
"name": "61641",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/61641"
},
{
"name": "SUSE-SU-2014:1247",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00042.html"
},
{
"name": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10648",
"refsource": "CONFIRM",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10648"
},
{
"name": "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898",
"refsource": "CONFIRM",
"url": "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898"
},
{
"name": "http://www-01.ibm.com/support/docview.wss?uid=swg21685914",
"refsource": "CONFIRM",
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21685914"
},
{
"name": "20141001 FW: NEW VMSA-2014-0010 - VMware product updates address critical Bash security vulnerabilities",
"refsource": "FULLDISC",
"url": "http://seclists.org/fulldisclosure/2014/Oct/0"
},
{
"name": "MDVSA-2015:164",
"refsource": "MANDRIVA",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:164"
},
{
"name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-c04497075",
"refsource": "CONFIRM",
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-c04497075"
},
{
"name": "https://support.apple.com/HT205267",
"refsource": "CONFIRM",
"url": "https://support.apple.com/HT205267"
},
{
"name": "HPSBMU03220",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=142721162228379\u0026w=2"
},
{
"name": "60024",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/60024"
},
{
"name": "http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html",
"refsource": "MISC",
"url": "http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html"
},
{
"name": "61622",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/61622"
},
{
"name": "20140926 GNU Bash Environment Variable Command Injection Vulnerability",
"refsource": "CISCO",
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bash"
},
{
"name": "http://support.novell.com/security/cve/CVE-2014-7186.html",
"refsource": "CONFIRM",
"url": "http://support.novell.com/security/cve/CVE-2014-7186.html"
},
{
"name": "[oss-security] 20140928 Re: CVE-2014-6271: remote code execution through bash",
"refsource": "MLIST",
"url": "http://openwall.com/lists/oss-security/2014/09/28/10"
},
{
"name": "62343",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/62343"
},
{
"name": "61565",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/61565"
},
{
"name": "https://www.suse.com/support/shellshock/",
"refsource": "CONFIRM",
"url": "https://www.suse.com/support/shellshock/"
},
{
"name": "http://support.apple.com/HT204244",
"refsource": "CONFIRM",
"url": "http://support.apple.com/HT204244"
},
{
"name": "HPSBST03157",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=141450491804793\u0026w=2"
},
{
"name": "61313",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/61313"
},
{
"name": "SSRT101830",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=142289270617409\u0026w=2"
},
{
"name": "SSRT101742",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=142358026505815\u0026w=2"
},
{
"name": "61873",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/61873"
},
{
"name": "[oss-security] 20140926 Re: Fwd: Non-upstream patches for bash",
"refsource": "MLIST",
"url": "http://openwall.com/lists/oss-security/2014/09/26/2"
},
{
"name": "61485",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/61485"
},
{
"name": "openSUSE-SU-2014:1242",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00041.html"
},
{
"name": "61618",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/61618"
},
{
"name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-c04518183",
"refsource": "CONFIRM",
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-c04518183"
},
{
"name": "HPSBST03154",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=141577297623641\u0026w=2"
},
{
"name": "http://www-01.ibm.com/support/docview.wss?uid=isg3T1021272",
"refsource": "CONFIRM",
"url": "http://www-01.ibm.com/support/docview.wss?uid=isg3T1021272"
},
{
"name": "HPSBGN03142",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=141383244821813\u0026w=2"
},
{
"name": "61312",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/61312"
},
{
"name": "60193",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/60193"
},
{
"name": "http://www.vmware.com/security/advisories/VMSA-2014-0010.html",
"refsource": "CONFIRM",
"url": "http://www.vmware.com/security/advisories/VMSA-2014-0010.html"
},
{
"name": "61479",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/61479"
},
{
"name": "60063",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/60063"
},
{
"name": "60034",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/60034"
},
{
"name": "59907",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/59907"
},
{
"name": "58200",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/58200"
},
{
"name": "HPSBST03181",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=141577241923505\u0026w=2"
},
{
"name": "61643",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/61643"
},
{
"name": "http://www.novell.com/support/kb/doc.php?id=7015721",
"refsource": "CONFIRM",
"url": "http://www.novell.com/support/kb/doc.php?id=7015721"
},
{
"name": "http://www-01.ibm.com/support/docview.wss?uid=swg21687079",
"refsource": "CONFIRM",
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21687079"
},
{
"name": "61503",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/61503"
},
{
"name": "http://www-01.ibm.com/support/docview.wss?uid=swg21686246",
"refsource": "CONFIRM",
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21686246"
},
{
"name": "RHSA-2014:1354",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2014-1354.html"
},
{
"name": "HPSBMU03236",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=142289270617409\u0026w=2"
},
{
"name": "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915",
"refsource": "CONFIRM",
"url": "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915"
},
{
"name": "http://www.qnap.com/i/en/support/con_show.php?cid=61",
"refsource": "CONFIRM",
"url": "http://www.qnap.com/i/en/support/con_show.php?cid=61"
},
{
"name": "HPSBST03148",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=141694386919794\u0026w=2"
},
{
"name": "61552",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/61552"
},
{
"name": "61780",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/61780"
},
{
"name": "http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279",
"refsource": "CONFIRM",
"url": "http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279"
},
{
"name": "https://support.citrix.com/article/CTX200223",
"refsource": "CONFIRM",
"url": "https://support.citrix.com/article/CTX200223"
},
{
"name": "http://www-01.ibm.com/support/docview.wss?uid=swg21686447",
"refsource": "CONFIRM",
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21686447"
},
{
"name": "62228",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/62228"
},
{
"name": "HPSBGN03138",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=141330468527613\u0026w=2"
},
{
"name": "60044",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/60044"
},
{
"name": "61291",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/61291"
},
{
"name": "HPSBHF03125",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=141345648114150\u0026w=2"
},
{
"name": "61287",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/61287"
},
{
"name": "HPSBGN03233",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=142118135300698\u0026w=2"
},
{
"name": "SSRT101739",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=142118135300698\u0026w=2"
},
{
"name": "61711",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/61711"
},
{
"name": "HPSBOV03228",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=142113462216480\u0026w=2"
},
{
"name": "http://www-01.ibm.com/support/docview.wss?uid=isg3T1021361",
"refsource": "CONFIRM",
"url": "http://www-01.ibm.com/support/docview.wss?uid=isg3T1021361"
},
{
"name": "APPLE-SA-2015-01-27-4",
"refsource": "APPLE",
"url": "http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html"
},
{
"name": "HPSBGN03141",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=141383304022067\u0026w=2"
},
{
"name": "RHSA-2014:1311",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2014-1311.html"
},
{
"name": "61128",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/61128"
},
{
"name": "https://support.citrix.com/article/CTX200217",
"refsource": "CONFIRM",
"url": "https://support.citrix.com/article/CTX200217"
},
{
"name": "61471",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/61471"
},
{
"name": "60055",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/60055"
},
{
"name": "61550",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/61550"
},
{
"name": "61633",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/61633"
},
{
"name": "http://www-01.ibm.com/support/docview.wss?uid=swg21686494",
"refsource": "CONFIRM",
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21686494"
},
{
"name": "https://kb.bluecoat.com/index?page=content\u0026id=SA82",
"refsource": "CONFIRM",
"url": "https://kb.bluecoat.com/index?page=content\u0026id=SA82"
},
{
"name": "SUSE-SU-2014:1259",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00048.html"
},
{
"name": "61328",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/61328"
},
{
"name": "http://www-01.ibm.com/support/docview.wss?uid=swg21685733",
"refsource": "CONFIRM",
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21685733"
},
{
"name": "61129",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/61129"
},
{
"name": "61603",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/61603"
},
{
"name": "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879",
"refsource": "CONFIRM",
"url": "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2014-7186",
"datePublished": "2014-09-28T19:00:00.000Z",
"dateReserved": "2014-09-25T00:00:00.000Z",
"dateUpdated": "2024-08-06T12:40:19.198Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2014-7186",
"date": "2026-07-21",
"epss": "0.64336",
"percentile": "0.99148"
},
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:bash:1.14.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FCAC75DF-FFF7-4721-9D47-6E29A5CCB7C8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:bash:1.14.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FCF4B4BB-C5A0-4283-9657-FC61BC95C014\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:bash:1.14.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9B04CBBD-E855-48D7-A5C9-AEC2B38FF1F4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:bash:1.14.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"972BDA0A-25C8-4C02-8624-07D2462C214C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:bash:1.14.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5B9EDE56-A8C4-40A8-9D14-F6E86F464BD7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:bash:1.14.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DAB4B8E1-E013-4DB5-AF65-70CC2AEC3B20\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:bash:1.14.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B5428D5A-7443-4BDD-9690-E44DBDBCAC9E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:bash:1.14.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"18A6E8C3-334D-443B-8AD6-F8A131490F4C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:bash:2.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5C74DAE6-8A77-47BF-B3ED-D76CD5AD75BB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:bash:2.01:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8B631B7E-C59D-444F-80CE-DC2345A56E97\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:bash:2.01.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"91C8E637-AD10-4854-AD60-A908D017DDA8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:bash:2.02:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"75AB7456-89E4-4F40-82D0-EED52CAEE670\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:bash:2.02.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C7E516F7-B6C6-4A0B-90F4-BC0F382E62E4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:bash:2.03:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2E37A5D0-79EB-442D-B4B8-49F5137A3FA9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:bash:2.04:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"AE919509-57B0-4D13-9503-943D5BFED620\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:bash:2.05:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0F027515-A126-4899-B78E-121C8312002F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:bash:2.05:a:*:*:*:*:*:*\", \"matchCriteriaId\": \"AC05A483-FAFD-4C40-85BC-D2EE907B2B54\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:bash:2.05:b:*:*:*:*:*:*\", \"matchCriteriaId\": \"097C61C9-4761-4D8F-9590-376FC1A5522B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:bash:3.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FCA81069-36E0-4035-B31F-A5281E10C760\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:bash:3.0.16:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BC216C39-2EA0-4B58-87EA-81A737E5D2E4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:bash:3.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"88731DFF-B0B1-4325-A662-287D5E6E7265\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:bash:3.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A7BB3ECE-0E83-45EB-AC27-BA29E2C52D1A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:bash:3.2.48:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3FA313D8-2B28-4C73-A96B-7814C37F0725\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:bash:4.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"43630818-4A62-4766-AADC-AB87BE1C5553\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:bash:4.0:rc1:*:*:*:*:*:*\", \"matchCriteriaId\": \"202B9DB4-80DC-4D1C-8DA8-C06E89FF542A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:bash:4.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"37CB667F-26C8-46FA-81CE-1F6909AC006D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:bash:4.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"755984AB-D061-45F0-8845-D7B78BA506E5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gnu:bash:4.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BC1DAC9F-711C-47EA-9BBC-0EDB2AF0A1AC\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted use of here documents, aka the \\\"redir_stack\\\" issue.\"}, {\"lang\": \"es\", \"value\": \"La implementaci\\u00f3n de redirecci\\u00f3n en parse.y en GNU Bash hasta 4.3 bash43-026 permite a atacantes remotos causar una denegaci\\u00f3n de servicio (acceso a array fuera de rango y ca\\u00edda de la aplicaci\\u00f3n) o posiblemente tener otro impacto no especificado a trav\\u00e9s de el uso manipulado de documentos here, tambi\\u00e9n conocido como el problema \u0027redir_stack\u0027.\"}]",
"id": "CVE-2014-7186",
"lastModified": "2024-11-21T02:16:29.170",
"metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:C/I:C/A:C\", \"baseScore\": 10.0, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"COMPLETE\", \"integrityImpact\": \"COMPLETE\", \"availabilityImpact\": \"COMPLETE\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 10.0, \"impactScore\": 10.0, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
"published": "2014-09-28T19:55:06.223",
"references": "[{\"url\": \"http://jvn.jp/en/jp/JVN55667175/index.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://jvndb.jvn.jp/jvndb/JVNDB-2014-000126\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00038.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00041.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00042.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00048.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=141330468527613\u0026w=2\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=141345648114150\u0026w=2\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=141383026420882\u0026w=2\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=141383081521087\u0026w=2\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=141383138121313\u0026w=2\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=141383196021590\u0026w=2\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=141383244821813\u0026w=2\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=141383304022067\u0026w=2\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=141450491804793\u0026w=2\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=141576728022234\u0026w=2\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=141577137423233\u0026w=2\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=141577241923505\u0026w=2\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=141577297623641\u0026w=2\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=141585637922673\u0026w=2\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=141694386919794\u0026w=2\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=141879528318582\u0026w=2\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=141879528318582\u0026w=2\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=142113462216480\u0026w=2\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=142113462216480\u0026w=2\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=142118135300698\u0026w=2\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=142118135300698\u0026w=2\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=142118135300698\u0026w=2\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=142289270617409\u0026w=2\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=142289270617409\u0026w=2\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=142358026505815\u0026w=2\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=142358026505815\u0026w=2\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=142358078406056\u0026w=2\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=142721162228379\u0026w=2\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=142721162228379\u0026w=2\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://openwall.com/lists/oss-security/2014/09/25/32\", \"source\": \"cve@mitre.org\", \"tags\": [\"Exploit\"]}, {\"url\": \"http://openwall.com/lists/oss-security/2014/09/26/2\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://openwall.com/lists/oss-security/2014/09/28/10\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2014-1311.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2014-1312.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2014-1354.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://seclists.org/fulldisclosure/2014/Oct/0\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/58200\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/59907\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/60024\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/60034\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/60044\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/60055\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/60063\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/60193\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/60433\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/61065\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/61128\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/61129\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/61188\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/61283\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/61287\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/61291\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/61312\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/61313\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/61328\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/61442\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/61471\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/61479\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/61485\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/61503\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/61550\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/61552\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/61565\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/61603\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/61618\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/61622\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/61633\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/61636\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/61641\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/61643\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/61654\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/61703\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/61711\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/61780\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/61816\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/61873\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/62228\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/62312\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/62343\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://support.apple.com/HT204244\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://support.novell.com/security/cve/CVE-2014-7186.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bash\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021272\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021361\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21685541\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21685604\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21685733\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21685749\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21685914\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21686084\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21686131\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21686246\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21686445\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21686447\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21686479\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21686494\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21687079\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2015:164\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.novell.com/support/kb/doc.php?id=7015721\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.qnap.com/i/en/support/con_show.php?cid=61\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.securityfocus.com/archive/1/533593/100/0/threaded\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.ubuntu.com/usn/USN-2364-1\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.vmware.com/security/advisories/VMSA-2014-0010.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://kb.bluecoat.com/index?page=content\u0026id=SA82\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10648\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10085\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://support.apple.com/HT205267\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://support.citrix.com/article/CTX200217\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://support.citrix.com/article/CTX200223\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-c04497075\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-c04518183\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=\u0026solutionid=sk102673\u0026src=securityAlerts\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://www.suse.com/support/shellshock/\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://jvn.jp/en/jp/JVN55667175/index.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://jvndb.jvn.jp/jvndb/JVNDB-2014-000126\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00038.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00041.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00042.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00048.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=141330468527613\u0026w=2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=141345648114150\u0026w=2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=141383026420882\u0026w=2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=141383081521087\u0026w=2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=141383138121313\u0026w=2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=141383196021590\u0026w=2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=141383244821813\u0026w=2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=141383304022067\u0026w=2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=141450491804793\u0026w=2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=141576728022234\u0026w=2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=141577137423233\u0026w=2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=141577241923505\u0026w=2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=141577297623641\u0026w=2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=141585637922673\u0026w=2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=141694386919794\u0026w=2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=141879528318582\u0026w=2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=141879528318582\u0026w=2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=142113462216480\u0026w=2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=142113462216480\u0026w=2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=142118135300698\u0026w=2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=142118135300698\u0026w=2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=142118135300698\u0026w=2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=142289270617409\u0026w=2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=142289270617409\u0026w=2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=142358026505815\u0026w=2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=142358026505815\u0026w=2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=142358078406056\u0026w=2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=142721162228379\u0026w=2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=142721162228379\u0026w=2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://openwall.com/lists/oss-security/2014/09/25/32\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Exploit\"]}, {\"url\": \"http://openwall.com/lists/oss-security/2014/09/26/2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://openwall.com/lists/oss-security/2014/09/28/10\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2014-1311.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2014-1312.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2014-1354.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://seclists.org/fulldisclosure/2014/Oct/0\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/58200\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/59907\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/60024\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/60034\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/60044\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/60055\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/60063\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/60193\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/60433\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/61065\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/61128\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/61129\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/61188\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/61283\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/61287\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/61291\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/61312\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/61313\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/61328\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/61442\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/61471\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/61479\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/61485\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/61503\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/61550\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/61552\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/61565\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/61603\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/61618\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/61622\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/61633\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/61636\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/61641\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/61643\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/61654\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/61703\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/61711\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/61780\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/61816\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/61873\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/62228\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/62312\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/62343\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://support.apple.com/HT204244\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://support.novell.com/security/cve/CVE-2014-7186.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bash\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021272\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021361\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21685541\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21685604\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21685733\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21685749\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21685914\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21686084\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21686131\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21686246\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21686445\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21686447\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21686479\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21686494\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21687079\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2015:164\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.novell.com/support/kb/doc.php?id=7015721\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.qnap.com/i/en/support/con_show.php?cid=61\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/archive/1/533593/100/0/threaded\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.ubuntu.com/usn/USN-2364-1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.vmware.com/security/advisories/VMSA-2014-0010.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://kb.bluecoat.com/index?page=content\u0026id=SA82\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10648\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10085\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://support.apple.com/HT205267\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://support.citrix.com/article/CTX200217\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://support.citrix.com/article/CTX200223\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-c04497075\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-c04518183\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=\u0026solutionid=sk102673\u0026src=securityAlerts\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://www.suse.com/support/shellshock/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-119\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2014-7186\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2014-09-28T19:55:06.223\",\"lastModified\":\"2026-05-06T22:30:45.220\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted use of here documents, aka the \\\"redir_stack\\\" issue.\"},{\"lang\":\"es\",\"value\":\"La implementaci\u00f3n de redirecci\u00f3n en parse.y en GNU Bash hasta 4.3 bash43-026 permite a atacantes remotos causar una denegaci\u00f3n de servicio (acceso a array fuera de rango y ca\u00edda de la aplicaci\u00f3n) o posiblemente tener otro impacto no especificado a trav\u00e9s de el uso manipulado de documentos here, tambi\u00e9n conocido como el problema \u0027redir_stack\u0027.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:C/I:C/A:C\",\"baseScore\":10.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":10.0,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-119\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnu:bash:1.14.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FCAC75DF-FFF7-4721-9D47-6E29A5CCB7C8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnu:bash:1.14.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FCF4B4BB-C5A0-4283-9657-FC61BC95C014\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnu:bash:1.14.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9B04CBBD-E855-48D7-A5C9-AEC2B38FF1F4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnu:bash:1.14.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"972BDA0A-25C8-4C02-8624-07D2462C214C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnu:bash:1.14.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5B9EDE56-A8C4-40A8-9D14-F6E86F464BD7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnu:bash:1.14.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DAB4B8E1-E013-4DB5-AF65-70CC2AEC3B20\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnu:bash:1.14.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B5428D5A-7443-4BDD-9690-E44DBDBCAC9E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnu:bash:1.14.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"18A6E8C3-334D-443B-8AD6-F8A131490F4C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnu:bash:2.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5C74DAE6-8A77-47BF-B3ED-D76CD5AD75BB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnu:bash:2.01:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8B631B7E-C59D-444F-80CE-DC2345A56E97\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnu:bash:2.01.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"91C8E637-AD10-4854-AD60-A908D017DDA8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnu:bash:2.02:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"75AB7456-89E4-4F40-82D0-EED52CAEE670\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnu:bash:2.02.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C7E516F7-B6C6-4A0B-90F4-BC0F382E62E4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnu:bash:2.03:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2E37A5D0-79EB-442D-B4B8-49F5137A3FA9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnu:bash:2.04:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AE919509-57B0-4D13-9503-943D5BFED620\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnu:bash:2.05:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0F027515-A126-4899-B78E-121C8312002F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnu:bash:2.05:a:*:*:*:*:*:*\",\"matchCriteriaId\":\"AC05A483-FAFD-4C40-85BC-D2EE907B2B54\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnu:bash:2.05:b:*:*:*:*:*:*\",\"matchCriteriaId\":\"097C61C9-4761-4D8F-9590-376FC1A5522B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnu:bash:3.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FCA81069-36E0-4035-B31F-A5281E10C760\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnu:bash:3.0.16:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BC216C39-2EA0-4B58-87EA-81A737E5D2E4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnu:bash:3.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"88731DFF-B0B1-4325-A662-287D5E6E7265\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnu:bash:3.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A7BB3ECE-0E83-45EB-AC27-BA29E2C52D1A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnu:bash:3.2.48:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3FA313D8-2B28-4C73-A96B-7814C37F0725\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnu:bash:4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"43630818-4A62-4766-AADC-AB87BE1C5553\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnu:bash:4.0:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"202B9DB4-80DC-4D1C-8DA8-C06E89FF542A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnu:bash:4.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"37CB667F-26C8-46FA-81CE-1F6909AC006D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnu:bash:4.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"755984AB-D061-45F0-8845-D7B78BA506E5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnu:bash:4.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BC1DAC9F-711C-47EA-9BBC-0EDB2AF0A1AC\"}]}]}],\"references\":[{\"url\":\"http://jvn.jp/en/jp/JVN55667175/index.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://jvndb.jvn.jp/jvndb/JVNDB-2014-000126\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00038.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00041.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00042.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00048.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=141330468527613\u0026w=2\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=141345648114150\u0026w=2\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=141383026420882\u0026w=2\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=141383081521087\u0026w=2\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=141383138121313\u0026w=2\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=141383196021590\u0026w=2\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=141383244821813\u0026w=2\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=141383304022067\u0026w=2\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=141450491804793\u0026w=2\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=141576728022234\u0026w=2\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=141577137423233\u0026w=2\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=141577241923505\u0026w=2\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=141577297623641\u0026w=2\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=141585637922673\u0026w=2\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=141694386919794\u0026w=2\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=141879528318582\u0026w=2\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=142113462216480\u0026w=2\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=142118135300698\u0026w=2\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=142289270617409\u0026w=2\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=142358026505815\u0026w=2\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=142358078406056\u0026w=2\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=142721162228379\u0026w=2\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://openwall.com/lists/oss-security/2014/09/25/32\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\"]},{\"url\":\"http://openwall.com/lists/oss-security/2014/09/26/2\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://openwall.com/lists/oss-security/2014/09/28/10\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2014-1311.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2014-1312.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2014-1354.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://seclists.org/fulldisclosure/2014/Oct/0\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/58200\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/59907\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/60024\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/60034\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/60044\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/60055\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/60063\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/60193\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/60433\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/61065\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/61128\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/61129\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/61188\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/61283\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/61287\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/61291\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/61312\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/61313\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/61328\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/61442\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/61471\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/61479\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/61485\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/61503\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/61550\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/61552\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/61565\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/61603\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/61618\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/61622\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/61633\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/61636\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/61641\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/61643\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/61654\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/61703\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/61711\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/61780\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/61816\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/61873\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/62228\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/62312\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/62343\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://support.apple.com/HT204244\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://support.novell.com/security/cve/CVE-2014-7186.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bash\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021272\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021361\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21685541\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21685604\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21685733\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21685749\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21685914\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21686084\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21686131\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21686246\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21686445\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21686447\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21686479\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21686494\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21687079\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2015:164\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.novell.com/support/kb/doc.php?id=7015721\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.qnap.com/i/en/support/con_show.php?cid=61\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/archive/1/533593/100/0/threaded\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.ubuntu.com/usn/USN-2364-1\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.vmware.com/security/advisories/VMSA-2014-0010.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://kb.bluecoat.com/index?page=content\u0026id=SA82\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10648\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10085\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://support.apple.com/HT205267\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://support.citrix.com/article/CTX200217\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://support.citrix.com/article/CTX200223\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-c04497075\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-c04518183\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=\u0026solutionid=sk102673\u0026src=securityAlerts\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://www.suse.com/support/shellshock/\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://jvn.jp/en/jp/JVN55667175/index.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://jvndb.jvn.jp/jvndb/JVNDB-2014-000126\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00038.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00041.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00042.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00048.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=141330468527613\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=141345648114150\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=141383026420882\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=141383081521087\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=141383138121313\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=141383196021590\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=141383244821813\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=141383304022067\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=141450491804793\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=141576728022234\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=141577137423233\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=141577241923505\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=141577297623641\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=141585637922673\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=141694386919794\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=141879528318582\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=142113462216480\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=142118135300698\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=142289270617409\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=142358026505815\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=142358078406056\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=142721162228379\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://openwall.com/lists/oss-security/2014/09/25/32\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\"]},{\"url\":\"http://openwall.com/lists/oss-security/2014/09/26/2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://openwall.com/lists/oss-security/2014/09/28/10\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2014-1311.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2014-1312.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2014-1354.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://seclists.org/fulldisclosure/2014/Oct/0\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/58200\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/59907\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/60024\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/60034\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/60044\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/60055\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/60063\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/60193\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/60433\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/61065\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/61128\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/61129\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/61188\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/61283\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/61287\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/61291\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/61312\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/61313\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/61328\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/61442\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/61471\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/61479\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/61485\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/61503\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/61550\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/61552\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/61565\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/61603\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/61618\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/61622\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/61633\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/61636\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/61641\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/61643\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/61654\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/61703\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/61711\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/61780\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/61816\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/61873\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/62228\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/62312\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/62343\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://support.apple.com/HT204244\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://support.novell.com/security/cve/CVE-2014-7186.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bash\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021272\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021361\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21685541\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21685604\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21685733\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21685749\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21685914\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21686084\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21686131\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21686246\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21686445\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21686447\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21686479\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21686494\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21687079\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2015:164\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.novell.com/support/kb/doc.php?id=7015721\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.qnap.com/i/en/support/con_show.php?cid=61\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/archive/1/533593/100/0/threaded\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.ubuntu.com/usn/USN-2364-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.vmware.com/security/advisories/VMSA-2014-0010.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://kb.bluecoat.com/index?page=content\u0026id=SA82\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10648\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10085\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://support.apple.com/HT205267\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://support.citrix.com/article/CTX200217\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://support.citrix.com/article/CTX200223\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-c04497075\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-c04518183\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=\u0026solutionid=sk102673\u0026src=securityAlerts\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.suse.com/support/shellshock/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
"redhat_vex": {
"aggregate_severity": "Moderate",
"current_release_date": "2026-06-28T07:16:00+00:00",
"cve": "CVE-2014-7186",
"id": "CVE-2014-7186",
"initial_release_date": "2014-09-25T00:00:00+00:00",
"product_status:fixed": "171",
"product_status:known_affected": "2",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "bash: parser can allow out-of-bounds memory access while handling redir_stack",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2014/cve-2014-7186.json",
"version": "3"
},
"suse_vex": {
"aggregate_severity": "moderate",
"current_release_date": "2026-07-05T02:16:43Z",
"cve": "CVE-2014-7186",
"id": "CVE-2014-7186",
"initial_release_date": "2023-02-15T05:26:38Z",
"product_status:known_not_affected": "399",
"product_status:recommended": "338",
"source": "SUSE CSAF VEX",
"status": "interim",
"title": "SUSE CVE CVE-2014-7186",
"url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2014-7186.json",
"version": "42"
}
}
}
RHSA-2014:1311
Vulnerability from csaf_redhat - Published: 2014-09-26 17:58 - Updated: 2026-06-28 12:23Summary
Red Hat Security Advisory: bash security update
Severity
Important
Notes
Topic: [Updated September 30, 2014]
This advisory has been updated with information on restarting system
services after applying this update. No changes have been made to the
original packages.
Updated bash packages that fix one security issue are now available for Red
Hat Enterprise Linux 4 Extended Life Cycle Support, Red Hat Enterprise
Linux 5.6 Long Life, Red Hat Enterprise Linux 5.9 Extended Update Support,
Red Hat Enterprise Linux 6.2 Advanced Update Support, and Red Hat
Enterprise Linux 6.4 Extended Update Support.
Red Hat Product Security has rated this update as having Important security
impact. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available from the CVE link in the
References section.
Details: The GNU Bourne Again shell (Bash) is a shell and command language
interpreter compatible with the Bourne shell (sh). Bash is the default
shell for Red Hat Enterprise Linux.
It was found that the fix for CVE-2014-6271 was incomplete, and Bash still
allowed certain characters to be injected into other environments via
specially crafted environment variables. An attacker could potentially use
this flaw to override or bypass environment restrictions to execute shell
commands. Certain services and applications allow remote unauthenticated
attackers to provide environment variables, allowing them to exploit this
issue. (CVE-2014-7169)
Applications which directly create bash functions as environment variables
need to be made aware of changes to the way names are handled by this
update. Note that certain services, screen sessions, and tmux sessions may
need to be restarted, and affected interactive users may need to re-login.
Installing these updated packages without restarting services will address
the vulnerability, but functionality may be impacted until affected
services are restarted. For more information see the Knowledgebase article
at https://access.redhat.com/articles/1200223
Note: Docker users are advised to use "yum update" within their containers,
and to commit the resulting changes.
For additional information on CVE-2014-6271 and CVE-2014-7169, refer to the
aforementioned Knowledgebase article.
All bash users are advised to upgrade to these updated packages, which
contain a backported patch to correct this issue.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
It was found that the fix for CVE-2014-6271 was incomplete, and Bash still allowed certain characters to be injected into other environments via specially crafted environment variables. An attacker could potentially use this flaw to override or bypass environment restrictions to execute shell commands. Certain services and applications allow remote unauthenticated attackers to provide environment variables, allowing them to exploit this issue.
5.1 ()
Affected products
Fixed
60 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 4AS-ELS:bash-0:3.0-27.el4.4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-ELS:bash-0:3.0-27.el4.4.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-ELS:bash-0:3.0-27.el4.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-ELS:bash-0:3.0-27.el4.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-ELS:bash-0:3.0-27.el4.4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-ELS:bash-0:3.0-27.el4.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-ELS:bash-0:3.0-27.el4.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.6.LL:bash-0:3.2-24.el5_6.2.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.6.LL:bash-0:3.2-24.el5_6.2.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.6.LL:bash-0:3.2-24.el5_6.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.6.LL:bash-0:3.2-24.el5_6.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.2.AUS:bash-doc-0:4.1.2-9.el6_2.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
Threats
Exploit Status
CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Impact
Important
It was identified that the fixed-sized redir_stack could be forced to overflow in the Bash parser, resulting in memory corruption, and possibly leading to arbitrary code execution when evaluating untrusted input that would not otherwise be run as code.
4.6 ()
Affected products
Fixed
60 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 4AS-ELS:bash-0:3.0-27.el4.4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-ELS:bash-0:3.0-27.el4.4.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-ELS:bash-0:3.0-27.el4.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-ELS:bash-0:3.0-27.el4.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-ELS:bash-0:3.0-27.el4.4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-ELS:bash-0:3.0-27.el4.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-ELS:bash-0:3.0-27.el4.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.6.LL:bash-0:3.2-24.el5_6.2.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.6.LL:bash-0:3.2-24.el5_6.2.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.6.LL:bash-0:3.2-24.el5_6.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.6.LL:bash-0:3.2-24.el5_6.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.2.AUS:bash-doc-0:4.1.2-9.el6_2.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
An off-by-one error was discovered in the way Bash was handling deeply nested flow control constructs. Depending on the layout of the .bss segment, this could allow arbitrary execution of code that would not otherwise be executed by Bash.
4.6 ()
Affected products
Fixed
60 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 4AS-ELS:bash-0:3.0-27.el4.4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-ELS:bash-0:3.0-27.el4.4.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-ELS:bash-0:3.0-27.el4.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-ELS:bash-0:3.0-27.el4.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-ELS:bash-0:3.0-27.el4.4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-ELS:bash-0:3.0-27.el4.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-ELS:bash-0:3.0-27.el4.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.6.LL:bash-0:3.2-24.el5_6.2.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.6.LL:bash-0:3.2-24.el5_6.2.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.6.LL:bash-0:3.2-24.el5_6.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.6.LL:bash-0:3.2-24.el5_6.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.2.AUS:bash-doc-0:4.1.2-9.el6_2.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
19 references
Acknowledgments
Red Hat Product Security
Florian Weimer
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "[Updated September 30, 2014]\nThis advisory has been updated with information on restarting system\nservices after applying this update. No changes have been made to the\noriginal packages.\n\nUpdated bash packages that fix one security issue are now available for Red\nHat Enterprise Linux 4 Extended Life Cycle Support, Red Hat Enterprise\nLinux 5.6 Long Life, Red Hat Enterprise Linux 5.9 Extended Update Support,\nRed Hat Enterprise Linux 6.2 Advanced Update Support, and Red Hat\nEnterprise Linux 6.4 Extended Update Support.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available from the CVE link in the\nReferences section.",
"title": "Topic"
},
{
"category": "general",
"text": "The GNU Bourne Again shell (Bash) is a shell and command language\ninterpreter compatible with the Bourne shell (sh). Bash is the default\nshell for Red Hat Enterprise Linux.\n\nIt was found that the fix for CVE-2014-6271 was incomplete, and Bash still\nallowed certain characters to be injected into other environments via\nspecially crafted environment variables. An attacker could potentially use\nthis flaw to override or bypass environment restrictions to execute shell\ncommands. Certain services and applications allow remote unauthenticated\nattackers to provide environment variables, allowing them to exploit this\nissue. (CVE-2014-7169)\n\nApplications which directly create bash functions as environment variables\nneed to be made aware of changes to the way names are handled by this\nupdate. Note that certain services, screen sessions, and tmux sessions may\nneed to be restarted, and affected interactive users may need to re-login.\nInstalling these updated packages without restarting services will address\nthe vulnerability, but functionality may be impacted until affected\nservices are restarted. For more information see the Knowledgebase article\nat https://access.redhat.com/articles/1200223\n\nNote: Docker users are advised to use \"yum update\" within their containers,\nand to commit the resulting changes.\n\nFor additional information on CVE-2014-6271 and CVE-2014-7169, refer to the\naforementioned Knowledgebase article.\n\nAll bash users are advised to upgrade to these updated packages, which\ncontain a backported patch to correct this issue.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2014:1311",
"url": "https://access.redhat.com/errata/RHSA-2014:1311"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/articles/1200223",
"url": "https://access.redhat.com/articles/1200223"
},
{
"category": "external",
"summary": "1146319",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146319"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1311.json"
}
],
"title": "Red Hat Security Advisory: bash security update",
"tracking": {
"current_release_date": "2026-06-28T12:23:33+00:00",
"generator": {
"date": "2026-06-28T12:23:33+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.2.6"
}
},
"id": "RHSA-2014:1311",
"initial_release_date": "2014-09-26T17:58:08+00:00",
"revision_history": [
{
"date": "2014-09-26T17:58:08+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2014-09-30T15:08:45+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-28T12:23:33+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HPC Node EUS (v. 6.4)",
"product": {
"name": "Red Hat Enterprise Linux HPC Node EUS (v. 6.4)",
"product_id": "6ComputeNode-6.4.EUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_eus:6.4::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.4)",
"product": {
"name": "Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.4)",
"product_id": "6ComputeNode-optional-6.4.EUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_eus:6.4::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server EUS (v. 6.4)",
"product": {
"name": "Red Hat Enterprise Linux Server EUS (v. 6.4)",
"product_id": "6Server-6.4.EUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_eus:6.4::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional EUS (v. 6.4)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional EUS (v. 6.4)",
"product_id": "6Server-optional-6.4.EUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_eus:6.4::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server AUS (v. 6.2)",
"product": {
"name": "Red Hat Enterprise Linux Server AUS (v. 6.2)",
"product_id": "6Server-6.2.AUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_mission_critical:6.2::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional AUS (v. 6.2)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional AUS (v. 6.2)",
"product_id": "6Server-optional-6.2.AUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_mission_critical:6.2::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Long Life (v. 5.6 server)",
"product": {
"name": "Red Hat Enterprise Linux Long Life (v. 5.6 server)",
"product_id": "5Server-5.6.LL",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_mission_critical:5.6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux EUS (v. 5.9 server)",
"product": {
"name": "Red Hat Enterprise Linux EUS (v. 5.9 server)",
"product_id": "5Server-5.9.EUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_eus:5.9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS (v. 4 ELS)",
"product": {
"name": "Red Hat Enterprise Linux AS (v. 4 ELS)",
"product_id": "4AS-ELS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_els:4::as"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES (v. 4 ELS)",
"product": {
"name": "Red Hat Enterprise Linux ES (v. 4 ELS)",
"product_id": "4ES-ELS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_els:4::es"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "bash-0:4.1.2-15.el6_4.2.src",
"product": {
"name": "bash-0:4.1.2-15.el6_4.2.src",
"product_id": "bash-0:4.1.2-15.el6_4.2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@4.1.2-15.el6_4.2?arch=src"
}
}
},
{
"category": "product_version",
"name": "bash-0:4.1.2-9.el6_2.2.src",
"product": {
"name": "bash-0:4.1.2-9.el6_2.2.src",
"product_id": "bash-0:4.1.2-9.el6_2.2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@4.1.2-9.el6_2.2?arch=src"
}
}
},
{
"category": "product_version",
"name": "bash-0:3.2-24.el5_6.2.src",
"product": {
"name": "bash-0:3.2-24.el5_6.2.src",
"product_id": "bash-0:3.2-24.el5_6.2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.2-24.el5_6.2?arch=src"
}
}
},
{
"category": "product_version",
"name": "bash-0:3.2-32.el5_9.3.src",
"product": {
"name": "bash-0:3.2-32.el5_9.3.src",
"product_id": "bash-0:3.2-32.el5_9.3.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.2-32.el5_9.3?arch=src"
}
}
},
{
"category": "product_version",
"name": "bash-0:3.0-27.el4.4.src",
"product": {
"name": "bash-0:3.0-27.el4.4.src",
"product_id": "bash-0:3.0-27.el4.4.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.0-27.el4.4?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"product": {
"name": "bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"product_id": "bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@4.1.2-15.el6_4.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "bash-doc-0:4.1.2-15.el6_4.2.s390x",
"product": {
"name": "bash-doc-0:4.1.2-15.el6_4.2.s390x",
"product_id": "bash-doc-0:4.1.2-15.el6_4.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-doc@4.1.2-15.el6_4.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "bash-0:4.1.2-15.el6_4.2.s390x",
"product": {
"name": "bash-0:4.1.2-15.el6_4.2.s390x",
"product_id": "bash-0:4.1.2-15.el6_4.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@4.1.2-15.el6_4.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "bash-debuginfo-0:3.2-32.el5_9.3.s390x",
"product": {
"name": "bash-debuginfo-0:3.2-32.el5_9.3.s390x",
"product_id": "bash-debuginfo-0:3.2-32.el5_9.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@3.2-32.el5_9.3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "bash-0:3.2-32.el5_9.3.s390x",
"product": {
"name": "bash-0:3.2-32.el5_9.3.s390x",
"product_id": "bash-0:3.2-32.el5_9.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.2-32.el5_9.3?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"product": {
"name": "bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"product_id": "bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@4.1.2-15.el6_4.2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "bash-doc-0:4.1.2-15.el6_4.2.i686",
"product": {
"name": "bash-doc-0:4.1.2-15.el6_4.2.i686",
"product_id": "bash-doc-0:4.1.2-15.el6_4.2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-doc@4.1.2-15.el6_4.2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "bash-0:4.1.2-15.el6_4.2.i686",
"product": {
"name": "bash-0:4.1.2-15.el6_4.2.i686",
"product_id": "bash-0:4.1.2-15.el6_4.2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@4.1.2-15.el6_4.2?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"product": {
"name": "bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"product_id": "bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@4.1.2-15.el6_4.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"product": {
"name": "bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"product_id": "bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-doc@4.1.2-15.el6_4.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bash-0:4.1.2-15.el6_4.2.x86_64",
"product": {
"name": "bash-0:4.1.2-15.el6_4.2.x86_64",
"product_id": "bash-0:4.1.2-15.el6_4.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@4.1.2-15.el6_4.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"product": {
"name": "bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"product_id": "bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@4.1.2-9.el6_2.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bash-doc-0:4.1.2-9.el6_2.2.x86_64",
"product": {
"name": "bash-doc-0:4.1.2-9.el6_2.2.x86_64",
"product_id": "bash-doc-0:4.1.2-9.el6_2.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-doc@4.1.2-9.el6_2.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bash-0:4.1.2-9.el6_2.2.x86_64",
"product": {
"name": "bash-0:4.1.2-9.el6_2.2.x86_64",
"product_id": "bash-0:4.1.2-9.el6_2.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@4.1.2-9.el6_2.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bash-0:3.2-24.el5_6.2.x86_64",
"product": {
"name": "bash-0:3.2-24.el5_6.2.x86_64",
"product_id": "bash-0:3.2-24.el5_6.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.2-24.el5_6.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bash-debuginfo-0:3.2-24.el5_6.2.x86_64",
"product": {
"name": "bash-debuginfo-0:3.2-24.el5_6.2.x86_64",
"product_id": "bash-debuginfo-0:3.2-24.el5_6.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@3.2-24.el5_6.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bash-debuginfo-0:3.2-32.el5_9.3.x86_64",
"product": {
"name": "bash-debuginfo-0:3.2-32.el5_9.3.x86_64",
"product_id": "bash-debuginfo-0:3.2-32.el5_9.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@3.2-32.el5_9.3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bash-0:3.2-32.el5_9.3.x86_64",
"product": {
"name": "bash-0:3.2-32.el5_9.3.x86_64",
"product_id": "bash-0:3.2-32.el5_9.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.2-32.el5_9.3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bash-debuginfo-0:3.0-27.el4.4.x86_64",
"product": {
"name": "bash-debuginfo-0:3.0-27.el4.4.x86_64",
"product_id": "bash-debuginfo-0:3.0-27.el4.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@3.0-27.el4.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bash-0:3.0-27.el4.4.x86_64",
"product": {
"name": "bash-0:3.0-27.el4.4.x86_64",
"product_id": "bash-0:3.0-27.el4.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.0-27.el4.4?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"product": {
"name": "bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"product_id": "bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@4.1.2-15.el6_4.2?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"product": {
"name": "bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"product_id": "bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-doc@4.1.2-15.el6_4.2?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "bash-0:4.1.2-15.el6_4.2.ppc64",
"product": {
"name": "bash-0:4.1.2-15.el6_4.2.ppc64",
"product_id": "bash-0:4.1.2-15.el6_4.2.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@4.1.2-15.el6_4.2?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "bash-0:3.2-24.el5_6.2.ia64",
"product": {
"name": "bash-0:3.2-24.el5_6.2.ia64",
"product_id": "bash-0:3.2-24.el5_6.2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.2-24.el5_6.2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "bash-debuginfo-0:3.2-24.el5_6.2.ia64",
"product": {
"name": "bash-debuginfo-0:3.2-24.el5_6.2.ia64",
"product_id": "bash-debuginfo-0:3.2-24.el5_6.2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@3.2-24.el5_6.2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "bash-debuginfo-0:3.2-32.el5_9.3.ia64",
"product": {
"name": "bash-debuginfo-0:3.2-32.el5_9.3.ia64",
"product_id": "bash-debuginfo-0:3.2-32.el5_9.3.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@3.2-32.el5_9.3?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "bash-0:3.2-32.el5_9.3.ia64",
"product": {
"name": "bash-0:3.2-32.el5_9.3.ia64",
"product_id": "bash-0:3.2-32.el5_9.3.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.2-32.el5_9.3?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "bash-debuginfo-0:3.0-27.el4.4.ia64",
"product": {
"name": "bash-debuginfo-0:3.0-27.el4.4.ia64",
"product_id": "bash-debuginfo-0:3.0-27.el4.4.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@3.0-27.el4.4?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "bash-0:3.0-27.el4.4.ia64",
"product": {
"name": "bash-0:3.0-27.el4.4.ia64",
"product_id": "bash-0:3.0-27.el4.4.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.0-27.el4.4?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "bash-0:3.2-24.el5_6.2.i386",
"product": {
"name": "bash-0:3.2-24.el5_6.2.i386",
"product_id": "bash-0:3.2-24.el5_6.2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.2-24.el5_6.2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "bash-debuginfo-0:3.2-24.el5_6.2.i386",
"product": {
"name": "bash-debuginfo-0:3.2-24.el5_6.2.i386",
"product_id": "bash-debuginfo-0:3.2-24.el5_6.2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@3.2-24.el5_6.2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "bash-debuginfo-0:3.2-32.el5_9.3.i386",
"product": {
"name": "bash-debuginfo-0:3.2-32.el5_9.3.i386",
"product_id": "bash-debuginfo-0:3.2-32.el5_9.3.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@3.2-32.el5_9.3?arch=i386"
}
}
},
{
"category": "product_version",
"name": "bash-0:3.2-32.el5_9.3.i386",
"product": {
"name": "bash-0:3.2-32.el5_9.3.i386",
"product_id": "bash-0:3.2-32.el5_9.3.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.2-32.el5_9.3?arch=i386"
}
}
},
{
"category": "product_version",
"name": "bash-debuginfo-0:3.0-27.el4.4.i386",
"product": {
"name": "bash-debuginfo-0:3.0-27.el4.4.i386",
"product_id": "bash-debuginfo-0:3.0-27.el4.4.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@3.0-27.el4.4?arch=i386"
}
}
},
{
"category": "product_version",
"name": "bash-0:3.0-27.el4.4.i386",
"product": {
"name": "bash-0:3.0-27.el4.4.i386",
"product_id": "bash-0:3.0-27.el4.4.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.0-27.el4.4?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "bash-debuginfo-0:3.2-32.el5_9.3.ppc",
"product": {
"name": "bash-debuginfo-0:3.2-32.el5_9.3.ppc",
"product_id": "bash-debuginfo-0:3.2-32.el5_9.3.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@3.2-32.el5_9.3?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "bash-0:3.2-32.el5_9.3.ppc",
"product": {
"name": "bash-0:3.2-32.el5_9.3.ppc",
"product_id": "bash-0:3.2-32.el5_9.3.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.2-32.el5_9.3?arch=ppc"
}
}
}
],
"category": "architecture",
"name": "ppc"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.0-27.el4.4.i386 as a component of Red Hat Enterprise Linux AS (v. 4 ELS)",
"product_id": "4AS-ELS:bash-0:3.0-27.el4.4.i386"
},
"product_reference": "bash-0:3.0-27.el4.4.i386",
"relates_to_product_reference": "4AS-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.0-27.el4.4.ia64 as a component of Red Hat Enterprise Linux AS (v. 4 ELS)",
"product_id": "4AS-ELS:bash-0:3.0-27.el4.4.ia64"
},
"product_reference": "bash-0:3.0-27.el4.4.ia64",
"relates_to_product_reference": "4AS-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.0-27.el4.4.src as a component of Red Hat Enterprise Linux AS (v. 4 ELS)",
"product_id": "4AS-ELS:bash-0:3.0-27.el4.4.src"
},
"product_reference": "bash-0:3.0-27.el4.4.src",
"relates_to_product_reference": "4AS-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.0-27.el4.4.x86_64 as a component of Red Hat Enterprise Linux AS (v. 4 ELS)",
"product_id": "4AS-ELS:bash-0:3.0-27.el4.4.x86_64"
},
"product_reference": "bash-0:3.0-27.el4.4.x86_64",
"relates_to_product_reference": "4AS-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.0-27.el4.4.i386 as a component of Red Hat Enterprise Linux AS (v. 4 ELS)",
"product_id": "4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.i386"
},
"product_reference": "bash-debuginfo-0:3.0-27.el4.4.i386",
"relates_to_product_reference": "4AS-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.0-27.el4.4.ia64 as a component of Red Hat Enterprise Linux AS (v. 4 ELS)",
"product_id": "4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.ia64"
},
"product_reference": "bash-debuginfo-0:3.0-27.el4.4.ia64",
"relates_to_product_reference": "4AS-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.0-27.el4.4.x86_64 as a component of Red Hat Enterprise Linux AS (v. 4 ELS)",
"product_id": "4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64"
},
"product_reference": "bash-debuginfo-0:3.0-27.el4.4.x86_64",
"relates_to_product_reference": "4AS-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.0-27.el4.4.i386 as a component of Red Hat Enterprise Linux ES (v. 4 ELS)",
"product_id": "4ES-ELS:bash-0:3.0-27.el4.4.i386"
},
"product_reference": "bash-0:3.0-27.el4.4.i386",
"relates_to_product_reference": "4ES-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.0-27.el4.4.src as a component of Red Hat Enterprise Linux ES (v. 4 ELS)",
"product_id": "4ES-ELS:bash-0:3.0-27.el4.4.src"
},
"product_reference": "bash-0:3.0-27.el4.4.src",
"relates_to_product_reference": "4ES-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.0-27.el4.4.x86_64 as a component of Red Hat Enterprise Linux ES (v. 4 ELS)",
"product_id": "4ES-ELS:bash-0:3.0-27.el4.4.x86_64"
},
"product_reference": "bash-0:3.0-27.el4.4.x86_64",
"relates_to_product_reference": "4ES-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.0-27.el4.4.i386 as a component of Red Hat Enterprise Linux ES (v. 4 ELS)",
"product_id": "4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.i386"
},
"product_reference": "bash-debuginfo-0:3.0-27.el4.4.i386",
"relates_to_product_reference": "4ES-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.0-27.el4.4.x86_64 as a component of Red Hat Enterprise Linux ES (v. 4 ELS)",
"product_id": "4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64"
},
"product_reference": "bash-debuginfo-0:3.0-27.el4.4.x86_64",
"relates_to_product_reference": "4ES-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-24.el5_6.2.i386 as a component of Red Hat Enterprise Linux Long Life (v. 5.6 server)",
"product_id": "5Server-5.6.LL:bash-0:3.2-24.el5_6.2.i386"
},
"product_reference": "bash-0:3.2-24.el5_6.2.i386",
"relates_to_product_reference": "5Server-5.6.LL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-24.el5_6.2.ia64 as a component of Red Hat Enterprise Linux Long Life (v. 5.6 server)",
"product_id": "5Server-5.6.LL:bash-0:3.2-24.el5_6.2.ia64"
},
"product_reference": "bash-0:3.2-24.el5_6.2.ia64",
"relates_to_product_reference": "5Server-5.6.LL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-24.el5_6.2.src as a component of Red Hat Enterprise Linux Long Life (v. 5.6 server)",
"product_id": "5Server-5.6.LL:bash-0:3.2-24.el5_6.2.src"
},
"product_reference": "bash-0:3.2-24.el5_6.2.src",
"relates_to_product_reference": "5Server-5.6.LL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-24.el5_6.2.x86_64 as a component of Red Hat Enterprise Linux Long Life (v. 5.6 server)",
"product_id": "5Server-5.6.LL:bash-0:3.2-24.el5_6.2.x86_64"
},
"product_reference": "bash-0:3.2-24.el5_6.2.x86_64",
"relates_to_product_reference": "5Server-5.6.LL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.2-24.el5_6.2.i386 as a component of Red Hat Enterprise Linux Long Life (v. 5.6 server)",
"product_id": "5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.i386"
},
"product_reference": "bash-debuginfo-0:3.2-24.el5_6.2.i386",
"relates_to_product_reference": "5Server-5.6.LL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.2-24.el5_6.2.ia64 as a component of Red Hat Enterprise Linux Long Life (v. 5.6 server)",
"product_id": "5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.ia64"
},
"product_reference": "bash-debuginfo-0:3.2-24.el5_6.2.ia64",
"relates_to_product_reference": "5Server-5.6.LL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.2-24.el5_6.2.x86_64 as a component of Red Hat Enterprise Linux Long Life (v. 5.6 server)",
"product_id": "5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.x86_64"
},
"product_reference": "bash-debuginfo-0:3.2-24.el5_6.2.x86_64",
"relates_to_product_reference": "5Server-5.6.LL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-32.el5_9.3.i386 as a component of Red Hat Enterprise Linux EUS (v. 5.9 server)",
"product_id": "5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.i386"
},
"product_reference": "bash-0:3.2-32.el5_9.3.i386",
"relates_to_product_reference": "5Server-5.9.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-32.el5_9.3.ia64 as a component of Red Hat Enterprise Linux EUS (v. 5.9 server)",
"product_id": "5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ia64"
},
"product_reference": "bash-0:3.2-32.el5_9.3.ia64",
"relates_to_product_reference": "5Server-5.9.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-32.el5_9.3.ppc as a component of Red Hat Enterprise Linux EUS (v. 5.9 server)",
"product_id": "5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ppc"
},
"product_reference": "bash-0:3.2-32.el5_9.3.ppc",
"relates_to_product_reference": "5Server-5.9.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-32.el5_9.3.s390x as a component of Red Hat Enterprise Linux EUS (v. 5.9 server)",
"product_id": "5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.s390x"
},
"product_reference": "bash-0:3.2-32.el5_9.3.s390x",
"relates_to_product_reference": "5Server-5.9.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-32.el5_9.3.src as a component of Red Hat Enterprise Linux EUS (v. 5.9 server)",
"product_id": "5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.src"
},
"product_reference": "bash-0:3.2-32.el5_9.3.src",
"relates_to_product_reference": "5Server-5.9.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-32.el5_9.3.x86_64 as a component of Red Hat Enterprise Linux EUS (v. 5.9 server)",
"product_id": "5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.x86_64"
},
"product_reference": "bash-0:3.2-32.el5_9.3.x86_64",
"relates_to_product_reference": "5Server-5.9.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.2-32.el5_9.3.i386 as a component of Red Hat Enterprise Linux EUS (v. 5.9 server)",
"product_id": "5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.i386"
},
"product_reference": "bash-debuginfo-0:3.2-32.el5_9.3.i386",
"relates_to_product_reference": "5Server-5.9.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.2-32.el5_9.3.ia64 as a component of Red Hat Enterprise Linux EUS (v. 5.9 server)",
"product_id": "5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ia64"
},
"product_reference": "bash-debuginfo-0:3.2-32.el5_9.3.ia64",
"relates_to_product_reference": "5Server-5.9.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.2-32.el5_9.3.ppc as a component of Red Hat Enterprise Linux EUS (v. 5.9 server)",
"product_id": "5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ppc"
},
"product_reference": "bash-debuginfo-0:3.2-32.el5_9.3.ppc",
"relates_to_product_reference": "5Server-5.9.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.2-32.el5_9.3.s390x as a component of Red Hat Enterprise Linux EUS (v. 5.9 server)",
"product_id": "5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.s390x"
},
"product_reference": "bash-debuginfo-0:3.2-32.el5_9.3.s390x",
"relates_to_product_reference": "5Server-5.9.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.2-32.el5_9.3.x86_64 as a component of Red Hat Enterprise Linux EUS (v. 5.9 server)",
"product_id": "5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.x86_64"
},
"product_reference": "bash-debuginfo-0:3.2-32.el5_9.3.x86_64",
"relates_to_product_reference": "5Server-5.9.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_4.2.src as a component of Red Hat Enterprise Linux HPC Node EUS (v. 6.4)",
"product_id": "6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src"
},
"product_reference": "bash-0:4.1.2-15.el6_4.2.src",
"relates_to_product_reference": "6ComputeNode-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_4.2.x86_64 as a component of Red Hat Enterprise Linux HPC Node EUS (v. 6.4)",
"product_id": "6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64"
},
"product_reference": "bash-0:4.1.2-15.el6_4.2.x86_64",
"relates_to_product_reference": "6ComputeNode-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64 as a component of Red Hat Enterprise Linux HPC Node EUS (v. 6.4)",
"product_id": "6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"relates_to_product_reference": "6ComputeNode-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_4.2.src as a component of Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.4)",
"product_id": "6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src"
},
"product_reference": "bash-0:4.1.2-15.el6_4.2.src",
"relates_to_product_reference": "6ComputeNode-optional-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64 as a component of Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.4)",
"product_id": "6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_4.2.x86_64 as a component of Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.4)",
"product_id": "6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-9.el6_2.2.src as a component of Red Hat Enterprise Linux Server AUS (v. 6.2)",
"product_id": "6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src"
},
"product_reference": "bash-0:4.1.2-9.el6_2.2.src",
"relates_to_product_reference": "6Server-6.2.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-9.el6_2.2.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.2)",
"product_id": "6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.x86_64"
},
"product_reference": "bash-0:4.1.2-9.el6_2.2.x86_64",
"relates_to_product_reference": "6Server-6.2.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.2)",
"product_id": "6Server-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64"
},
"product_reference": "bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"relates_to_product_reference": "6Server-6.2.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_4.2.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 6.4)",
"product_id": "6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686"
},
"product_reference": "bash-0:4.1.2-15.el6_4.2.i686",
"relates_to_product_reference": "6Server-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_4.2.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.4)",
"product_id": "6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64"
},
"product_reference": "bash-0:4.1.2-15.el6_4.2.ppc64",
"relates_to_product_reference": "6Server-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_4.2.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 6.4)",
"product_id": "6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x"
},
"product_reference": "bash-0:4.1.2-15.el6_4.2.s390x",
"relates_to_product_reference": "6Server-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_4.2.src as a component of Red Hat Enterprise Linux Server EUS (v. 6.4)",
"product_id": "6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src"
},
"product_reference": "bash-0:4.1.2-15.el6_4.2.src",
"relates_to_product_reference": "6Server-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_4.2.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.4)",
"product_id": "6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64"
},
"product_reference": "bash-0:4.1.2-15.el6_4.2.x86_64",
"relates_to_product_reference": "6Server-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_4.2.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 6.4)",
"product_id": "6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"relates_to_product_reference": "6Server-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.4)",
"product_id": "6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"relates_to_product_reference": "6Server-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_4.2.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 6.4)",
"product_id": "6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"relates_to_product_reference": "6Server-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.4)",
"product_id": "6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"relates_to_product_reference": "6Server-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-9.el6_2.2.src as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.2)",
"product_id": "6Server-optional-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src"
},
"product_reference": "bash-0:4.1.2-9.el6_2.2.src",
"relates_to_product_reference": "6Server-optional-6.2.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.2)",
"product_id": "6Server-optional-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64"
},
"product_reference": "bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"relates_to_product_reference": "6Server-optional-6.2.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-9.el6_2.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.2)",
"product_id": "6Server-optional-6.2.AUS:bash-doc-0:4.1.2-9.el6_2.2.x86_64"
},
"product_reference": "bash-doc-0:4.1.2-9.el6_2.2.x86_64",
"relates_to_product_reference": "6Server-optional-6.2.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_4.2.src as a component of Red Hat Enterprise Linux Server Optional EUS (v. 6.4)",
"product_id": "6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src"
},
"product_reference": "bash-0:4.1.2-15.el6_4.2.src",
"relates_to_product_reference": "6Server-optional-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_4.2.i686 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 6.4)",
"product_id": "6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"relates_to_product_reference": "6Server-optional-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 6.4)",
"product_id": "6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"relates_to_product_reference": "6Server-optional-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_4.2.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 6.4)",
"product_id": "6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"relates_to_product_reference": "6Server-optional-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 6.4)",
"product_id": "6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"relates_to_product_reference": "6Server-optional-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_4.2.i686 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 6.4)",
"product_id": "6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_4.2.i686",
"relates_to_product_reference": "6Server-optional-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_4.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 6.4)",
"product_id": "6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"relates_to_product_reference": "6Server-optional-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_4.2.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 6.4)",
"product_id": "6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_4.2.s390x",
"relates_to_product_reference": "6Server-optional-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_4.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 6.4)",
"product_id": "6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"relates_to_product_reference": "6Server-optional-6.4.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2014-7169",
"cwe": {
"id": "CWE-228",
"name": "Improper Handling of Syntactically Invalid Structure"
},
"discovery_date": "2014-09-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1146319"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2014-6271 was incomplete, and Bash still allowed certain characters to be injected into other environments via specially crafted environment variables. An attacker could potentially use this flaw to override or bypass environment restrictions to execute shell commands. Certain services and applications allow remote unauthenticated attackers to provide environment variables, allowing them to exploit this issue.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bash: code execution via specially-crafted environment (Incomplete fix for CVE-2014-6271)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-ELS:bash-0:3.0-27.el4.4.i386",
"4AS-ELS:bash-0:3.0-27.el4.4.ia64",
"4AS-ELS:bash-0:3.0-27.el4.4.src",
"4AS-ELS:bash-0:3.0-27.el4.4.x86_64",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.i386",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.ia64",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64",
"4ES-ELS:bash-0:3.0-27.el4.4.i386",
"4ES-ELS:bash-0:3.0-27.el4.4.src",
"4ES-ELS:bash-0:3.0-27.el4.4.x86_64",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.i386",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.i386",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.ia64",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.src",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.x86_64",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.i386",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.ia64",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.x86_64",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.i386",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ia64",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ppc",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.s390x",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.src",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.x86_64",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.i386",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ia64",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ppc",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.s390x",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.x86_64",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src",
"6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src",
"6Server-optional-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.2.AUS:bash-doc-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-7169"
},
{
"category": "external",
"summary": "RHBZ#1146319",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146319"
},
{
"category": "external",
"summary": "RHSB-shellshock",
"url": "https://access.redhat.com/security/vulnerabilities/shellshock"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-7169",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-7169"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7169",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7169"
},
{
"category": "external",
"summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
}
],
"release_date": "2014-09-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-09-26T17:58:08+00:00",
"details": "Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the \nRed Hat Network to apply this update are available at \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"4AS-ELS:bash-0:3.0-27.el4.4.i386",
"4AS-ELS:bash-0:3.0-27.el4.4.ia64",
"4AS-ELS:bash-0:3.0-27.el4.4.src",
"4AS-ELS:bash-0:3.0-27.el4.4.x86_64",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.i386",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.ia64",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64",
"4ES-ELS:bash-0:3.0-27.el4.4.i386",
"4ES-ELS:bash-0:3.0-27.el4.4.src",
"4ES-ELS:bash-0:3.0-27.el4.4.x86_64",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.i386",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.i386",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.ia64",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.src",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.x86_64",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.i386",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.ia64",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.x86_64",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.i386",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ia64",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ppc",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.s390x",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.src",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.x86_64",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.i386",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ia64",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ppc",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.s390x",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.x86_64",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src",
"6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src",
"6Server-optional-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.2.AUS:bash-doc-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1311"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-ELS:bash-0:3.0-27.el4.4.i386",
"4AS-ELS:bash-0:3.0-27.el4.4.ia64",
"4AS-ELS:bash-0:3.0-27.el4.4.src",
"4AS-ELS:bash-0:3.0-27.el4.4.x86_64",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.i386",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.ia64",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64",
"4ES-ELS:bash-0:3.0-27.el4.4.i386",
"4ES-ELS:bash-0:3.0-27.el4.4.src",
"4ES-ELS:bash-0:3.0-27.el4.4.x86_64",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.i386",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.i386",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.ia64",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.src",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.x86_64",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.i386",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.ia64",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.x86_64",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.i386",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ia64",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ppc",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.s390x",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.src",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.x86_64",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.i386",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ia64",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ppc",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.s390x",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.x86_64",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src",
"6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src",
"6Server-optional-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.2.AUS:bash-doc-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64"
]
}
],
"threats": [
{
"category": "exploit_status",
"date": "2022-01-28T00:00:00+00:00",
"details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
},
{
"category": "impact",
"details": "Important"
}
],
"title": "bash: code execution via specially-crafted environment (Incomplete fix for CVE-2014-6271)"
},
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-7186",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2014-09-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1146791"
}
],
"notes": [
{
"category": "description",
"text": "It was identified that the fixed-sized redir_stack could be forced to overflow in the Bash parser, resulting in memory corruption, and possibly leading to arbitrary code execution when evaluating untrusted input that would not otherwise be run as code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bash: parser can allow out-of-bounds memory access while handling redir_stack",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A patch for this issue was applied to the bash packages in Red Hat Enterprise Linux via RHSA-2014:1306, RHSA-2014:1311, and RHSA-2014:1312. The errata do not mention the CVE in the description, as the CVE was only assigned after those updates were released.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-ELS:bash-0:3.0-27.el4.4.i386",
"4AS-ELS:bash-0:3.0-27.el4.4.ia64",
"4AS-ELS:bash-0:3.0-27.el4.4.src",
"4AS-ELS:bash-0:3.0-27.el4.4.x86_64",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.i386",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.ia64",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64",
"4ES-ELS:bash-0:3.0-27.el4.4.i386",
"4ES-ELS:bash-0:3.0-27.el4.4.src",
"4ES-ELS:bash-0:3.0-27.el4.4.x86_64",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.i386",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.i386",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.ia64",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.src",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.x86_64",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.i386",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.ia64",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.x86_64",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.i386",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ia64",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ppc",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.s390x",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.src",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.x86_64",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.i386",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ia64",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ppc",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.s390x",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.x86_64",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src",
"6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src",
"6Server-optional-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.2.AUS:bash-doc-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-7186"
},
{
"category": "external",
"summary": "RHBZ#1146791",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146791"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-7186",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-7186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7186"
}
],
"release_date": "2014-09-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-09-26T17:58:08+00:00",
"details": "Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the \nRed Hat Network to apply this update are available at \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"4AS-ELS:bash-0:3.0-27.el4.4.i386",
"4AS-ELS:bash-0:3.0-27.el4.4.ia64",
"4AS-ELS:bash-0:3.0-27.el4.4.src",
"4AS-ELS:bash-0:3.0-27.el4.4.x86_64",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.i386",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.ia64",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64",
"4ES-ELS:bash-0:3.0-27.el4.4.i386",
"4ES-ELS:bash-0:3.0-27.el4.4.src",
"4ES-ELS:bash-0:3.0-27.el4.4.x86_64",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.i386",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.i386",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.ia64",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.src",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.x86_64",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.i386",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.ia64",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.x86_64",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.i386",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ia64",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ppc",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.s390x",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.src",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.x86_64",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.i386",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ia64",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ppc",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.s390x",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.x86_64",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src",
"6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src",
"6Server-optional-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.2.AUS:bash-doc-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1311"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.6,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-ELS:bash-0:3.0-27.el4.4.i386",
"4AS-ELS:bash-0:3.0-27.el4.4.ia64",
"4AS-ELS:bash-0:3.0-27.el4.4.src",
"4AS-ELS:bash-0:3.0-27.el4.4.x86_64",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.i386",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.ia64",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64",
"4ES-ELS:bash-0:3.0-27.el4.4.i386",
"4ES-ELS:bash-0:3.0-27.el4.4.src",
"4ES-ELS:bash-0:3.0-27.el4.4.x86_64",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.i386",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.i386",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.ia64",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.src",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.x86_64",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.i386",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.ia64",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.x86_64",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.i386",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ia64",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ppc",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.s390x",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.src",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.x86_64",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.i386",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ia64",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ppc",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.s390x",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.x86_64",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src",
"6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src",
"6Server-optional-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.2.AUS:bash-doc-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "bash: parser can allow out-of-bounds memory access while handling redir_stack"
},
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-7187",
"cwe": {
"id": "CWE-193",
"name": "Off-by-one Error"
},
"discovery_date": "2014-09-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1146804"
}
],
"notes": [
{
"category": "description",
"text": "An off-by-one error was discovered in the way Bash was handling deeply nested flow control constructs. Depending on the layout of the .bss segment, this could allow arbitrary execution of code that would not otherwise be executed by Bash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bash: off-by-one error in deeply nested flow control constructs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security does not consider this bug to have any security impact on the bash packages shipped in Red Hat Enterprise Linux. A fix for this issue was applied as a hardening in RHSA-2014:1306, RHSA-2014:1311, and RHSA-2014:1312.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-ELS:bash-0:3.0-27.el4.4.i386",
"4AS-ELS:bash-0:3.0-27.el4.4.ia64",
"4AS-ELS:bash-0:3.0-27.el4.4.src",
"4AS-ELS:bash-0:3.0-27.el4.4.x86_64",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.i386",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.ia64",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64",
"4ES-ELS:bash-0:3.0-27.el4.4.i386",
"4ES-ELS:bash-0:3.0-27.el4.4.src",
"4ES-ELS:bash-0:3.0-27.el4.4.x86_64",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.i386",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.i386",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.ia64",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.src",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.x86_64",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.i386",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.ia64",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.x86_64",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.i386",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ia64",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ppc",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.s390x",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.src",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.x86_64",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.i386",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ia64",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ppc",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.s390x",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.x86_64",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src",
"6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src",
"6Server-optional-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.2.AUS:bash-doc-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-7187"
},
{
"category": "external",
"summary": "RHBZ#1146804",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146804"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-7187",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-7187"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7187",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7187"
}
],
"release_date": "2014-09-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-09-26T17:58:08+00:00",
"details": "Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the \nRed Hat Network to apply this update are available at \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"4AS-ELS:bash-0:3.0-27.el4.4.i386",
"4AS-ELS:bash-0:3.0-27.el4.4.ia64",
"4AS-ELS:bash-0:3.0-27.el4.4.src",
"4AS-ELS:bash-0:3.0-27.el4.4.x86_64",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.i386",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.ia64",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64",
"4ES-ELS:bash-0:3.0-27.el4.4.i386",
"4ES-ELS:bash-0:3.0-27.el4.4.src",
"4ES-ELS:bash-0:3.0-27.el4.4.x86_64",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.i386",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.i386",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.ia64",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.src",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.x86_64",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.i386",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.ia64",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.x86_64",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.i386",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ia64",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ppc",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.s390x",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.src",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.x86_64",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.i386",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ia64",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ppc",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.s390x",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.x86_64",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src",
"6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src",
"6Server-optional-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.2.AUS:bash-doc-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1311"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.6,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-ELS:bash-0:3.0-27.el4.4.i386",
"4AS-ELS:bash-0:3.0-27.el4.4.ia64",
"4AS-ELS:bash-0:3.0-27.el4.4.src",
"4AS-ELS:bash-0:3.0-27.el4.4.x86_64",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.i386",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.ia64",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64",
"4ES-ELS:bash-0:3.0-27.el4.4.i386",
"4ES-ELS:bash-0:3.0-27.el4.4.src",
"4ES-ELS:bash-0:3.0-27.el4.4.x86_64",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.i386",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.i386",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.ia64",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.src",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.x86_64",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.i386",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.ia64",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.x86_64",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.i386",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ia64",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ppc",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.s390x",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.src",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.x86_64",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.i386",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ia64",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ppc",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.s390x",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.x86_64",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src",
"6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src",
"6Server-optional-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.2.AUS:bash-doc-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "bash: off-by-one error in deeply nested flow control constructs"
}
]
}
RHSA-2014:1312
Vulnerability from csaf_redhat - Published: 2014-09-26 21:28 - Updated: 2026-06-28 12:12Summary
Red Hat Security Advisory: bash Shift_JIS security update
Severity
Important
Notes
Topic: [Updated September 30, 2014]
This advisory has been updated with information on restarting system
services after applying this update. No changes have been made to the
original packages.
Updated bash Shift_JIS packages that fix one security issue are now
available for Red Hat Enterprise Linux 5 and 6.
Red Hat Product Security has rated this update as having Important security
impact. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available from the CVE link in the
References section.
Details: The GNU Bourne Again shell (Bash) is a shell and command language
interpreter compatible with the Bourne shell (sh). Bash is the default
shell for Red Hat Enterprise Linux.
Shift_JIS, also known as "SJIS", is a character encoding for the Japanese
language. This package provides bash support for the Shift_JIS encoding.
It was found that the fix for CVE-2014-6271 was incomplete, and Bash still
allowed certain characters to be injected into other environments via
specially crafted environment variables. An attacker could potentially use
this flaw to override or bypass environment restrictions to execute shell
commands. Certain services and applications allow remote unauthenticated
attackers to provide environment variables, allowing them to exploit this
issue. (CVE-2014-7169)
Applications which directly create bash functions as environment variables
need to be made aware of changes to the way names are handled by this
update. Note that certain services, screen sessions, and tmux sessions may
need to be restarted, and affected interactive users may need to re-login.
Installing these updated packages without restarting services will address
the vulnerability, but functionality may be impacted until affected
services are restarted. For more information see the Knowledgebase article
at https://access.redhat.com/articles/1200223
Note: Docker users are advised to use "yum update" within their containers,
and to commit the resulting changes.
For additional information on CVE-2014-6271 and CVE-2014-7169, refer to the
aforementioned Knowledgebase article.
All users who require Shift_JIS encoding support with Bash built-in
functions are advised to upgrade to these updated packages, which contain a
backported patch to correct this issue.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
It was found that the fix for CVE-2014-6271 was incomplete, and Bash still allowed certain characters to be injected into other environments via specially crafted environment variables. An attacker could potentially use this flaw to override or bypass environment restrictions to execute shell commands. Certain services and applications allow remote unauthenticated attackers to provide environment variables, allowing them to exploit this issue.
5.1 ()
Affected products
Fixed
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.x86_64 | — |
Vendor Fix
fix
|
Threats
Exploit Status
CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Impact
Important
It was identified that the fixed-sized redir_stack could be forced to overflow in the Bash parser, resulting in memory corruption, and possibly leading to arbitrary code execution when evaluating untrusted input that would not otherwise be run as code.
4.6 ()
Affected products
Fixed
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
An off-by-one error was discovered in the way Bash was handling deeply nested flow control constructs. Depending on the layout of the .bss segment, this could allow arbitrary execution of code that would not otherwise be executed by Bash.
4.6 ()
Affected products
Fixed
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
19 references
Acknowledgments
Red Hat Product Security
Florian Weimer
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "[Updated September 30, 2014]\nThis advisory has been updated with information on restarting system\nservices after applying this update. No changes have been made to the\noriginal packages.\n\nUpdated bash Shift_JIS packages that fix one security issue are now\navailable for Red Hat Enterprise Linux 5 and 6.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available from the CVE link in the\nReferences section.",
"title": "Topic"
},
{
"category": "general",
"text": "The GNU Bourne Again shell (Bash) is a shell and command language\ninterpreter compatible with the Bourne shell (sh). Bash is the default\nshell for Red Hat Enterprise Linux.\n\nShift_JIS, also known as \"SJIS\", is a character encoding for the Japanese\nlanguage. This package provides bash support for the Shift_JIS encoding.\n\nIt was found that the fix for CVE-2014-6271 was incomplete, and Bash still\nallowed certain characters to be injected into other environments via\nspecially crafted environment variables. An attacker could potentially use\nthis flaw to override or bypass environment restrictions to execute shell\ncommands. Certain services and applications allow remote unauthenticated\nattackers to provide environment variables, allowing them to exploit this\nissue. (CVE-2014-7169)\n\nApplications which directly create bash functions as environment variables\nneed to be made aware of changes to the way names are handled by this\nupdate. Note that certain services, screen sessions, and tmux sessions may\nneed to be restarted, and affected interactive users may need to re-login.\nInstalling these updated packages without restarting services will address\nthe vulnerability, but functionality may be impacted until affected\nservices are restarted. For more information see the Knowledgebase article\nat https://access.redhat.com/articles/1200223\n\nNote: Docker users are advised to use \"yum update\" within their containers,\nand to commit the resulting changes.\n\nFor additional information on CVE-2014-6271 and CVE-2014-7169, refer to the\naforementioned Knowledgebase article.\n\nAll users who require Shift_JIS encoding support with Bash built-in\nfunctions are advised to upgrade to these updated packages, which contain a\nbackported patch to correct this issue.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2014:1312",
"url": "https://access.redhat.com/errata/RHSA-2014:1312"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/articles/1200223",
"url": "https://access.redhat.com/articles/1200223"
},
{
"category": "external",
"summary": "1146319",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146319"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1312.json"
}
],
"title": "Red Hat Security Advisory: bash Shift_JIS security update",
"tracking": {
"current_release_date": "2026-06-28T12:12:34+00:00",
"generator": {
"date": "2026-06-28T12:12:34+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.2.6"
}
},
"id": "RHSA-2014:1312",
"initial_release_date": "2014-09-26T21:28:16+00:00",
"revision_history": [
{
"date": "2014-09-26T21:28:16+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2014-09-30T15:08:43+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-28T12:12:34+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "S-JIS for Red Hat Enteprise Linux 6 Server",
"product": {
"name": "S-JIS for Red Hat Enteprise Linux 6 Server",
"product_id": "6Server-SJIS-6.5.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_sjis:6"
}
}
},
{
"category": "product_name",
"name": "S-JIS for Red Hat Enteprise Linux 5 Server",
"product": {
"name": "S-JIS for Red Hat Enteprise Linux 5 Server",
"product_id": "5Server-SJIS-5.11.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_sjis:5"
}
}
}
],
"category": "product_family",
"name": "RHEL S-JIS Service"
},
{
"branches": [
{
"category": "product_version",
"name": "bash-0:4.1.2-15.el6_5.1.sjis.2.i686",
"product": {
"name": "bash-0:4.1.2-15.el6_5.1.sjis.2.i686",
"product_id": "bash-0:4.1.2-15.el6_5.1.sjis.2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@4.1.2-15.el6_5.1.sjis.2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.i686",
"product": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.i686",
"product_id": "bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@4.1.2-15.el6_5.1.sjis.2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "bash-doc-0:4.1.2-15.el6_5.1.sjis.2.i686",
"product": {
"name": "bash-doc-0:4.1.2-15.el6_5.1.sjis.2.i686",
"product_id": "bash-doc-0:4.1.2-15.el6_5.1.sjis.2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-doc@4.1.2-15.el6_5.1.sjis.2?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "bash-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"product": {
"name": "bash-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"product_id": "bash-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@4.1.2-15.el6_5.1.sjis.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"product": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"product_id": "bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@4.1.2-15.el6_5.1.sjis.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bash-doc-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"product": {
"name": "bash-doc-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"product_id": "bash-doc-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-doc@4.1.2-15.el6_5.1.sjis.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.x86_64",
"product": {
"name": "bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.x86_64",
"product_id": "bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@3.2-33.el5_11.1.sjis.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bash-0:3.2-33.el5_11.1.sjis.2.x86_64",
"product": {
"name": "bash-0:3.2-33.el5_11.1.sjis.2.x86_64",
"product_id": "bash-0:3.2-33.el5_11.1.sjis.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.2-33.el5_11.1.sjis.2?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "bash-0:4.1.2-15.el6_5.1.sjis.2.src",
"product": {
"name": "bash-0:4.1.2-15.el6_5.1.sjis.2.src",
"product_id": "bash-0:4.1.2-15.el6_5.1.sjis.2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@4.1.2-15.el6_5.1.sjis.2?arch=src"
}
}
},
{
"category": "product_version",
"name": "bash-0:3.2-33.el5_11.1.sjis.2.src",
"product": {
"name": "bash-0:3.2-33.el5_11.1.sjis.2.src",
"product_id": "bash-0:3.2-33.el5_11.1.sjis.2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.2-33.el5_11.1.sjis.2?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.ia64",
"product": {
"name": "bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.ia64",
"product_id": "bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@3.2-33.el5_11.1.sjis.2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "bash-0:3.2-33.el5_11.1.sjis.2.ia64",
"product": {
"name": "bash-0:3.2-33.el5_11.1.sjis.2.ia64",
"product_id": "bash-0:3.2-33.el5_11.1.sjis.2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.2-33.el5_11.1.sjis.2?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.i386",
"product": {
"name": "bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.i386",
"product_id": "bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@3.2-33.el5_11.1.sjis.2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "bash-0:3.2-33.el5_11.1.sjis.2.i386",
"product": {
"name": "bash-0:3.2-33.el5_11.1.sjis.2.i386",
"product_id": "bash-0:3.2-33.el5_11.1.sjis.2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.2-33.el5_11.1.sjis.2?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-33.el5_11.1.sjis.2.i386 as a component of S-JIS for Red Hat Enteprise Linux 5 Server",
"product_id": "5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.i386"
},
"product_reference": "bash-0:3.2-33.el5_11.1.sjis.2.i386",
"relates_to_product_reference": "5Server-SJIS-5.11.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-33.el5_11.1.sjis.2.ia64 as a component of S-JIS for Red Hat Enteprise Linux 5 Server",
"product_id": "5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.ia64"
},
"product_reference": "bash-0:3.2-33.el5_11.1.sjis.2.ia64",
"relates_to_product_reference": "5Server-SJIS-5.11.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-33.el5_11.1.sjis.2.src as a component of S-JIS for Red Hat Enteprise Linux 5 Server",
"product_id": "5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.src"
},
"product_reference": "bash-0:3.2-33.el5_11.1.sjis.2.src",
"relates_to_product_reference": "5Server-SJIS-5.11.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-33.el5_11.1.sjis.2.x86_64 as a component of S-JIS for Red Hat Enteprise Linux 5 Server",
"product_id": "5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.x86_64"
},
"product_reference": "bash-0:3.2-33.el5_11.1.sjis.2.x86_64",
"relates_to_product_reference": "5Server-SJIS-5.11.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.i386 as a component of S-JIS for Red Hat Enteprise Linux 5 Server",
"product_id": "5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.i386"
},
"product_reference": "bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.i386",
"relates_to_product_reference": "5Server-SJIS-5.11.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.ia64 as a component of S-JIS for Red Hat Enteprise Linux 5 Server",
"product_id": "5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.ia64"
},
"product_reference": "bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.ia64",
"relates_to_product_reference": "5Server-SJIS-5.11.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.x86_64 as a component of S-JIS for Red Hat Enteprise Linux 5 Server",
"product_id": "5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.x86_64"
},
"product_reference": "bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.x86_64",
"relates_to_product_reference": "5Server-SJIS-5.11.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.1.sjis.2.i686 as a component of S-JIS for Red Hat Enteprise Linux 6 Server",
"product_id": "6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.i686"
},
"product_reference": "bash-0:4.1.2-15.el6_5.1.sjis.2.i686",
"relates_to_product_reference": "6Server-SJIS-6.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.1.sjis.2.src as a component of S-JIS for Red Hat Enteprise Linux 6 Server",
"product_id": "6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.src"
},
"product_reference": "bash-0:4.1.2-15.el6_5.1.sjis.2.src",
"relates_to_product_reference": "6Server-SJIS-6.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.1.sjis.2.x86_64 as a component of S-JIS for Red Hat Enteprise Linux 6 Server",
"product_id": "6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.x86_64"
},
"product_reference": "bash-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"relates_to_product_reference": "6Server-SJIS-6.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.i686 as a component of S-JIS for Red Hat Enteprise Linux 6 Server",
"product_id": "6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.i686"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.i686",
"relates_to_product_reference": "6Server-SJIS-6.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.x86_64 as a component of S-JIS for Red Hat Enteprise Linux 6 Server",
"product_id": "6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.x86_64"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"relates_to_product_reference": "6Server-SJIS-6.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_5.1.sjis.2.i686 as a component of S-JIS for Red Hat Enteprise Linux 6 Server",
"product_id": "6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.i686"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_5.1.sjis.2.i686",
"relates_to_product_reference": "6Server-SJIS-6.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_5.1.sjis.2.x86_64 as a component of S-JIS for Red Hat Enteprise Linux 6 Server",
"product_id": "6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.x86_64"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"relates_to_product_reference": "6Server-SJIS-6.5.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2014-7169",
"cwe": {
"id": "CWE-228",
"name": "Improper Handling of Syntactically Invalid Structure"
},
"discovery_date": "2014-09-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1146319"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2014-6271 was incomplete, and Bash still allowed certain characters to be injected into other environments via specially crafted environment variables. An attacker could potentially use this flaw to override or bypass environment restrictions to execute shell commands. Certain services and applications allow remote unauthenticated attackers to provide environment variables, allowing them to exploit this issue.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bash: code execution via specially-crafted environment (Incomplete fix for CVE-2014-6271)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.i386",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.ia64",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.src",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.x86_64",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.i386",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.ia64",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.src",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-7169"
},
{
"category": "external",
"summary": "RHBZ#1146319",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146319"
},
{
"category": "external",
"summary": "RHSB-shellshock",
"url": "https://access.redhat.com/security/vulnerabilities/shellshock"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-7169",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-7169"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7169",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7169"
},
{
"category": "external",
"summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
}
],
"release_date": "2014-09-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-09-26T21:28:16+00:00",
"details": "Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the \nRed Hat Network to apply this update are available at \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.i386",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.ia64",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.src",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.x86_64",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.i386",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.ia64",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.src",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1312"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.i386",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.ia64",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.src",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.x86_64",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.i386",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.ia64",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.src",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.x86_64"
]
}
],
"threats": [
{
"category": "exploit_status",
"date": "2022-01-28T00:00:00+00:00",
"details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
},
{
"category": "impact",
"details": "Important"
}
],
"title": "bash: code execution via specially-crafted environment (Incomplete fix for CVE-2014-6271)"
},
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-7186",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2014-09-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1146791"
}
],
"notes": [
{
"category": "description",
"text": "It was identified that the fixed-sized redir_stack could be forced to overflow in the Bash parser, resulting in memory corruption, and possibly leading to arbitrary code execution when evaluating untrusted input that would not otherwise be run as code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bash: parser can allow out-of-bounds memory access while handling redir_stack",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A patch for this issue was applied to the bash packages in Red Hat Enterprise Linux via RHSA-2014:1306, RHSA-2014:1311, and RHSA-2014:1312. The errata do not mention the CVE in the description, as the CVE was only assigned after those updates were released.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.i386",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.ia64",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.src",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.x86_64",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.i386",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.ia64",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.src",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-7186"
},
{
"category": "external",
"summary": "RHBZ#1146791",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146791"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-7186",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-7186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7186"
}
],
"release_date": "2014-09-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-09-26T21:28:16+00:00",
"details": "Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the \nRed Hat Network to apply this update are available at \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.i386",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.ia64",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.src",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.x86_64",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.i386",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.ia64",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.src",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1312"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.6,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.i386",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.ia64",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.src",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.x86_64",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.i386",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.ia64",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.src",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "bash: parser can allow out-of-bounds memory access while handling redir_stack"
},
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-7187",
"cwe": {
"id": "CWE-193",
"name": "Off-by-one Error"
},
"discovery_date": "2014-09-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1146804"
}
],
"notes": [
{
"category": "description",
"text": "An off-by-one error was discovered in the way Bash was handling deeply nested flow control constructs. Depending on the layout of the .bss segment, this could allow arbitrary execution of code that would not otherwise be executed by Bash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bash: off-by-one error in deeply nested flow control constructs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security does not consider this bug to have any security impact on the bash packages shipped in Red Hat Enterprise Linux. A fix for this issue was applied as a hardening in RHSA-2014:1306, RHSA-2014:1311, and RHSA-2014:1312.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.i386",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.ia64",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.src",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.x86_64",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.i386",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.ia64",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.src",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-7187"
},
{
"category": "external",
"summary": "RHBZ#1146804",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146804"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-7187",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-7187"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7187",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7187"
}
],
"release_date": "2014-09-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-09-26T21:28:16+00:00",
"details": "Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the \nRed Hat Network to apply this update are available at \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.i386",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.ia64",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.src",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.x86_64",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.i386",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.ia64",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.src",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1312"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.6,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.i386",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.ia64",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.src",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.x86_64",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.i386",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.ia64",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.src",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "bash: off-by-one error in deeply nested flow control constructs"
}
]
}
RHSA-2014:1354
Vulnerability from csaf_redhat - Published: 2014-10-02 18:40 - Updated: 2026-06-28 12:23Summary
Red Hat Security Advisory: rhev-hypervisor6 security update
Severity
Critical
Notes
Topic: An updated rhev-hypervisor6 package that fixes several security issues is
now available.
Red Hat Product Security has rated this update as having Critical security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details: The rhev-hypervisor6 package provides a Red Hat Enterprise Virtualization
Hypervisor ISO disk image. The Red Hat Enterprise Virtualization Hypervisor
is a dedicated Kernel-based Virtual Machine (KVM) hypervisor. It includes
everything necessary to run and manage virtual machines: a subset of the
Red Hat Enterprise Linux operating environment and the Red Hat Enterprise
Virtualization Agent.
Note: Red Hat Enterprise Virtualization Hypervisor is only available for
the Intel 64 and AMD64 architectures with virtualization extensions.
A flaw was found in the way Bash evaluated certain specially crafted
environment variables. An attacker could use this flaw to override or
bypass environment restrictions to execute shell commands. Certain services
and applications allow remote unauthenticated attackers to provide
environment variables, allowing them to exploit this issue. (CVE-2014-6271)
It was found that the fix for CVE-2014-6271 was incomplete, and Bash still
allowed certain characters to be injected into other environments via
specially crafted environment variables. An attacker could potentially use
this flaw to override or bypass environment restrictions to execute shell
commands. Certain services and applications allow remote unauthenticated
attackers to provide environment variables, allowing them to exploit this
issue. (CVE-2014-7169)
A flaw was found in the way NSS parsed ASN.1 (Abstract Syntax Notation One)
input from certain RSA signatures. A remote attacker could use this flaw to
forge RSA certificates by providing a specially crafted signature to an
application using NSS. (CVE-2014-1568)
It was discovered that the fixed-sized redir_stack could be forced to
overflow in the Bash parser, resulting in memory corruption, and possibly
leading to arbitrary code execution when evaluating untrusted input that
would not otherwise be run as code. (CVE-2014-7186)
An off-by-one error was discovered in the way Bash was handling deeply
nested flow control constructs. Depending on the layout of the .bss
segment, this could allow arbitrary execution of code that would not
otherwise be executed by Bash. (CVE-2014-7187)
Red Hat would like to thank Stephane Chazelas for reporting CVE-2014-6271,
and the Mozilla project for reporting CVE-2014-1568. Upstream acknowledges
Antoine Delignat-Lavaud and Intel Product Security Incident Response Team
as the original reporters of CVE-2014-1568. The CVE-2014-7186 and
CVE-2014-7187 issues were discovered by Florian Weimer of Red Hat Product
Security.
Users of the Red Hat Enterprise Virtualization Hypervisor are advised to
upgrade to this updated package.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the way NSS parsed ASN.1 (Abstract Syntax Notation One) input from certain RSA signatures. A remote attacker could use this flaw to forge RSA certificates by providing a specially crafted signature to an application using NSS.
5.8 ()
Affected products
Threats
Impact
Important
A flaw was found in the way Bash evaluated certain specially crafted environment variables. An attacker could use this flaw to override or bypass environment restrictions to execute shell commands. Certain services and applications allow remote unauthenticated attackers to provide environment variables, allowing them to exploit this issue.
7.5 ()
Affected products
Threats
Exploit Status
CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Impact
Critical
It was found that the fix for CVE-2014-6271 was incomplete, and Bash still allowed certain characters to be injected into other environments via specially crafted environment variables. An attacker could potentially use this flaw to override or bypass environment restrictions to execute shell commands. Certain services and applications allow remote unauthenticated attackers to provide environment variables, allowing them to exploit this issue.
5.1 ()
Affected products
Threats
Exploit Status
CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Impact
Important
It was identified that the fixed-sized redir_stack could be forced to overflow in the Bash parser, resulting in memory corruption, and possibly leading to arbitrary code execution when evaluating untrusted input that would not otherwise be run as code.
4.6 ()
Affected products
Threats
Impact
Moderate
An off-by-one error was discovered in the way Bash was handling deeply nested flow control constructs. Depending on the layout of the .bss segment, this could allow arbitrary execution of code that would not otherwise be executed by Bash.
4.6 ()
Affected products
Threats
Impact
Moderate
References
33 references
Acknowledgments
Mozilla project
Antoine Delignat-Lavaud
Intel Product Security Incident Response Team
Red Hat Product Security
Florian Weimer
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An updated rhev-hypervisor6 package that fixes several security issues is\nnow available.\n\nRed Hat Product Security has rated this update as having Critical security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The rhev-hypervisor6 package provides a Red Hat Enterprise Virtualization\nHypervisor ISO disk image. The Red Hat Enterprise Virtualization Hypervisor\nis a dedicated Kernel-based Virtual Machine (KVM) hypervisor. It includes\neverything necessary to run and manage virtual machines: a subset of the\nRed Hat Enterprise Linux operating environment and the Red Hat Enterprise\nVirtualization Agent.\n\nNote: Red Hat Enterprise Virtualization Hypervisor is only available for\nthe Intel 64 and AMD64 architectures with virtualization extensions.\n\nA flaw was found in the way Bash evaluated certain specially crafted\nenvironment variables. An attacker could use this flaw to override or\nbypass environment restrictions to execute shell commands. Certain services\nand applications allow remote unauthenticated attackers to provide\nenvironment variables, allowing them to exploit this issue. (CVE-2014-6271)\n\nIt was found that the fix for CVE-2014-6271 was incomplete, and Bash still\nallowed certain characters to be injected into other environments via\nspecially crafted environment variables. An attacker could potentially use\nthis flaw to override or bypass environment restrictions to execute shell\ncommands. Certain services and applications allow remote unauthenticated\nattackers to provide environment variables, allowing them to exploit this\nissue. (CVE-2014-7169)\n\nA flaw was found in the way NSS parsed ASN.1 (Abstract Syntax Notation One)\ninput from certain RSA signatures. A remote attacker could use this flaw to\nforge RSA certificates by providing a specially crafted signature to an\napplication using NSS. (CVE-2014-1568)\n\nIt was discovered that the fixed-sized redir_stack could be forced to\noverflow in the Bash parser, resulting in memory corruption, and possibly\nleading to arbitrary code execution when evaluating untrusted input that\nwould not otherwise be run as code. (CVE-2014-7186)\n\nAn off-by-one error was discovered in the way Bash was handling deeply\nnested flow control constructs. Depending on the layout of the .bss\nsegment, this could allow arbitrary execution of code that would not\notherwise be executed by Bash. (CVE-2014-7187)\n\nRed Hat would like to thank Stephane Chazelas for reporting CVE-2014-6271,\nand the Mozilla project for reporting CVE-2014-1568. Upstream acknowledges\nAntoine Delignat-Lavaud and Intel Product Security Incident Response Team\nas the original reporters of CVE-2014-1568. The CVE-2014-7186 and\nCVE-2014-7187 issues were discovered by Florian Weimer of Red Hat Product\nSecurity.\n\nUsers of the Red Hat Enterprise Virtualization Hypervisor are advised to\nupgrade to this updated package.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2014:1354",
"url": "https://access.redhat.com/errata/RHSA-2014:1354"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "1141597",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1141597"
},
{
"category": "external",
"summary": "1145429",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1145429"
},
{
"category": "external",
"summary": "1146319",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146319"
},
{
"category": "external",
"summary": "1146791",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146791"
},
{
"category": "external",
"summary": "1146804",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146804"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1354.json"
}
],
"title": "Red Hat Security Advisory: rhev-hypervisor6 security update",
"tracking": {
"current_release_date": "2026-06-28T12:23:36+00:00",
"generator": {
"date": "2026-06-28T12:23:36+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.2.6"
}
},
"id": "RHSA-2014:1354",
"initial_release_date": "2014-10-02T18:40:05+00:00",
"revision_history": [
{
"date": "2014-10-02T18:40:05+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2014-10-02T18:40:05+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-28T12:23:36+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "RHEV-M 3.4",
"product": {
"name": "RHEV-M 3.4",
"product_id": "6Server-RHEV-S-3.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhev_manager:3"
}
}
}
],
"category": "product_family",
"name": "Red Hat Virtualization"
},
{
"branches": [
{
"category": "product_version",
"name": "rhev-hypervisor6-0:6.5-20140930.1.el6ev.src",
"product": {
"name": "rhev-hypervisor6-0:6.5-20140930.1.el6ev.src",
"product_id": "rhev-hypervisor6-0:6.5-20140930.1.el6ev.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhev-hypervisor6@6.5-20140930.1.el6ev?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "rhev-hypervisor6-0:6.5-20140930.1.el6ev.noarch",
"product": {
"name": "rhev-hypervisor6-0:6.5-20140930.1.el6ev.noarch",
"product_id": "rhev-hypervisor6-0:6.5-20140930.1.el6ev.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhev-hypervisor6@6.5-20140930.1.el6ev?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rhev-hypervisor6-0:6.5-20140930.1.el6ev.noarch as a component of RHEV-M 3.4",
"product_id": "6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.noarch"
},
"product_reference": "rhev-hypervisor6-0:6.5-20140930.1.el6ev.noarch",
"relates_to_product_reference": "6Server-RHEV-S-3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhev-hypervisor6-0:6.5-20140930.1.el6ev.src as a component of RHEV-M 3.4",
"product_id": "6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.src"
},
"product_reference": "rhev-hypervisor6-0:6.5-20140930.1.el6ev.src",
"relates_to_product_reference": "6Server-RHEV-S-3.4"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Mozilla project"
]
},
{
"names": [
"Antoine Delignat-Lavaud",
"Intel Product Security Incident Response Team"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2014-1568",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2014-09-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1145429"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the way NSS parsed ASN.1 (Abstract Syntax Notation One) input from certain RSA signatures. A remote attacker could use this flaw to forge RSA certificates by providing a specially crafted signature to an application using NSS.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss: RSA PKCS#1 signature verification forgery flaw (MFSA 2014-73)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.noarch",
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-1568"
},
{
"category": "external",
"summary": "RHBZ#1145429",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1145429"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-1568",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1568"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-1568",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-1568"
},
{
"category": "external",
"summary": "http://www.mozilla.org/security/announce/2014/mfsa2014-73.html",
"url": "http://www.mozilla.org/security/announce/2014/mfsa2014-73.html"
}
],
"release_date": "2014-09-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-10-02T18:40:05+00:00",
"details": "This update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258\n\nTo upgrade Hypervisors in Red Hat Enterprise Virtualization environments\nusing the disk image provided by this package, refer to:\n\nhttps://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html",
"product_ids": [
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.noarch",
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1354"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.noarch",
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nss: RSA PKCS#1 signature verification forgery flaw (MFSA 2014-73)"
},
{
"cve": "CVE-2014-6271",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2014-09-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1141597"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the way Bash evaluated certain specially crafted environment variables. An attacker could use this flaw to override or bypass environment restrictions to execute shell commands. Certain services and applications allow remote unauthenticated attackers to provide environment variables, allowing them to exploit this issue.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bash: specially-crafted environment variables can be used to inject shell commands",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.noarch",
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-6271"
},
{
"category": "external",
"summary": "RHBZ#1141597",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1141597"
},
{
"category": "external",
"summary": "RHSB-shellshock",
"url": "https://access.redhat.com/security/vulnerabilities/shellshock"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-6271",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-6271"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-6271",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-6271"
},
{
"category": "external",
"summary": "https://access.redhat.com/articles/1200223",
"url": "https://access.redhat.com/articles/1200223"
},
{
"category": "external",
"summary": "https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack",
"url": "https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack"
},
{
"category": "external",
"summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
}
],
"release_date": "2014-09-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-10-02T18:40:05+00:00",
"details": "This update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258\n\nTo upgrade Hypervisors in Red Hat Enterprise Virtualization environments\nusing the disk image provided by this package, refer to:\n\nhttps://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html",
"product_ids": [
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.noarch",
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1354"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.noarch",
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.src"
]
}
],
"threats": [
{
"category": "exploit_status",
"date": "2022-01-28T00:00:00+00:00",
"details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
},
{
"category": "impact",
"details": "Critical"
}
],
"title": "bash: specially-crafted environment variables can be used to inject shell commands"
},
{
"cve": "CVE-2014-7169",
"cwe": {
"id": "CWE-228",
"name": "Improper Handling of Syntactically Invalid Structure"
},
"discovery_date": "2014-09-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1146319"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2014-6271 was incomplete, and Bash still allowed certain characters to be injected into other environments via specially crafted environment variables. An attacker could potentially use this flaw to override or bypass environment restrictions to execute shell commands. Certain services and applications allow remote unauthenticated attackers to provide environment variables, allowing them to exploit this issue.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bash: code execution via specially-crafted environment (Incomplete fix for CVE-2014-6271)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.noarch",
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-7169"
},
{
"category": "external",
"summary": "RHBZ#1146319",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146319"
},
{
"category": "external",
"summary": "RHSB-shellshock",
"url": "https://access.redhat.com/security/vulnerabilities/shellshock"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-7169",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-7169"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7169",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7169"
},
{
"category": "external",
"summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
}
],
"release_date": "2014-09-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-10-02T18:40:05+00:00",
"details": "This update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258\n\nTo upgrade Hypervisors in Red Hat Enterprise Virtualization environments\nusing the disk image provided by this package, refer to:\n\nhttps://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html",
"product_ids": [
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.noarch",
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1354"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.noarch",
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.src"
]
}
],
"threats": [
{
"category": "exploit_status",
"date": "2022-01-28T00:00:00+00:00",
"details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
},
{
"category": "impact",
"details": "Important"
}
],
"title": "bash: code execution via specially-crafted environment (Incomplete fix for CVE-2014-6271)"
},
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-7186",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2014-09-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1146791"
}
],
"notes": [
{
"category": "description",
"text": "It was identified that the fixed-sized redir_stack could be forced to overflow in the Bash parser, resulting in memory corruption, and possibly leading to arbitrary code execution when evaluating untrusted input that would not otherwise be run as code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bash: parser can allow out-of-bounds memory access while handling redir_stack",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A patch for this issue was applied to the bash packages in Red Hat Enterprise Linux via RHSA-2014:1306, RHSA-2014:1311, and RHSA-2014:1312. The errata do not mention the CVE in the description, as the CVE was only assigned after those updates were released.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.noarch",
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-7186"
},
{
"category": "external",
"summary": "RHBZ#1146791",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146791"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-7186",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-7186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7186"
}
],
"release_date": "2014-09-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-10-02T18:40:05+00:00",
"details": "This update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258\n\nTo upgrade Hypervisors in Red Hat Enterprise Virtualization environments\nusing the disk image provided by this package, refer to:\n\nhttps://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html",
"product_ids": [
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.noarch",
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1354"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.6,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.noarch",
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "bash: parser can allow out-of-bounds memory access while handling redir_stack"
},
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-7187",
"cwe": {
"id": "CWE-193",
"name": "Off-by-one Error"
},
"discovery_date": "2014-09-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1146804"
}
],
"notes": [
{
"category": "description",
"text": "An off-by-one error was discovered in the way Bash was handling deeply nested flow control constructs. Depending on the layout of the .bss segment, this could allow arbitrary execution of code that would not otherwise be executed by Bash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bash: off-by-one error in deeply nested flow control constructs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security does not consider this bug to have any security impact on the bash packages shipped in Red Hat Enterprise Linux. A fix for this issue was applied as a hardening in RHSA-2014:1306, RHSA-2014:1311, and RHSA-2014:1312.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.noarch",
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-7187"
},
{
"category": "external",
"summary": "RHBZ#1146804",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146804"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-7187",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-7187"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7187",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7187"
}
],
"release_date": "2014-09-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-10-02T18:40:05+00:00",
"details": "This update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258\n\nTo upgrade Hypervisors in Red Hat Enterprise Virtualization environments\nusing the disk image provided by this package, refer to:\n\nhttps://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html",
"product_ids": [
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.noarch",
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1354"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.6,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.noarch",
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "bash: off-by-one error in deeply nested flow control constructs"
}
]
}
RHSA-2014:1865
Vulnerability from csaf_redhat - Published: 2014-11-17 18:11 - Updated: 2026-06-28 12:23Summary
Red Hat Security Advisory: bash Shift_JIS security update
Severity
Important
Notes
Topic: Updated bash Shift_JIS packages that fix one security issue are now
available for Red Hat Enterprise Linux 5.9 Extended Update Support.
Red Hat Product Security has rated this update as having Important security
impact. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available from the CVE link in the
References section.
Details: The GNU Bourne Again shell (Bash) is a shell and command language
interpreter compatible with the Bourne shell (sh). Bash is the default
shell for Red Hat Enterprise Linux.
Shift_JIS, also known as "SJIS", is a character encoding for the Japanese
language. This package provides bash support for the Shift_JIS encoding.
It was found that the fix for CVE-2014-6271 was incomplete, and Bash still
allowed certain characters to be injected into other environments via
specially crafted environment variables. An attacker could potentially use
this flaw to override or bypass environment restrictions to execute shell
commands. Certain services and applications allow remote unauthenticated
attackers to provide environment variables, allowing them to exploit this
issue. (CVE-2014-7169)
Applications which directly create bash functions as environment variables
need to be made aware of changes to the way names are handled by this
update. Note that certain services, screen sessions, and tmux sessions may
need to be restarted, and affected interactive users may need to re-login.
Installing these updated packages without restarting services will address
the vulnerability, but functionality may be impacted until affected
services are restarted. For more information see the Knowledgebase article
at https://access.redhat.com/articles/1200223
Note: Docker users are advised to use "yum update" within their containers,
and to commit the resulting changes.
For additional information on CVE-2014-6271 and CVE-2014-7169, refer to the
aforementioned Knowledgebase article.
All users who require Shift_JIS encoding support with Bash built-in
functions are advised to upgrade to these updated packages, which contain a
backported patch to correct this issue.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
It was found that the fix for CVE-2014-6271 was incomplete, and Bash still allowed certain characters to be injected into other environments via specially crafted environment variables. An attacker could potentially use this flaw to override or bypass environment restrictions to execute shell commands. Certain services and applications allow remote unauthenticated attackers to provide environment variables, allowing them to exploit this issue.
5.1 ()
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.x86_64 | — |
Vendor Fix
fix
|
Threats
Exploit Status
CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Impact
Important
It was identified that the fixed-sized redir_stack could be forced to overflow in the Bash parser, resulting in memory corruption, and possibly leading to arbitrary code execution when evaluating untrusted input that would not otherwise be run as code.
4.6 ()
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
An off-by-one error was discovered in the way Bash was handling deeply nested flow control constructs. Depending on the layout of the .bss segment, this could allow arbitrary execution of code that would not otherwise be executed by Bash.
4.6 ()
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
19 references
Acknowledgments
Red Hat Product Security
Florian Weimer
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated bash Shift_JIS packages that fix one security issue are now\navailable for Red Hat Enterprise Linux 5.9 Extended Update Support.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available from the CVE link in the\nReferences section.",
"title": "Topic"
},
{
"category": "general",
"text": "The GNU Bourne Again shell (Bash) is a shell and command language\ninterpreter compatible with the Bourne shell (sh). Bash is the default\nshell for Red Hat Enterprise Linux.\n\nShift_JIS, also known as \"SJIS\", is a character encoding for the Japanese\nlanguage. This package provides bash support for the Shift_JIS encoding.\n\nIt was found that the fix for CVE-2014-6271 was incomplete, and Bash still\nallowed certain characters to be injected into other environments via\nspecially crafted environment variables. An attacker could potentially use\nthis flaw to override or bypass environment restrictions to execute shell\ncommands. Certain services and applications allow remote unauthenticated\nattackers to provide environment variables, allowing them to exploit this\nissue. (CVE-2014-7169)\n\nApplications which directly create bash functions as environment variables\nneed to be made aware of changes to the way names are handled by this\nupdate. Note that certain services, screen sessions, and tmux sessions may\nneed to be restarted, and affected interactive users may need to re-login.\nInstalling these updated packages without restarting services will address\nthe vulnerability, but functionality may be impacted until affected\nservices are restarted. For more information see the Knowledgebase article\nat https://access.redhat.com/articles/1200223\n\nNote: Docker users are advised to use \"yum update\" within their containers,\nand to commit the resulting changes.\n\nFor additional information on CVE-2014-6271 and CVE-2014-7169, refer to the\naforementioned Knowledgebase article.\n\nAll users who require Shift_JIS encoding support with Bash built-in\nfunctions are advised to upgrade to these updated packages, which contain a\nbackported patch to correct this issue.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2014:1865",
"url": "https://access.redhat.com/errata/RHSA-2014:1865"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/articles/1200223",
"url": "https://access.redhat.com/articles/1200223"
},
{
"category": "external",
"summary": "1146319",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146319"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1865.json"
}
],
"title": "Red Hat Security Advisory: bash Shift_JIS security update",
"tracking": {
"current_release_date": "2026-06-28T12:23:46+00:00",
"generator": {
"date": "2026-06-28T12:23:46+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.2.6"
}
},
"id": "RHSA-2014:1865",
"initial_release_date": "2014-11-17T18:11:13+00:00",
"revision_history": [
{
"date": "2014-11-17T18:11:13+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2014-11-17T18:11:14+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-28T12:23:46+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "SJIS (v. 5.9.z Server)",
"product": {
"name": "SJIS (v. 5.9.z Server)",
"product_id": "5Server-SJIS-5.9.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_sjis:5"
}
}
}
],
"category": "product_family",
"name": "RHEL S-JIS Service"
},
{
"branches": [
{
"category": "product_version",
"name": "bash-0:3.2-32.el5_9.3.sjis.1.ia64",
"product": {
"name": "bash-0:3.2-32.el5_9.3.sjis.1.ia64",
"product_id": "bash-0:3.2-32.el5_9.3.sjis.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.2-32.el5_9.3.sjis.1?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.ia64",
"product": {
"name": "bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.ia64",
"product_id": "bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@3.2-32.el5_9.3.sjis.1?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "bash-0:3.2-32.el5_9.3.sjis.1.i386",
"product": {
"name": "bash-0:3.2-32.el5_9.3.sjis.1.i386",
"product_id": "bash-0:3.2-32.el5_9.3.sjis.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.2-32.el5_9.3.sjis.1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.i386",
"product": {
"name": "bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.i386",
"product_id": "bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@3.2-32.el5_9.3.sjis.1?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "bash-0:3.2-32.el5_9.3.sjis.1.x86_64",
"product": {
"name": "bash-0:3.2-32.el5_9.3.sjis.1.x86_64",
"product_id": "bash-0:3.2-32.el5_9.3.sjis.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.2-32.el5_9.3.sjis.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.x86_64",
"product": {
"name": "bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.x86_64",
"product_id": "bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@3.2-32.el5_9.3.sjis.1?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "bash-0:3.2-32.el5_9.3.sjis.1.src",
"product": {
"name": "bash-0:3.2-32.el5_9.3.sjis.1.src",
"product_id": "bash-0:3.2-32.el5_9.3.sjis.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.2-32.el5_9.3.sjis.1?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-32.el5_9.3.sjis.1.i386 as a component of SJIS (v. 5.9.z Server)",
"product_id": "5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.i386"
},
"product_reference": "bash-0:3.2-32.el5_9.3.sjis.1.i386",
"relates_to_product_reference": "5Server-SJIS-5.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-32.el5_9.3.sjis.1.ia64 as a component of SJIS (v. 5.9.z Server)",
"product_id": "5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.ia64"
},
"product_reference": "bash-0:3.2-32.el5_9.3.sjis.1.ia64",
"relates_to_product_reference": "5Server-SJIS-5.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-32.el5_9.3.sjis.1.src as a component of SJIS (v. 5.9.z Server)",
"product_id": "5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.src"
},
"product_reference": "bash-0:3.2-32.el5_9.3.sjis.1.src",
"relates_to_product_reference": "5Server-SJIS-5.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-32.el5_9.3.sjis.1.x86_64 as a component of SJIS (v. 5.9.z Server)",
"product_id": "5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.x86_64"
},
"product_reference": "bash-0:3.2-32.el5_9.3.sjis.1.x86_64",
"relates_to_product_reference": "5Server-SJIS-5.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.i386 as a component of SJIS (v. 5.9.z Server)",
"product_id": "5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.i386"
},
"product_reference": "bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.i386",
"relates_to_product_reference": "5Server-SJIS-5.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.ia64 as a component of SJIS (v. 5.9.z Server)",
"product_id": "5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.ia64"
},
"product_reference": "bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.ia64",
"relates_to_product_reference": "5Server-SJIS-5.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.x86_64 as a component of SJIS (v. 5.9.z Server)",
"product_id": "5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.x86_64"
},
"product_reference": "bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.x86_64",
"relates_to_product_reference": "5Server-SJIS-5.9.z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2014-7169",
"cwe": {
"id": "CWE-228",
"name": "Improper Handling of Syntactically Invalid Structure"
},
"discovery_date": "2014-09-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1146319"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2014-6271 was incomplete, and Bash still allowed certain characters to be injected into other environments via specially crafted environment variables. An attacker could potentially use this flaw to override or bypass environment restrictions to execute shell commands. Certain services and applications allow remote unauthenticated attackers to provide environment variables, allowing them to exploit this issue.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bash: code execution via specially-crafted environment (Incomplete fix for CVE-2014-6271)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.i386",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.ia64",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.src",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.x86_64",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.i386",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.ia64",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-7169"
},
{
"category": "external",
"summary": "RHBZ#1146319",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146319"
},
{
"category": "external",
"summary": "RHSB-shellshock",
"url": "https://access.redhat.com/security/vulnerabilities/shellshock"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-7169",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-7169"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7169",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7169"
},
{
"category": "external",
"summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
}
],
"release_date": "2014-09-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-11-17T18:11:13+00:00",
"details": "Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the \nRed Hat Network to apply this update are available at \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.i386",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.ia64",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.src",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.x86_64",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.i386",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.ia64",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1865"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.i386",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.ia64",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.src",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.x86_64",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.i386",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.ia64",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.x86_64"
]
}
],
"threats": [
{
"category": "exploit_status",
"date": "2022-01-28T00:00:00+00:00",
"details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
},
{
"category": "impact",
"details": "Important"
}
],
"title": "bash: code execution via specially-crafted environment (Incomplete fix for CVE-2014-6271)"
},
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-7186",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2014-09-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1146791"
}
],
"notes": [
{
"category": "description",
"text": "It was identified that the fixed-sized redir_stack could be forced to overflow in the Bash parser, resulting in memory corruption, and possibly leading to arbitrary code execution when evaluating untrusted input that would not otherwise be run as code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bash: parser can allow out-of-bounds memory access while handling redir_stack",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A patch for this issue was applied to the bash packages in Red Hat Enterprise Linux via RHSA-2014:1306, RHSA-2014:1311, and RHSA-2014:1312. The errata do not mention the CVE in the description, as the CVE was only assigned after those updates were released.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.i386",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.ia64",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.src",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.x86_64",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.i386",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.ia64",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-7186"
},
{
"category": "external",
"summary": "RHBZ#1146791",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146791"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-7186",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-7186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7186"
}
],
"release_date": "2014-09-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-11-17T18:11:13+00:00",
"details": "Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the \nRed Hat Network to apply this update are available at \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.i386",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.ia64",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.src",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.x86_64",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.i386",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.ia64",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1865"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.6,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.i386",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.ia64",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.src",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.x86_64",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.i386",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.ia64",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "bash: parser can allow out-of-bounds memory access while handling redir_stack"
},
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-7187",
"cwe": {
"id": "CWE-193",
"name": "Off-by-one Error"
},
"discovery_date": "2014-09-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1146804"
}
],
"notes": [
{
"category": "description",
"text": "An off-by-one error was discovered in the way Bash was handling deeply nested flow control constructs. Depending on the layout of the .bss segment, this could allow arbitrary execution of code that would not otherwise be executed by Bash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bash: off-by-one error in deeply nested flow control constructs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security does not consider this bug to have any security impact on the bash packages shipped in Red Hat Enterprise Linux. A fix for this issue was applied as a hardening in RHSA-2014:1306, RHSA-2014:1311, and RHSA-2014:1312.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.i386",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.ia64",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.src",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.x86_64",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.i386",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.ia64",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-7187"
},
{
"category": "external",
"summary": "RHBZ#1146804",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146804"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-7187",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-7187"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7187",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7187"
}
],
"release_date": "2014-09-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-11-17T18:11:13+00:00",
"details": "Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the \nRed Hat Network to apply this update are available at \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.i386",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.ia64",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.src",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.x86_64",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.i386",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.ia64",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1865"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.6,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.i386",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.ia64",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.src",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.x86_64",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.i386",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.ia64",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "bash: off-by-one error in deeply nested flow control constructs"
}
]
}
RHSA-2014_1306
Vulnerability from csaf_redhat - Published: 2014-09-26 01:46 - Updated: 2024-11-14 16:26Summary
Red Hat Security Advisory: bash security update
Severity
Important
Notes
Topic: [Updated September 30, 2014]
This advisory has been updated with information on restarting system
services after applying this update. No changes have been made to the
original packages.
Updated bash packages that fix one security issue are now available for Red
Hat Enterprise Linux 5, 6, and 7.
Red Hat Product Security has rated this update as having Important security
impact. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available from the CVE link in the
References section.
Details: The GNU Bourne Again shell (Bash) is a shell and command language
interpreter compatible with the Bourne shell (sh). Bash is the default
shell for Red Hat Enterprise Linux.
It was found that the fix for CVE-2014-6271 was incomplete, and Bash still
allowed certain characters to be injected into other environments via
specially crafted environment variables. An attacker could potentially use
this flaw to override or bypass environment restrictions to execute shell
commands. Certain services and applications allow remote unauthenticated
attackers to provide environment variables, allowing them to exploit this
issue. (CVE-2014-7169)
Applications which directly create bash functions as environment variables
need to be made aware of changes to the way names are handled by this
update. Note that certain services, screen sessions, and tmux sessions may
need to be restarted, and affected interactive users may need to re-login.
Installing these updated packages without restarting services will address
the vulnerability, but functionality may be impacted until affected
services are restarted. For more information see the Knowledgebase article
at https://access.redhat.com/articles/1200223
Note: Docker users are advised to use "yum update" within their containers,
and to commit the resulting changes.
For additional information on CVE-2014-6271 and CVE-2014-7169, refer to the
aforementioned Knowledgebase article.
All bash users are advised to upgrade to these updated packages, which
contain a backported patch to correct this issue.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
It was found that the fix for CVE-2014-6271 was incomplete, and Bash still allowed certain characters to be injected into other environments via specially crafted environment variables. An attacker could potentially use this flaw to override or bypass environment restrictions to execute shell commands. Certain services and applications allow remote unauthenticated attackers to provide environment variables, allowing them to exploit this issue.
5.1 ()
Affected products
Fixed
206 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-5.11.Z:bash-0:3.2-33.el5_11.4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.11.Z:bash-0:3.2-33.el5_11.4.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.11.Z:bash-0:3.2-33.el5_11.4.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.11.Z:bash-0:3.2-33.el5_11.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.11.Z:bash-0:3.2-33.el5_11.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.11.Z:bash-0:3.2-33.el5_11.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.11.Z:bash-0:3.2-33.el5_11.4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.11.Z:bash-0:3.2-33.el5_11.4.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.11.Z:bash-0:3.2-33.el5_11.4.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.11.Z:bash-0:3.2-33.el5_11.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.11.Z:bash-0:3.2-33.el5_11.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.11.Z:bash-0:3.2-33.el5_11.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
Threats
Exploit Status
CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Impact
Important
It was discovered that the fixed-sized redir_stack could be forced to overflow in the Bash parser, resulting in memory corruption, and possibly leading to arbitrary code execution when evaluating untrusted input that would not otherwise be run as code.
4.6 ()
Affected products
Fixed
206 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-5.11.Z:bash-0:3.2-33.el5_11.4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.11.Z:bash-0:3.2-33.el5_11.4.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.11.Z:bash-0:3.2-33.el5_11.4.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.11.Z:bash-0:3.2-33.el5_11.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.11.Z:bash-0:3.2-33.el5_11.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.11.Z:bash-0:3.2-33.el5_11.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.11.Z:bash-0:3.2-33.el5_11.4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.11.Z:bash-0:3.2-33.el5_11.4.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.11.Z:bash-0:3.2-33.el5_11.4.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.11.Z:bash-0:3.2-33.el5_11.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.11.Z:bash-0:3.2-33.el5_11.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.11.Z:bash-0:3.2-33.el5_11.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
An off-by-one error was discovered in the way Bash was handling deeply nested flow control constructs. Depending on the layout of the .bss segment, this could allow arbitrary execution of code that would not otherwise be executed by Bash.
4.6 ()
Affected products
Fixed
206 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-5.11.Z:bash-0:3.2-33.el5_11.4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.11.Z:bash-0:3.2-33.el5_11.4.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.11.Z:bash-0:3.2-33.el5_11.4.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.11.Z:bash-0:3.2-33.el5_11.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.11.Z:bash-0:3.2-33.el5_11.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.11.Z:bash-0:3.2-33.el5_11.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.11.Z:bash-0:3.2-33.el5_11.4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.11.Z:bash-0:3.2-33.el5_11.4.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.11.Z:bash-0:3.2-33.el5_11.4.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.11.Z:bash-0:3.2-33.el5_11.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.11.Z:bash-0:3.2-33.el5_11.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.11.Z:bash-0:3.2-33.el5_11.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
19 references
Acknowledgments
Red Hat Product Security
Florian Weimer
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "[Updated September 30, 2014]\nThis advisory has been updated with information on restarting system\nservices after applying this update. No changes have been made to the\noriginal packages.\n\nUpdated bash packages that fix one security issue are now available for Red\nHat Enterprise Linux 5, 6, and 7.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available from the CVE link in the\nReferences section.",
"title": "Topic"
},
{
"category": "general",
"text": "The GNU Bourne Again shell (Bash) is a shell and command language\ninterpreter compatible with the Bourne shell (sh). Bash is the default\nshell for Red Hat Enterprise Linux.\n\nIt was found that the fix for CVE-2014-6271 was incomplete, and Bash still\nallowed certain characters to be injected into other environments via\nspecially crafted environment variables. An attacker could potentially use\nthis flaw to override or bypass environment restrictions to execute shell\ncommands. Certain services and applications allow remote unauthenticated\nattackers to provide environment variables, allowing them to exploit this\nissue. (CVE-2014-7169)\n\nApplications which directly create bash functions as environment variables\nneed to be made aware of changes to the way names are handled by this\nupdate. Note that certain services, screen sessions, and tmux sessions may\nneed to be restarted, and affected interactive users may need to re-login.\nInstalling these updated packages without restarting services will address\nthe vulnerability, but functionality may be impacted until affected\nservices are restarted. For more information see the Knowledgebase article\nat https://access.redhat.com/articles/1200223\n\nNote: Docker users are advised to use \"yum update\" within their containers,\nand to commit the resulting changes.\n\nFor additional information on CVE-2014-6271 and CVE-2014-7169, refer to the\naforementioned Knowledgebase article.\n\nAll bash users are advised to upgrade to these updated packages, which\ncontain a backported patch to correct this issue.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2014:1306",
"url": "https://access.redhat.com/errata/RHSA-2014:1306"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/articles/1200223",
"url": "https://access.redhat.com/articles/1200223"
},
{
"category": "external",
"summary": "1146319",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146319"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1306.json"
}
],
"title": "Red Hat Security Advisory: bash security update",
"tracking": {
"current_release_date": "2024-11-14T16:26:09+00:00",
"generator": {
"date": "2024-11-14T16:26:09+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2014:1306",
"initial_release_date": "2014-09-26T01:46:36+00:00",
"revision_history": [
{
"date": "2014-09-26T01:46:36+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2014-09-30T16:02:45+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T16:26:09+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.5.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.5.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HPC Node (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.5.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.5.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.5.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.5.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.5.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.5.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.0.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.0.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
"product": {
"name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.11.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux (v. 5 server)",
"product": {
"name": "Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.11.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "bash-0:4.1.2-15.el6_5.2.src",
"product": {
"name": "bash-0:4.1.2-15.el6_5.2.src",
"product_id": "bash-0:4.1.2-15.el6_5.2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@4.1.2-15.el6_5.2?arch=src"
}
}
},
{
"category": "product_version",
"name": "bash-0:4.2.45-5.el7_0.4.src",
"product": {
"name": "bash-0:4.2.45-5.el7_0.4.src",
"product_id": "bash-0:4.2.45-5.el7_0.4.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@4.2.45-5.el7_0.4?arch=src"
}
}
},
{
"category": "product_version",
"name": "bash-0:3.2-33.el5_11.4.src",
"product": {
"name": "bash-0:3.2-33.el5_11.4.src",
"product_id": "bash-0:3.2-33.el5_11.4.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.2-33.el5_11.4?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"product": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"product_id": "bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@4.1.2-15.el6_5.2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "bash-doc-0:4.1.2-15.el6_5.2.i686",
"product": {
"name": "bash-doc-0:4.1.2-15.el6_5.2.i686",
"product_id": "bash-doc-0:4.1.2-15.el6_5.2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-doc@4.1.2-15.el6_5.2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "bash-0:4.1.2-15.el6_5.2.i686",
"product": {
"name": "bash-0:4.1.2-15.el6_5.2.i686",
"product_id": "bash-0:4.1.2-15.el6_5.2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@4.1.2-15.el6_5.2?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"product": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"product_id": "bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@4.1.2-15.el6_5.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"product": {
"name": "bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"product_id": "bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-doc@4.1.2-15.el6_5.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bash-0:4.1.2-15.el6_5.2.x86_64",
"product": {
"name": "bash-0:4.1.2-15.el6_5.2.x86_64",
"product_id": "bash-0:4.1.2-15.el6_5.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@4.1.2-15.el6_5.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"product": {
"name": "bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"product_id": "bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@4.2.45-5.el7_0.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"product": {
"name": "bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"product_id": "bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-doc@4.2.45-5.el7_0.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bash-0:4.2.45-5.el7_0.4.x86_64",
"product": {
"name": "bash-0:4.2.45-5.el7_0.4.x86_64",
"product_id": "bash-0:4.2.45-5.el7_0.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@4.2.45-5.el7_0.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bash-debuginfo-0:3.2-33.el5_11.4.x86_64",
"product": {
"name": "bash-debuginfo-0:3.2-33.el5_11.4.x86_64",
"product_id": "bash-debuginfo-0:3.2-33.el5_11.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@3.2-33.el5_11.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bash-0:3.2-33.el5_11.4.x86_64",
"product": {
"name": "bash-0:3.2-33.el5_11.4.x86_64",
"product_id": "bash-0:3.2-33.el5_11.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.2-33.el5_11.4?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"product": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"product_id": "bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@4.1.2-15.el6_5.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "bash-doc-0:4.1.2-15.el6_5.2.s390x",
"product": {
"name": "bash-doc-0:4.1.2-15.el6_5.2.s390x",
"product_id": "bash-doc-0:4.1.2-15.el6_5.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-doc@4.1.2-15.el6_5.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "bash-0:4.1.2-15.el6_5.2.s390x",
"product": {
"name": "bash-0:4.1.2-15.el6_5.2.s390x",
"product_id": "bash-0:4.1.2-15.el6_5.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@4.1.2-15.el6_5.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"product": {
"name": "bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"product_id": "bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@4.2.45-5.el7_0.4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "bash-doc-0:4.2.45-5.el7_0.4.s390x",
"product": {
"name": "bash-doc-0:4.2.45-5.el7_0.4.s390x",
"product_id": "bash-doc-0:4.2.45-5.el7_0.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-doc@4.2.45-5.el7_0.4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "bash-0:4.2.45-5.el7_0.4.s390x",
"product": {
"name": "bash-0:4.2.45-5.el7_0.4.s390x",
"product_id": "bash-0:4.2.45-5.el7_0.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@4.2.45-5.el7_0.4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "bash-debuginfo-0:3.2-33.el5_11.4.s390x",
"product": {
"name": "bash-debuginfo-0:3.2-33.el5_11.4.s390x",
"product_id": "bash-debuginfo-0:3.2-33.el5_11.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@3.2-33.el5_11.4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "bash-0:3.2-33.el5_11.4.s390x",
"product": {
"name": "bash-0:3.2-33.el5_11.4.s390x",
"product_id": "bash-0:3.2-33.el5_11.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.2-33.el5_11.4?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"product": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"product_id": "bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@4.1.2-15.el6_5.2?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"product": {
"name": "bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"product_id": "bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-doc@4.1.2-15.el6_5.2?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "bash-0:4.1.2-15.el6_5.2.ppc64",
"product": {
"name": "bash-0:4.1.2-15.el6_5.2.ppc64",
"product_id": "bash-0:4.1.2-15.el6_5.2.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@4.1.2-15.el6_5.2?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"product": {
"name": "bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"product_id": "bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@4.2.45-5.el7_0.4?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"product": {
"name": "bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"product_id": "bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-doc@4.2.45-5.el7_0.4?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "bash-0:4.2.45-5.el7_0.4.ppc64",
"product": {
"name": "bash-0:4.2.45-5.el7_0.4.ppc64",
"product_id": "bash-0:4.2.45-5.el7_0.4.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@4.2.45-5.el7_0.4?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "bash-debuginfo-0:3.2-33.el5_11.4.i386",
"product": {
"name": "bash-debuginfo-0:3.2-33.el5_11.4.i386",
"product_id": "bash-debuginfo-0:3.2-33.el5_11.4.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@3.2-33.el5_11.4?arch=i386"
}
}
},
{
"category": "product_version",
"name": "bash-0:3.2-33.el5_11.4.i386",
"product": {
"name": "bash-0:3.2-33.el5_11.4.i386",
"product_id": "bash-0:3.2-33.el5_11.4.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.2-33.el5_11.4?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "bash-debuginfo-0:3.2-33.el5_11.4.ia64",
"product": {
"name": "bash-debuginfo-0:3.2-33.el5_11.4.ia64",
"product_id": "bash-debuginfo-0:3.2-33.el5_11.4.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@3.2-33.el5_11.4?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "bash-0:3.2-33.el5_11.4.ia64",
"product": {
"name": "bash-0:3.2-33.el5_11.4.ia64",
"product_id": "bash-0:3.2-33.el5_11.4.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.2-33.el5_11.4?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "bash-debuginfo-0:3.2-33.el5_11.4.ppc",
"product": {
"name": "bash-debuginfo-0:3.2-33.el5_11.4.ppc",
"product_id": "bash-debuginfo-0:3.2-33.el5_11.4.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@3.2-33.el5_11.4?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "bash-0:3.2-33.el5_11.4.ppc",
"product": {
"name": "bash-0:3.2-33.el5_11.4.ppc",
"product_id": "bash-0:3.2-33.el5_11.4.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.2-33.el5_11.4?arch=ppc"
}
}
}
],
"category": "architecture",
"name": "ppc"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-33.el5_11.4.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.11.Z:bash-0:3.2-33.el5_11.4.i386"
},
"product_reference": "bash-0:3.2-33.el5_11.4.i386",
"relates_to_product_reference": "5Client-5.11.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-33.el5_11.4.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.11.Z:bash-0:3.2-33.el5_11.4.ia64"
},
"product_reference": "bash-0:3.2-33.el5_11.4.ia64",
"relates_to_product_reference": "5Client-5.11.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-33.el5_11.4.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.11.Z:bash-0:3.2-33.el5_11.4.ppc"
},
"product_reference": "bash-0:3.2-33.el5_11.4.ppc",
"relates_to_product_reference": "5Client-5.11.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-33.el5_11.4.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.11.Z:bash-0:3.2-33.el5_11.4.s390x"
},
"product_reference": "bash-0:3.2-33.el5_11.4.s390x",
"relates_to_product_reference": "5Client-5.11.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-33.el5_11.4.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.11.Z:bash-0:3.2-33.el5_11.4.src"
},
"product_reference": "bash-0:3.2-33.el5_11.4.src",
"relates_to_product_reference": "5Client-5.11.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-33.el5_11.4.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.11.Z:bash-0:3.2-33.el5_11.4.x86_64"
},
"product_reference": "bash-0:3.2-33.el5_11.4.x86_64",
"relates_to_product_reference": "5Client-5.11.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.2-33.el5_11.4.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.i386"
},
"product_reference": "bash-debuginfo-0:3.2-33.el5_11.4.i386",
"relates_to_product_reference": "5Client-5.11.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.2-33.el5_11.4.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ia64"
},
"product_reference": "bash-debuginfo-0:3.2-33.el5_11.4.ia64",
"relates_to_product_reference": "5Client-5.11.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.2-33.el5_11.4.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ppc"
},
"product_reference": "bash-debuginfo-0:3.2-33.el5_11.4.ppc",
"relates_to_product_reference": "5Client-5.11.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.2-33.el5_11.4.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.s390x"
},
"product_reference": "bash-debuginfo-0:3.2-33.el5_11.4.s390x",
"relates_to_product_reference": "5Client-5.11.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.2-33.el5_11.4.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.x86_64"
},
"product_reference": "bash-debuginfo-0:3.2-33.el5_11.4.x86_64",
"relates_to_product_reference": "5Client-5.11.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-33.el5_11.4.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.11.Z:bash-0:3.2-33.el5_11.4.i386"
},
"product_reference": "bash-0:3.2-33.el5_11.4.i386",
"relates_to_product_reference": "5Server-5.11.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-33.el5_11.4.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.11.Z:bash-0:3.2-33.el5_11.4.ia64"
},
"product_reference": "bash-0:3.2-33.el5_11.4.ia64",
"relates_to_product_reference": "5Server-5.11.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-33.el5_11.4.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.11.Z:bash-0:3.2-33.el5_11.4.ppc"
},
"product_reference": "bash-0:3.2-33.el5_11.4.ppc",
"relates_to_product_reference": "5Server-5.11.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-33.el5_11.4.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.11.Z:bash-0:3.2-33.el5_11.4.s390x"
},
"product_reference": "bash-0:3.2-33.el5_11.4.s390x",
"relates_to_product_reference": "5Server-5.11.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-33.el5_11.4.src as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.11.Z:bash-0:3.2-33.el5_11.4.src"
},
"product_reference": "bash-0:3.2-33.el5_11.4.src",
"relates_to_product_reference": "5Server-5.11.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-33.el5_11.4.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.11.Z:bash-0:3.2-33.el5_11.4.x86_64"
},
"product_reference": "bash-0:3.2-33.el5_11.4.x86_64",
"relates_to_product_reference": "5Server-5.11.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.2-33.el5_11.4.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.i386"
},
"product_reference": "bash-debuginfo-0:3.2-33.el5_11.4.i386",
"relates_to_product_reference": "5Server-5.11.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.2-33.el5_11.4.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ia64"
},
"product_reference": "bash-debuginfo-0:3.2-33.el5_11.4.ia64",
"relates_to_product_reference": "5Server-5.11.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.2-33.el5_11.4.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ppc"
},
"product_reference": "bash-debuginfo-0:3.2-33.el5_11.4.ppc",
"relates_to_product_reference": "5Server-5.11.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.2-33.el5_11.4.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.s390x"
},
"product_reference": "bash-debuginfo-0:3.2-33.el5_11.4.s390x",
"relates_to_product_reference": "5Server-5.11.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.2-33.el5_11.4.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.x86_64"
},
"product_reference": "bash-debuginfo-0:3.2-33.el5_11.4.x86_64",
"relates_to_product_reference": "5Server-5.11.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.2.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.i686"
},
"product_reference": "bash-0:4.1.2-15.el6_5.2.i686",
"relates_to_product_reference": "6Client-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.2.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64"
},
"product_reference": "bash-0:4.1.2-15.el6_5.2.ppc64",
"relates_to_product_reference": "6Client-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x"
},
"product_reference": "bash-0:4.1.2-15.el6_5.2.s390x",
"relates_to_product_reference": "6Client-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.2.src as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.src"
},
"product_reference": "bash-0:4.1.2-15.el6_5.2.src",
"relates_to_product_reference": "6Client-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64"
},
"product_reference": "bash-0:4.1.2-15.el6_5.2.x86_64",
"relates_to_product_reference": "6Client-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.2.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"relates_to_product_reference": "6Client-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"relates_to_product_reference": "6Client-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"relates_to_product_reference": "6Client-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"relates_to_product_reference": "6Client-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_5.2.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_5.2.i686",
"relates_to_product_reference": "6Client-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_5.2.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"relates_to_product_reference": "6Client-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_5.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_5.2.s390x",
"relates_to_product_reference": "6Client-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_5.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"relates_to_product_reference": "6Client-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.2.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686"
},
"product_reference": "bash-0:4.1.2-15.el6_5.2.i686",
"relates_to_product_reference": "6Client-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.2.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64"
},
"product_reference": "bash-0:4.1.2-15.el6_5.2.ppc64",
"relates_to_product_reference": "6Client-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.2.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x"
},
"product_reference": "bash-0:4.1.2-15.el6_5.2.s390x",
"relates_to_product_reference": "6Client-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.2.src as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src"
},
"product_reference": "bash-0:4.1.2-15.el6_5.2.src",
"relates_to_product_reference": "6Client-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64"
},
"product_reference": "bash-0:4.1.2-15.el6_5.2.x86_64",
"relates_to_product_reference": "6Client-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.2.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"relates_to_product_reference": "6Client-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"relates_to_product_reference": "6Client-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.2.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"relates_to_product_reference": "6Client-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"relates_to_product_reference": "6Client-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_5.2.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_5.2.i686",
"relates_to_product_reference": "6Client-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_5.2.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"relates_to_product_reference": "6Client-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_5.2.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_5.2.s390x",
"relates_to_product_reference": "6Client-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_5.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"relates_to_product_reference": "6Client-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.2.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.i686"
},
"product_reference": "bash-0:4.1.2-15.el6_5.2.i686",
"relates_to_product_reference": "6ComputeNode-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.2.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64"
},
"product_reference": "bash-0:4.1.2-15.el6_5.2.ppc64",
"relates_to_product_reference": "6ComputeNode-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.2.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x"
},
"product_reference": "bash-0:4.1.2-15.el6_5.2.s390x",
"relates_to_product_reference": "6ComputeNode-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.2.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.src"
},
"product_reference": "bash-0:4.1.2-15.el6_5.2.src",
"relates_to_product_reference": "6ComputeNode-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.2.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64"
},
"product_reference": "bash-0:4.1.2-15.el6_5.2.x86_64",
"relates_to_product_reference": "6ComputeNode-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.2.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"relates_to_product_reference": "6ComputeNode-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"relates_to_product_reference": "6ComputeNode-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.2.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"relates_to_product_reference": "6ComputeNode-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"relates_to_product_reference": "6ComputeNode-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_5.2.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_5.2.i686",
"relates_to_product_reference": "6ComputeNode-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_5.2.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"relates_to_product_reference": "6ComputeNode-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_5.2.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_5.2.s390x",
"relates_to_product_reference": "6ComputeNode-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_5.2.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"relates_to_product_reference": "6ComputeNode-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.2.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686"
},
"product_reference": "bash-0:4.1.2-15.el6_5.2.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.2.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64"
},
"product_reference": "bash-0:4.1.2-15.el6_5.2.ppc64",
"relates_to_product_reference": "6ComputeNode-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.2.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x"
},
"product_reference": "bash-0:4.1.2-15.el6_5.2.s390x",
"relates_to_product_reference": "6ComputeNode-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.2.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src"
},
"product_reference": "bash-0:4.1.2-15.el6_5.2.src",
"relates_to_product_reference": "6ComputeNode-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.2.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64"
},
"product_reference": "bash-0:4.1.2-15.el6_5.2.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.2.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"relates_to_product_reference": "6ComputeNode-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.2.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"relates_to_product_reference": "6ComputeNode-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_5.2.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_5.2.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_5.2.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"relates_to_product_reference": "6ComputeNode-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_5.2.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_5.2.s390x",
"relates_to_product_reference": "6ComputeNode-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_5.2.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.2.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.i686"
},
"product_reference": "bash-0:4.1.2-15.el6_5.2.i686",
"relates_to_product_reference": "6Server-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64"
},
"product_reference": "bash-0:4.1.2-15.el6_5.2.ppc64",
"relates_to_product_reference": "6Server-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.2.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x"
},
"product_reference": "bash-0:4.1.2-15.el6_5.2.s390x",
"relates_to_product_reference": "6Server-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.2.src as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.src"
},
"product_reference": "bash-0:4.1.2-15.el6_5.2.src",
"relates_to_product_reference": "6Server-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64"
},
"product_reference": "bash-0:4.1.2-15.el6_5.2.x86_64",
"relates_to_product_reference": "6Server-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.2.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"relates_to_product_reference": "6Server-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"relates_to_product_reference": "6Server-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.2.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"relates_to_product_reference": "6Server-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"relates_to_product_reference": "6Server-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_5.2.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_5.2.i686",
"relates_to_product_reference": "6Server-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_5.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"relates_to_product_reference": "6Server-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_5.2.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_5.2.s390x",
"relates_to_product_reference": "6Server-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_5.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"relates_to_product_reference": "6Server-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.2.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686"
},
"product_reference": "bash-0:4.1.2-15.el6_5.2.i686",
"relates_to_product_reference": "6Server-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64"
},
"product_reference": "bash-0:4.1.2-15.el6_5.2.ppc64",
"relates_to_product_reference": "6Server-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.2.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x"
},
"product_reference": "bash-0:4.1.2-15.el6_5.2.s390x",
"relates_to_product_reference": "6Server-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.2.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src"
},
"product_reference": "bash-0:4.1.2-15.el6_5.2.src",
"relates_to_product_reference": "6Server-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64"
},
"product_reference": "bash-0:4.1.2-15.el6_5.2.x86_64",
"relates_to_product_reference": "6Server-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.2.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"relates_to_product_reference": "6Server-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"relates_to_product_reference": "6Server-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.2.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"relates_to_product_reference": "6Server-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"relates_to_product_reference": "6Server-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_5.2.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_5.2.i686",
"relates_to_product_reference": "6Server-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_5.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"relates_to_product_reference": "6Server-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_5.2.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_5.2.s390x",
"relates_to_product_reference": "6Server-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_5.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"relates_to_product_reference": "6Server-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.2.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.i686"
},
"product_reference": "bash-0:4.1.2-15.el6_5.2.i686",
"relates_to_product_reference": "6Workstation-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.2.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64"
},
"product_reference": "bash-0:4.1.2-15.el6_5.2.ppc64",
"relates_to_product_reference": "6Workstation-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.2.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x"
},
"product_reference": "bash-0:4.1.2-15.el6_5.2.s390x",
"relates_to_product_reference": "6Workstation-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.2.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.src"
},
"product_reference": "bash-0:4.1.2-15.el6_5.2.src",
"relates_to_product_reference": "6Workstation-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64"
},
"product_reference": "bash-0:4.1.2-15.el6_5.2.x86_64",
"relates_to_product_reference": "6Workstation-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.2.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"relates_to_product_reference": "6Workstation-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"relates_to_product_reference": "6Workstation-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.2.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"relates_to_product_reference": "6Workstation-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"relates_to_product_reference": "6Workstation-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_5.2.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_5.2.i686",
"relates_to_product_reference": "6Workstation-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_5.2.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"relates_to_product_reference": "6Workstation-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_5.2.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_5.2.s390x",
"relates_to_product_reference": "6Workstation-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_5.2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"relates_to_product_reference": "6Workstation-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.2.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686"
},
"product_reference": "bash-0:4.1.2-15.el6_5.2.i686",
"relates_to_product_reference": "6Workstation-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.2.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64"
},
"product_reference": "bash-0:4.1.2-15.el6_5.2.ppc64",
"relates_to_product_reference": "6Workstation-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.2.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x"
},
"product_reference": "bash-0:4.1.2-15.el6_5.2.s390x",
"relates_to_product_reference": "6Workstation-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.2.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src"
},
"product_reference": "bash-0:4.1.2-15.el6_5.2.src",
"relates_to_product_reference": "6Workstation-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.2.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64"
},
"product_reference": "bash-0:4.1.2-15.el6_5.2.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.2.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"relates_to_product_reference": "6Workstation-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"relates_to_product_reference": "6Workstation-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.2.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"relates_to_product_reference": "6Workstation-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_5.2.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_5.2.i686",
"relates_to_product_reference": "6Workstation-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_5.2.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"relates_to_product_reference": "6Workstation-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_5.2.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_5.2.s390x",
"relates_to_product_reference": "6Workstation-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_5.2.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.5.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.2.45-5.el7_0.4.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64"
},
"product_reference": "bash-0:4.2.45-5.el7_0.4.ppc64",
"relates_to_product_reference": "7Client-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.2.45-5.el7_0.4.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x"
},
"product_reference": "bash-0:4.2.45-5.el7_0.4.s390x",
"relates_to_product_reference": "7Client-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.2.45-5.el7_0.4.src as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.src"
},
"product_reference": "bash-0:4.2.45-5.el7_0.4.src",
"relates_to_product_reference": "7Client-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.2.45-5.el7_0.4.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64"
},
"product_reference": "bash-0:4.2.45-5.el7_0.4.x86_64",
"relates_to_product_reference": "7Client-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64"
},
"product_reference": "bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"relates_to_product_reference": "7Client-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.2.45-5.el7_0.4.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x"
},
"product_reference": "bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"relates_to_product_reference": "7Client-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64"
},
"product_reference": "bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"relates_to_product_reference": "7Client-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.2.45-5.el7_0.4.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64"
},
"product_reference": "bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"relates_to_product_reference": "7Client-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.2.45-5.el7_0.4.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x"
},
"product_reference": "bash-doc-0:4.2.45-5.el7_0.4.s390x",
"relates_to_product_reference": "7Client-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.2.45-5.el7_0.4.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64"
},
"product_reference": "bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"relates_to_product_reference": "7Client-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.2.45-5.el7_0.4.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64"
},
"product_reference": "bash-0:4.2.45-5.el7_0.4.ppc64",
"relates_to_product_reference": "7Client-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.2.45-5.el7_0.4.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x"
},
"product_reference": "bash-0:4.2.45-5.el7_0.4.s390x",
"relates_to_product_reference": "7Client-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.2.45-5.el7_0.4.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src"
},
"product_reference": "bash-0:4.2.45-5.el7_0.4.src",
"relates_to_product_reference": "7Client-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.2.45-5.el7_0.4.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64"
},
"product_reference": "bash-0:4.2.45-5.el7_0.4.x86_64",
"relates_to_product_reference": "7Client-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64"
},
"product_reference": "bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"relates_to_product_reference": "7Client-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.2.45-5.el7_0.4.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x"
},
"product_reference": "bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"relates_to_product_reference": "7Client-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64"
},
"product_reference": "bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"relates_to_product_reference": "7Client-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.2.45-5.el7_0.4.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64"
},
"product_reference": "bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"relates_to_product_reference": "7Client-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.2.45-5.el7_0.4.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x"
},
"product_reference": "bash-doc-0:4.2.45-5.el7_0.4.s390x",
"relates_to_product_reference": "7Client-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.2.45-5.el7_0.4.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64"
},
"product_reference": "bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"relates_to_product_reference": "7Client-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.2.45-5.el7_0.4.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64"
},
"product_reference": "bash-0:4.2.45-5.el7_0.4.ppc64",
"relates_to_product_reference": "7ComputeNode-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.2.45-5.el7_0.4.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x"
},
"product_reference": "bash-0:4.2.45-5.el7_0.4.s390x",
"relates_to_product_reference": "7ComputeNode-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.2.45-5.el7_0.4.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.src"
},
"product_reference": "bash-0:4.2.45-5.el7_0.4.src",
"relates_to_product_reference": "7ComputeNode-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.2.45-5.el7_0.4.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64"
},
"product_reference": "bash-0:4.2.45-5.el7_0.4.x86_64",
"relates_to_product_reference": "7ComputeNode-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64"
},
"product_reference": "bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"relates_to_product_reference": "7ComputeNode-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.2.45-5.el7_0.4.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x"
},
"product_reference": "bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"relates_to_product_reference": "7ComputeNode-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64"
},
"product_reference": "bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"relates_to_product_reference": "7ComputeNode-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.2.45-5.el7_0.4.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64"
},
"product_reference": "bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"relates_to_product_reference": "7ComputeNode-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.2.45-5.el7_0.4.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x"
},
"product_reference": "bash-doc-0:4.2.45-5.el7_0.4.s390x",
"relates_to_product_reference": "7ComputeNode-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.2.45-5.el7_0.4.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64"
},
"product_reference": "bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"relates_to_product_reference": "7ComputeNode-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.2.45-5.el7_0.4.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64"
},
"product_reference": "bash-0:4.2.45-5.el7_0.4.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.2.45-5.el7_0.4.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x"
},
"product_reference": "bash-0:4.2.45-5.el7_0.4.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.2.45-5.el7_0.4.src as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src"
},
"product_reference": "bash-0:4.2.45-5.el7_0.4.src",
"relates_to_product_reference": "7ComputeNode-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.2.45-5.el7_0.4.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64"
},
"product_reference": "bash-0:4.2.45-5.el7_0.4.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64"
},
"product_reference": "bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.2.45-5.el7_0.4.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x"
},
"product_reference": "bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64"
},
"product_reference": "bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.2.45-5.el7_0.4.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64"
},
"product_reference": "bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.2.45-5.el7_0.4.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x"
},
"product_reference": "bash-doc-0:4.2.45-5.el7_0.4.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.2.45-5.el7_0.4.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64"
},
"product_reference": "bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.2.45-5.el7_0.4.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64"
},
"product_reference": "bash-0:4.2.45-5.el7_0.4.ppc64",
"relates_to_product_reference": "7Server-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.2.45-5.el7_0.4.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x"
},
"product_reference": "bash-0:4.2.45-5.el7_0.4.s390x",
"relates_to_product_reference": "7Server-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.2.45-5.el7_0.4.src as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.src"
},
"product_reference": "bash-0:4.2.45-5.el7_0.4.src",
"relates_to_product_reference": "7Server-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.2.45-5.el7_0.4.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64"
},
"product_reference": "bash-0:4.2.45-5.el7_0.4.x86_64",
"relates_to_product_reference": "7Server-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64"
},
"product_reference": "bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"relates_to_product_reference": "7Server-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.2.45-5.el7_0.4.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x"
},
"product_reference": "bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"relates_to_product_reference": "7Server-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64"
},
"product_reference": "bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"relates_to_product_reference": "7Server-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.2.45-5.el7_0.4.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64"
},
"product_reference": "bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"relates_to_product_reference": "7Server-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.2.45-5.el7_0.4.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x"
},
"product_reference": "bash-doc-0:4.2.45-5.el7_0.4.s390x",
"relates_to_product_reference": "7Server-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.2.45-5.el7_0.4.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64"
},
"product_reference": "bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"relates_to_product_reference": "7Server-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.2.45-5.el7_0.4.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64"
},
"product_reference": "bash-0:4.2.45-5.el7_0.4.ppc64",
"relates_to_product_reference": "7Server-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.2.45-5.el7_0.4.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x"
},
"product_reference": "bash-0:4.2.45-5.el7_0.4.s390x",
"relates_to_product_reference": "7Server-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.2.45-5.el7_0.4.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src"
},
"product_reference": "bash-0:4.2.45-5.el7_0.4.src",
"relates_to_product_reference": "7Server-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.2.45-5.el7_0.4.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64"
},
"product_reference": "bash-0:4.2.45-5.el7_0.4.x86_64",
"relates_to_product_reference": "7Server-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64"
},
"product_reference": "bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"relates_to_product_reference": "7Server-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.2.45-5.el7_0.4.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x"
},
"product_reference": "bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"relates_to_product_reference": "7Server-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64"
},
"product_reference": "bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"relates_to_product_reference": "7Server-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.2.45-5.el7_0.4.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64"
},
"product_reference": "bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"relates_to_product_reference": "7Server-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.2.45-5.el7_0.4.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x"
},
"product_reference": "bash-doc-0:4.2.45-5.el7_0.4.s390x",
"relates_to_product_reference": "7Server-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.2.45-5.el7_0.4.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64"
},
"product_reference": "bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"relates_to_product_reference": "7Server-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.2.45-5.el7_0.4.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64"
},
"product_reference": "bash-0:4.2.45-5.el7_0.4.ppc64",
"relates_to_product_reference": "7Workstation-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.2.45-5.el7_0.4.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x"
},
"product_reference": "bash-0:4.2.45-5.el7_0.4.s390x",
"relates_to_product_reference": "7Workstation-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.2.45-5.el7_0.4.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.src"
},
"product_reference": "bash-0:4.2.45-5.el7_0.4.src",
"relates_to_product_reference": "7Workstation-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.2.45-5.el7_0.4.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64"
},
"product_reference": "bash-0:4.2.45-5.el7_0.4.x86_64",
"relates_to_product_reference": "7Workstation-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64"
},
"product_reference": "bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"relates_to_product_reference": "7Workstation-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.2.45-5.el7_0.4.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x"
},
"product_reference": "bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"relates_to_product_reference": "7Workstation-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64"
},
"product_reference": "bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"relates_to_product_reference": "7Workstation-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.2.45-5.el7_0.4.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64"
},
"product_reference": "bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"relates_to_product_reference": "7Workstation-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.2.45-5.el7_0.4.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x"
},
"product_reference": "bash-doc-0:4.2.45-5.el7_0.4.s390x",
"relates_to_product_reference": "7Workstation-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.2.45-5.el7_0.4.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64"
},
"product_reference": "bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"relates_to_product_reference": "7Workstation-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.2.45-5.el7_0.4.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64"
},
"product_reference": "bash-0:4.2.45-5.el7_0.4.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.2.45-5.el7_0.4.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x"
},
"product_reference": "bash-0:4.2.45-5.el7_0.4.s390x",
"relates_to_product_reference": "7Workstation-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.2.45-5.el7_0.4.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src"
},
"product_reference": "bash-0:4.2.45-5.el7_0.4.src",
"relates_to_product_reference": "7Workstation-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.2.45-5.el7_0.4.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64"
},
"product_reference": "bash-0:4.2.45-5.el7_0.4.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64"
},
"product_reference": "bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.2.45-5.el7_0.4.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x"
},
"product_reference": "bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"relates_to_product_reference": "7Workstation-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64"
},
"product_reference": "bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.2.45-5.el7_0.4.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64"
},
"product_reference": "bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.2.45-5.el7_0.4.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x"
},
"product_reference": "bash-doc-0:4.2.45-5.el7_0.4.s390x",
"relates_to_product_reference": "7Workstation-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.2.45-5.el7_0.4.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64"
},
"product_reference": "bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.0.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2014-7169",
"cwe": {
"id": "CWE-228",
"name": "Improper Handling of Syntactically Invalid Structure"
},
"discovery_date": "2014-09-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1146319"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2014-6271 was incomplete, and Bash still allowed certain characters to be injected into other environments via specially crafted environment variables. An attacker could potentially use this flaw to override or bypass environment restrictions to execute shell commands. Certain services and applications allow remote unauthenticated attackers to provide environment variables, allowing them to exploit this issue.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bash: code execution via specially-crafted environment (Incomplete fix for CVE-2014-6271)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.i386",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.ia64",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.ppc",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.s390x",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.src",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.x86_64",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.i386",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ia64",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ppc",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.s390x",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.x86_64",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.i386",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.ia64",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.ppc",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.s390x",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.src",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.x86_64",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.i386",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ia64",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ppc",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.s390x",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.x86_64",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Client-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Client-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Client-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Client-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Client-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Client-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Client-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Client-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Client-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Client-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Client-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Client-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Server-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Server-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Server-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Server-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Server-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Server-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Server-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Server-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Server-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Server-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Server-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Server-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-7169"
},
{
"category": "external",
"summary": "RHBZ#1146319",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146319"
},
{
"category": "external",
"summary": "RHSB-shellshock",
"url": "https://access.redhat.com/security/vulnerabilities/shellshock"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-7169",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-7169"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7169",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7169"
},
{
"category": "external",
"summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
}
],
"release_date": "2014-09-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-09-26T01:46:36+00:00",
"details": "Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.i386",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.ia64",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.ppc",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.s390x",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.src",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.x86_64",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.i386",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ia64",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ppc",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.s390x",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.x86_64",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.i386",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.ia64",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.ppc",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.s390x",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.src",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.x86_64",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.i386",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ia64",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ppc",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.s390x",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.x86_64",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Client-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Client-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Client-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Client-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Client-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Client-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Client-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Client-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Client-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Client-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Client-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Client-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Server-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Server-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Server-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Server-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Server-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Server-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Server-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Server-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Server-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Server-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Server-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Server-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1306"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.i386",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.ia64",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.ppc",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.s390x",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.src",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.x86_64",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.i386",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ia64",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ppc",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.s390x",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.x86_64",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.i386",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.ia64",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.ppc",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.s390x",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.src",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.x86_64",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.i386",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ia64",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ppc",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.s390x",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.x86_64",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Client-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Client-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Client-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Client-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Client-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Client-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Client-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Client-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Client-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Client-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Client-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Client-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Server-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Server-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Server-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Server-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Server-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Server-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Server-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Server-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Server-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Server-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Server-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Server-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64"
]
}
],
"threats": [
{
"category": "exploit_status",
"date": "2022-01-28T00:00:00+00:00",
"details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
},
{
"category": "impact",
"details": "Important"
}
],
"title": "bash: code execution via specially-crafted environment (Incomplete fix for CVE-2014-6271)"
},
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-7186",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2014-09-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1146791"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the fixed-sized redir_stack could be forced to overflow in the Bash parser, resulting in memory corruption, and possibly leading to arbitrary code execution when evaluating untrusted input that would not otherwise be run as code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bash: parser can allow out-of-bounds memory access while handling redir_stack",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A patch for this issue was applied to the bash packages in Red Hat Enterprise Linux via RHSA-2014:1306, RHSA-2014:1311, and RHSA-2014:1312. The errata do not mention the CVE in the description, as the CVE was only assigned after those updates were released.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.i386",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.ia64",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.ppc",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.s390x",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.src",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.x86_64",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.i386",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ia64",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ppc",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.s390x",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.x86_64",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.i386",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.ia64",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.ppc",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.s390x",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.src",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.x86_64",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.i386",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ia64",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ppc",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.s390x",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.x86_64",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Client-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Client-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Client-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Client-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Client-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Client-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Client-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Client-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Client-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Client-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Client-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Client-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Server-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Server-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Server-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Server-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Server-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Server-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Server-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Server-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Server-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Server-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Server-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Server-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-7186"
},
{
"category": "external",
"summary": "RHBZ#1146791",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146791"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-7186",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-7186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7186"
}
],
"release_date": "2014-09-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-09-26T01:46:36+00:00",
"details": "Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.i386",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.ia64",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.ppc",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.s390x",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.src",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.x86_64",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.i386",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ia64",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ppc",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.s390x",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.x86_64",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.i386",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.ia64",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.ppc",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.s390x",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.src",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.x86_64",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.i386",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ia64",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ppc",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.s390x",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.x86_64",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Client-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Client-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Client-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Client-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Client-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Client-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Client-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Client-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Client-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Client-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Client-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Client-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Server-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Server-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Server-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Server-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Server-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Server-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Server-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Server-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Server-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Server-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Server-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Server-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1306"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.6,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.i386",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.ia64",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.ppc",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.s390x",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.src",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.x86_64",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.i386",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ia64",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ppc",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.s390x",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.x86_64",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.i386",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.ia64",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.ppc",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.s390x",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.src",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.x86_64",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.i386",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ia64",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ppc",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.s390x",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.x86_64",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Client-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Client-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Client-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Client-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Client-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Client-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Client-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Client-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Client-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Client-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Client-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Client-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Server-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Server-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Server-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Server-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Server-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Server-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Server-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Server-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Server-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Server-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Server-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Server-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "bash: parser can allow out-of-bounds memory access while handling redir_stack"
},
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-7187",
"cwe": {
"id": "CWE-193",
"name": "Off-by-one Error"
},
"discovery_date": "2014-09-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1146804"
}
],
"notes": [
{
"category": "description",
"text": "An off-by-one error was discovered in the way Bash was handling deeply nested flow control constructs. Depending on the layout of the .bss segment, this could allow arbitrary execution of code that would not otherwise be executed by Bash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bash: off-by-one error in deeply nested flow control constructs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security does not consider this bug to have any security impact on the bash packages shipped in Red Hat Enterprise Linux. A fix for this issue was applied as a hardening in RHSA-2014:1306, RHSA-2014:1311, and RHSA-2014:1312.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.i386",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.ia64",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.ppc",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.s390x",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.src",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.x86_64",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.i386",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ia64",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ppc",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.s390x",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.x86_64",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.i386",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.ia64",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.ppc",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.s390x",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.src",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.x86_64",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.i386",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ia64",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ppc",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.s390x",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.x86_64",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Client-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Client-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Client-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Client-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Client-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Client-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Client-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Client-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Client-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Client-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Client-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Client-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Server-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Server-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Server-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Server-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Server-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Server-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Server-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Server-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Server-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Server-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Server-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Server-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-7187"
},
{
"category": "external",
"summary": "RHBZ#1146804",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146804"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-7187",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-7187"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7187",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7187"
}
],
"release_date": "2014-09-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-09-26T01:46:36+00:00",
"details": "Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.i386",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.ia64",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.ppc",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.s390x",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.src",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.x86_64",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.i386",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ia64",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ppc",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.s390x",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.x86_64",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.i386",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.ia64",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.ppc",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.s390x",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.src",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.x86_64",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.i386",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ia64",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ppc",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.s390x",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.x86_64",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Client-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Client-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Client-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Client-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Client-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Client-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Client-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Client-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Client-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Client-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Client-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Client-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Server-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Server-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Server-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Server-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Server-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Server-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Server-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Server-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Server-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Server-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Server-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Server-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1306"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.6,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.i386",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.ia64",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.ppc",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.s390x",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.src",
"5Client-5.11.Z:bash-0:3.2-33.el5_11.4.x86_64",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.i386",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ia64",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ppc",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.s390x",
"5Client-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.x86_64",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.i386",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.ia64",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.ppc",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.s390x",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.src",
"5Server-5.11.Z:bash-0:3.2-33.el5_11.4.x86_64",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.i386",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ia64",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.ppc",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.s390x",
"5Server-5.11.Z:bash-debuginfo-0:3.2-33.el5_11.4.x86_64",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Client-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Client-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Client-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Client-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Client-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Client-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6ComputeNode-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6ComputeNode-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6ComputeNode-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Server-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Server-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Server-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Server-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Server-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Server-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Workstation-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.i686",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.src",
"6Workstation-optional-6.5.z:bash-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.i686",
"6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-optional-6.5.z:bash-debuginfo-0:4.1.2-15.el6_5.2.x86_64",
"6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.i686",
"6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.ppc64",
"6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.s390x",
"6Workstation-optional-6.5.z:bash-doc-0:4.1.2-15.el6_5.2.x86_64",
"7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Client-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Client-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Client-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Client-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Client-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Client-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Client-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Client-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Client-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Client-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Client-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Client-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Client-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Client-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7ComputeNode-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7ComputeNode-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7ComputeNode-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7ComputeNode-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7ComputeNode-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Server-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Server-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Server-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Server-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Server-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Server-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Server-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Server-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Server-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Server-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Server-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Server-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Server-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Server-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Workstation-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.src",
"7Workstation-optional-7.0.Z:bash-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-optional-7.0.Z:bash-debuginfo-0:4.2.45-5.el7_0.4.x86_64",
"7Workstation-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.ppc64",
"7Workstation-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.s390x",
"7Workstation-optional-7.0.Z:bash-doc-0:4.2.45-5.el7_0.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "bash: off-by-one error in deeply nested flow control constructs"
}
]
}
RHSA-2014_1311
Vulnerability from csaf_redhat - Published: 2014-09-26 17:58 - Updated: 2024-11-14 16:26Summary
Red Hat Security Advisory: bash security update
Severity
Important
Notes
Topic: [Updated September 30, 2014]
This advisory has been updated with information on restarting system
services after applying this update. No changes have been made to the
original packages.
Updated bash packages that fix one security issue are now available for Red
Hat Enterprise Linux 4 Extended Life Cycle Support, Red Hat Enterprise
Linux 5.6 Long Life, Red Hat Enterprise Linux 5.9 Extended Update Support,
Red Hat Enterprise Linux 6.2 Advanced Update Support, and Red Hat
Enterprise Linux 6.4 Extended Update Support.
Red Hat Product Security has rated this update as having Important security
impact. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available from the CVE link in the
References section.
Details: The GNU Bourne Again shell (Bash) is a shell and command language
interpreter compatible with the Bourne shell (sh). Bash is the default
shell for Red Hat Enterprise Linux.
It was found that the fix for CVE-2014-6271 was incomplete, and Bash still
allowed certain characters to be injected into other environments via
specially crafted environment variables. An attacker could potentially use
this flaw to override or bypass environment restrictions to execute shell
commands. Certain services and applications allow remote unauthenticated
attackers to provide environment variables, allowing them to exploit this
issue. (CVE-2014-7169)
Applications which directly create bash functions as environment variables
need to be made aware of changes to the way names are handled by this
update. Note that certain services, screen sessions, and tmux sessions may
need to be restarted, and affected interactive users may need to re-login.
Installing these updated packages without restarting services will address
the vulnerability, but functionality may be impacted until affected
services are restarted. For more information see the Knowledgebase article
at https://access.redhat.com/articles/1200223
Note: Docker users are advised to use "yum update" within their containers,
and to commit the resulting changes.
For additional information on CVE-2014-6271 and CVE-2014-7169, refer to the
aforementioned Knowledgebase article.
All bash users are advised to upgrade to these updated packages, which
contain a backported patch to correct this issue.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
It was found that the fix for CVE-2014-6271 was incomplete, and Bash still allowed certain characters to be injected into other environments via specially crafted environment variables. An attacker could potentially use this flaw to override or bypass environment restrictions to execute shell commands. Certain services and applications allow remote unauthenticated attackers to provide environment variables, allowing them to exploit this issue.
5.1 ()
Affected products
Fixed
92 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 4AS-ELS:bash-0:3.0-27.el4.4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-ELS:bash-0:3.0-27.el4.4.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-ELS:bash-0:3.0-27.el4.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-ELS:bash-0:3.0-27.el4.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-ELS:bash-0:3.0-27.el4.4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-ELS:bash-0:3.0-27.el4.4.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-ELS:bash-0:3.0-27.el4.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-ELS:bash-0:3.0-27.el4.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.6.LL:bash-0:3.2-24.el5_6.2.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.6.LL:bash-0:3.2-24.el5_6.2.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.6.LL:bash-0:3.2-24.el5_6.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.6.LL:bash-0:3.2-24.el5_6.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.2.AUS:bash-doc-0:4.1.2-9.el6_2.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.2.AUS:bash-0:4.1.2-9.el6_2.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.2.AUS:bash-doc-0:4.1.2-9.el6_2.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
Threats
Exploit Status
CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Impact
Important
It was discovered that the fixed-sized redir_stack could be forced to overflow in the Bash parser, resulting in memory corruption, and possibly leading to arbitrary code execution when evaluating untrusted input that would not otherwise be run as code.
4.6 ()
Affected products
Fixed
92 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 4AS-ELS:bash-0:3.0-27.el4.4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-ELS:bash-0:3.0-27.el4.4.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-ELS:bash-0:3.0-27.el4.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-ELS:bash-0:3.0-27.el4.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-ELS:bash-0:3.0-27.el4.4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-ELS:bash-0:3.0-27.el4.4.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-ELS:bash-0:3.0-27.el4.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-ELS:bash-0:3.0-27.el4.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.6.LL:bash-0:3.2-24.el5_6.2.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.6.LL:bash-0:3.2-24.el5_6.2.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.6.LL:bash-0:3.2-24.el5_6.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.6.LL:bash-0:3.2-24.el5_6.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.2.AUS:bash-doc-0:4.1.2-9.el6_2.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.2.AUS:bash-0:4.1.2-9.el6_2.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.2.AUS:bash-doc-0:4.1.2-9.el6_2.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
An off-by-one error was discovered in the way Bash was handling deeply nested flow control constructs. Depending on the layout of the .bss segment, this could allow arbitrary execution of code that would not otherwise be executed by Bash.
4.6 ()
Affected products
Fixed
92 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 4AS-ELS:bash-0:3.0-27.el4.4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-ELS:bash-0:3.0-27.el4.4.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-ELS:bash-0:3.0-27.el4.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-ELS:bash-0:3.0-27.el4.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-ELS:bash-0:3.0-27.el4.4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-ELS:bash-0:3.0-27.el4.4.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-ELS:bash-0:3.0-27.el4.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-ELS:bash-0:3.0-27.el4.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.6.LL:bash-0:3.2-24.el5_6.2.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.6.LL:bash-0:3.2-24.el5_6.2.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.6.LL:bash-0:3.2-24.el5_6.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.6.LL:bash-0:3.2-24.el5_6.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.2.AUS:bash-doc-0:4.1.2-9.el6_2.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.2.AUS:bash-0:4.1.2-9.el6_2.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.2.AUS:bash-doc-0:4.1.2-9.el6_2.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
19 references
Acknowledgments
Red Hat Product Security
Florian Weimer
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "[Updated September 30, 2014]\nThis advisory has been updated with information on restarting system\nservices after applying this update. No changes have been made to the\noriginal packages.\n\nUpdated bash packages that fix one security issue are now available for Red\nHat Enterprise Linux 4 Extended Life Cycle Support, Red Hat Enterprise\nLinux 5.6 Long Life, Red Hat Enterprise Linux 5.9 Extended Update Support,\nRed Hat Enterprise Linux 6.2 Advanced Update Support, and Red Hat\nEnterprise Linux 6.4 Extended Update Support.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available from the CVE link in the\nReferences section.",
"title": "Topic"
},
{
"category": "general",
"text": "The GNU Bourne Again shell (Bash) is a shell and command language\ninterpreter compatible with the Bourne shell (sh). Bash is the default\nshell for Red Hat Enterprise Linux.\n\nIt was found that the fix for CVE-2014-6271 was incomplete, and Bash still\nallowed certain characters to be injected into other environments via\nspecially crafted environment variables. An attacker could potentially use\nthis flaw to override or bypass environment restrictions to execute shell\ncommands. Certain services and applications allow remote unauthenticated\nattackers to provide environment variables, allowing them to exploit this\nissue. (CVE-2014-7169)\n\nApplications which directly create bash functions as environment variables\nneed to be made aware of changes to the way names are handled by this\nupdate. Note that certain services, screen sessions, and tmux sessions may\nneed to be restarted, and affected interactive users may need to re-login.\nInstalling these updated packages without restarting services will address\nthe vulnerability, but functionality may be impacted until affected\nservices are restarted. For more information see the Knowledgebase article\nat https://access.redhat.com/articles/1200223\n\nNote: Docker users are advised to use \"yum update\" within their containers,\nand to commit the resulting changes.\n\nFor additional information on CVE-2014-6271 and CVE-2014-7169, refer to the\naforementioned Knowledgebase article.\n\nAll bash users are advised to upgrade to these updated packages, which\ncontain a backported patch to correct this issue.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2014:1311",
"url": "https://access.redhat.com/errata/RHSA-2014:1311"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/articles/1200223",
"url": "https://access.redhat.com/articles/1200223"
},
{
"category": "external",
"summary": "1146319",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146319"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1311.json"
}
],
"title": "Red Hat Security Advisory: bash security update",
"tracking": {
"current_release_date": "2024-11-14T16:26:16+00:00",
"generator": {
"date": "2024-11-14T16:26:16+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2014:1311",
"initial_release_date": "2014-09-26T17:58:08+00:00",
"revision_history": [
{
"date": "2014-09-26T17:58:08+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2014-09-30T15:08:45+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T16:26:16+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HPC Node EUS (v. 6.4)",
"product": {
"name": "Red Hat Enterprise Linux HPC Node EUS (v. 6.4)",
"product_id": "6ComputeNode-6.4.EUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_eus:6.4::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.4)",
"product": {
"name": "Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.4)",
"product_id": "6ComputeNode-optional-6.4.EUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_eus:6.4::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server EUS (v. 6.4)",
"product": {
"name": "Red Hat Enterprise Linux Server EUS (v. 6.4)",
"product_id": "6Server-6.4.EUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_eus:6.4::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional EUS (v. 6.4)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional EUS (v. 6.4)",
"product_id": "6Server-optional-6.4.EUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_eus:6.4::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server AUS (v. 6.2)",
"product": {
"name": "Red Hat Enterprise Linux Server AUS (v. 6.2)",
"product_id": "6Server-6.2.AUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_mission_critical:6.2::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional AUS (v. 6.2)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional AUS (v. 6.2)",
"product_id": "6Server-optional-6.2.AUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_mission_critical:6.2::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Long Life (v. 5.6 server)",
"product": {
"name": "Red Hat Enterprise Linux Long Life (v. 5.6 server)",
"product_id": "5Server-5.6.LL",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_mission_critical:5.6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux EUS (v. 5.9 server)",
"product": {
"name": "Red Hat Enterprise Linux EUS (v. 5.9 server)",
"product_id": "5Server-5.9.EUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_eus:5.9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS (v. 4 ELS)",
"product": {
"name": "Red Hat Enterprise Linux AS (v. 4 ELS)",
"product_id": "4AS-ELS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_els:4::as"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES (v. 4 ELS)",
"product": {
"name": "Red Hat Enterprise Linux ES (v. 4 ELS)",
"product_id": "4ES-ELS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_els:4::es"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "bash-0:4.1.2-15.el6_4.2.src",
"product": {
"name": "bash-0:4.1.2-15.el6_4.2.src",
"product_id": "bash-0:4.1.2-15.el6_4.2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@4.1.2-15.el6_4.2?arch=src"
}
}
},
{
"category": "product_version",
"name": "bash-0:4.1.2-9.el6_2.2.src",
"product": {
"name": "bash-0:4.1.2-9.el6_2.2.src",
"product_id": "bash-0:4.1.2-9.el6_2.2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@4.1.2-9.el6_2.2?arch=src"
}
}
},
{
"category": "product_version",
"name": "bash-0:3.2-24.el5_6.2.src",
"product": {
"name": "bash-0:3.2-24.el5_6.2.src",
"product_id": "bash-0:3.2-24.el5_6.2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.2-24.el5_6.2?arch=src"
}
}
},
{
"category": "product_version",
"name": "bash-0:3.2-32.el5_9.3.src",
"product": {
"name": "bash-0:3.2-32.el5_9.3.src",
"product_id": "bash-0:3.2-32.el5_9.3.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.2-32.el5_9.3?arch=src"
}
}
},
{
"category": "product_version",
"name": "bash-0:3.0-27.el4.4.src",
"product": {
"name": "bash-0:3.0-27.el4.4.src",
"product_id": "bash-0:3.0-27.el4.4.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.0-27.el4.4?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"product": {
"name": "bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"product_id": "bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@4.1.2-15.el6_4.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "bash-doc-0:4.1.2-15.el6_4.2.s390x",
"product": {
"name": "bash-doc-0:4.1.2-15.el6_4.2.s390x",
"product_id": "bash-doc-0:4.1.2-15.el6_4.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-doc@4.1.2-15.el6_4.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "bash-0:4.1.2-15.el6_4.2.s390x",
"product": {
"name": "bash-0:4.1.2-15.el6_4.2.s390x",
"product_id": "bash-0:4.1.2-15.el6_4.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@4.1.2-15.el6_4.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "bash-debuginfo-0:3.2-32.el5_9.3.s390x",
"product": {
"name": "bash-debuginfo-0:3.2-32.el5_9.3.s390x",
"product_id": "bash-debuginfo-0:3.2-32.el5_9.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@3.2-32.el5_9.3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "bash-0:3.2-32.el5_9.3.s390x",
"product": {
"name": "bash-0:3.2-32.el5_9.3.s390x",
"product_id": "bash-0:3.2-32.el5_9.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.2-32.el5_9.3?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"product": {
"name": "bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"product_id": "bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@4.1.2-15.el6_4.2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "bash-doc-0:4.1.2-15.el6_4.2.i686",
"product": {
"name": "bash-doc-0:4.1.2-15.el6_4.2.i686",
"product_id": "bash-doc-0:4.1.2-15.el6_4.2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-doc@4.1.2-15.el6_4.2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "bash-0:4.1.2-15.el6_4.2.i686",
"product": {
"name": "bash-0:4.1.2-15.el6_4.2.i686",
"product_id": "bash-0:4.1.2-15.el6_4.2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@4.1.2-15.el6_4.2?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"product": {
"name": "bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"product_id": "bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@4.1.2-15.el6_4.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"product": {
"name": "bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"product_id": "bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-doc@4.1.2-15.el6_4.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bash-0:4.1.2-15.el6_4.2.x86_64",
"product": {
"name": "bash-0:4.1.2-15.el6_4.2.x86_64",
"product_id": "bash-0:4.1.2-15.el6_4.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@4.1.2-15.el6_4.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"product": {
"name": "bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"product_id": "bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@4.1.2-9.el6_2.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bash-doc-0:4.1.2-9.el6_2.2.x86_64",
"product": {
"name": "bash-doc-0:4.1.2-9.el6_2.2.x86_64",
"product_id": "bash-doc-0:4.1.2-9.el6_2.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-doc@4.1.2-9.el6_2.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bash-0:4.1.2-9.el6_2.2.x86_64",
"product": {
"name": "bash-0:4.1.2-9.el6_2.2.x86_64",
"product_id": "bash-0:4.1.2-9.el6_2.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@4.1.2-9.el6_2.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bash-0:3.2-24.el5_6.2.x86_64",
"product": {
"name": "bash-0:3.2-24.el5_6.2.x86_64",
"product_id": "bash-0:3.2-24.el5_6.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.2-24.el5_6.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bash-debuginfo-0:3.2-24.el5_6.2.x86_64",
"product": {
"name": "bash-debuginfo-0:3.2-24.el5_6.2.x86_64",
"product_id": "bash-debuginfo-0:3.2-24.el5_6.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@3.2-24.el5_6.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bash-debuginfo-0:3.2-32.el5_9.3.x86_64",
"product": {
"name": "bash-debuginfo-0:3.2-32.el5_9.3.x86_64",
"product_id": "bash-debuginfo-0:3.2-32.el5_9.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@3.2-32.el5_9.3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bash-0:3.2-32.el5_9.3.x86_64",
"product": {
"name": "bash-0:3.2-32.el5_9.3.x86_64",
"product_id": "bash-0:3.2-32.el5_9.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.2-32.el5_9.3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bash-debuginfo-0:3.0-27.el4.4.x86_64",
"product": {
"name": "bash-debuginfo-0:3.0-27.el4.4.x86_64",
"product_id": "bash-debuginfo-0:3.0-27.el4.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@3.0-27.el4.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bash-0:3.0-27.el4.4.x86_64",
"product": {
"name": "bash-0:3.0-27.el4.4.x86_64",
"product_id": "bash-0:3.0-27.el4.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.0-27.el4.4?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"product": {
"name": "bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"product_id": "bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@4.1.2-15.el6_4.2?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"product": {
"name": "bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"product_id": "bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-doc@4.1.2-15.el6_4.2?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "bash-0:4.1.2-15.el6_4.2.ppc64",
"product": {
"name": "bash-0:4.1.2-15.el6_4.2.ppc64",
"product_id": "bash-0:4.1.2-15.el6_4.2.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@4.1.2-15.el6_4.2?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "bash-0:3.2-24.el5_6.2.ia64",
"product": {
"name": "bash-0:3.2-24.el5_6.2.ia64",
"product_id": "bash-0:3.2-24.el5_6.2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.2-24.el5_6.2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "bash-debuginfo-0:3.2-24.el5_6.2.ia64",
"product": {
"name": "bash-debuginfo-0:3.2-24.el5_6.2.ia64",
"product_id": "bash-debuginfo-0:3.2-24.el5_6.2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@3.2-24.el5_6.2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "bash-debuginfo-0:3.2-32.el5_9.3.ia64",
"product": {
"name": "bash-debuginfo-0:3.2-32.el5_9.3.ia64",
"product_id": "bash-debuginfo-0:3.2-32.el5_9.3.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@3.2-32.el5_9.3?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "bash-0:3.2-32.el5_9.3.ia64",
"product": {
"name": "bash-0:3.2-32.el5_9.3.ia64",
"product_id": "bash-0:3.2-32.el5_9.3.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.2-32.el5_9.3?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "bash-debuginfo-0:3.0-27.el4.4.ia64",
"product": {
"name": "bash-debuginfo-0:3.0-27.el4.4.ia64",
"product_id": "bash-debuginfo-0:3.0-27.el4.4.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@3.0-27.el4.4?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "bash-0:3.0-27.el4.4.ia64",
"product": {
"name": "bash-0:3.0-27.el4.4.ia64",
"product_id": "bash-0:3.0-27.el4.4.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.0-27.el4.4?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "bash-0:3.2-24.el5_6.2.i386",
"product": {
"name": "bash-0:3.2-24.el5_6.2.i386",
"product_id": "bash-0:3.2-24.el5_6.2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.2-24.el5_6.2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "bash-debuginfo-0:3.2-24.el5_6.2.i386",
"product": {
"name": "bash-debuginfo-0:3.2-24.el5_6.2.i386",
"product_id": "bash-debuginfo-0:3.2-24.el5_6.2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@3.2-24.el5_6.2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "bash-debuginfo-0:3.2-32.el5_9.3.i386",
"product": {
"name": "bash-debuginfo-0:3.2-32.el5_9.3.i386",
"product_id": "bash-debuginfo-0:3.2-32.el5_9.3.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@3.2-32.el5_9.3?arch=i386"
}
}
},
{
"category": "product_version",
"name": "bash-0:3.2-32.el5_9.3.i386",
"product": {
"name": "bash-0:3.2-32.el5_9.3.i386",
"product_id": "bash-0:3.2-32.el5_9.3.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.2-32.el5_9.3?arch=i386"
}
}
},
{
"category": "product_version",
"name": "bash-debuginfo-0:3.0-27.el4.4.i386",
"product": {
"name": "bash-debuginfo-0:3.0-27.el4.4.i386",
"product_id": "bash-debuginfo-0:3.0-27.el4.4.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@3.0-27.el4.4?arch=i386"
}
}
},
{
"category": "product_version",
"name": "bash-0:3.0-27.el4.4.i386",
"product": {
"name": "bash-0:3.0-27.el4.4.i386",
"product_id": "bash-0:3.0-27.el4.4.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.0-27.el4.4?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "bash-debuginfo-0:3.2-32.el5_9.3.ppc",
"product": {
"name": "bash-debuginfo-0:3.2-32.el5_9.3.ppc",
"product_id": "bash-debuginfo-0:3.2-32.el5_9.3.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@3.2-32.el5_9.3?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "bash-0:3.2-32.el5_9.3.ppc",
"product": {
"name": "bash-0:3.2-32.el5_9.3.ppc",
"product_id": "bash-0:3.2-32.el5_9.3.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.2-32.el5_9.3?arch=ppc"
}
}
}
],
"category": "architecture",
"name": "ppc"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.0-27.el4.4.i386 as a component of Red Hat Enterprise Linux AS (v. 4 ELS)",
"product_id": "4AS-ELS:bash-0:3.0-27.el4.4.i386"
},
"product_reference": "bash-0:3.0-27.el4.4.i386",
"relates_to_product_reference": "4AS-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.0-27.el4.4.ia64 as a component of Red Hat Enterprise Linux AS (v. 4 ELS)",
"product_id": "4AS-ELS:bash-0:3.0-27.el4.4.ia64"
},
"product_reference": "bash-0:3.0-27.el4.4.ia64",
"relates_to_product_reference": "4AS-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.0-27.el4.4.src as a component of Red Hat Enterprise Linux AS (v. 4 ELS)",
"product_id": "4AS-ELS:bash-0:3.0-27.el4.4.src"
},
"product_reference": "bash-0:3.0-27.el4.4.src",
"relates_to_product_reference": "4AS-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.0-27.el4.4.x86_64 as a component of Red Hat Enterprise Linux AS (v. 4 ELS)",
"product_id": "4AS-ELS:bash-0:3.0-27.el4.4.x86_64"
},
"product_reference": "bash-0:3.0-27.el4.4.x86_64",
"relates_to_product_reference": "4AS-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.0-27.el4.4.i386 as a component of Red Hat Enterprise Linux AS (v. 4 ELS)",
"product_id": "4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.i386"
},
"product_reference": "bash-debuginfo-0:3.0-27.el4.4.i386",
"relates_to_product_reference": "4AS-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.0-27.el4.4.ia64 as a component of Red Hat Enterprise Linux AS (v. 4 ELS)",
"product_id": "4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.ia64"
},
"product_reference": "bash-debuginfo-0:3.0-27.el4.4.ia64",
"relates_to_product_reference": "4AS-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.0-27.el4.4.x86_64 as a component of Red Hat Enterprise Linux AS (v. 4 ELS)",
"product_id": "4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64"
},
"product_reference": "bash-debuginfo-0:3.0-27.el4.4.x86_64",
"relates_to_product_reference": "4AS-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.0-27.el4.4.i386 as a component of Red Hat Enterprise Linux ES (v. 4 ELS)",
"product_id": "4ES-ELS:bash-0:3.0-27.el4.4.i386"
},
"product_reference": "bash-0:3.0-27.el4.4.i386",
"relates_to_product_reference": "4ES-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.0-27.el4.4.ia64 as a component of Red Hat Enterprise Linux ES (v. 4 ELS)",
"product_id": "4ES-ELS:bash-0:3.0-27.el4.4.ia64"
},
"product_reference": "bash-0:3.0-27.el4.4.ia64",
"relates_to_product_reference": "4ES-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.0-27.el4.4.src as a component of Red Hat Enterprise Linux ES (v. 4 ELS)",
"product_id": "4ES-ELS:bash-0:3.0-27.el4.4.src"
},
"product_reference": "bash-0:3.0-27.el4.4.src",
"relates_to_product_reference": "4ES-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.0-27.el4.4.x86_64 as a component of Red Hat Enterprise Linux ES (v. 4 ELS)",
"product_id": "4ES-ELS:bash-0:3.0-27.el4.4.x86_64"
},
"product_reference": "bash-0:3.0-27.el4.4.x86_64",
"relates_to_product_reference": "4ES-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.0-27.el4.4.i386 as a component of Red Hat Enterprise Linux ES (v. 4 ELS)",
"product_id": "4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.i386"
},
"product_reference": "bash-debuginfo-0:3.0-27.el4.4.i386",
"relates_to_product_reference": "4ES-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.0-27.el4.4.ia64 as a component of Red Hat Enterprise Linux ES (v. 4 ELS)",
"product_id": "4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.ia64"
},
"product_reference": "bash-debuginfo-0:3.0-27.el4.4.ia64",
"relates_to_product_reference": "4ES-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.0-27.el4.4.x86_64 as a component of Red Hat Enterprise Linux ES (v. 4 ELS)",
"product_id": "4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64"
},
"product_reference": "bash-debuginfo-0:3.0-27.el4.4.x86_64",
"relates_to_product_reference": "4ES-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-24.el5_6.2.i386 as a component of Red Hat Enterprise Linux Long Life (v. 5.6 server)",
"product_id": "5Server-5.6.LL:bash-0:3.2-24.el5_6.2.i386"
},
"product_reference": "bash-0:3.2-24.el5_6.2.i386",
"relates_to_product_reference": "5Server-5.6.LL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-24.el5_6.2.ia64 as a component of Red Hat Enterprise Linux Long Life (v. 5.6 server)",
"product_id": "5Server-5.6.LL:bash-0:3.2-24.el5_6.2.ia64"
},
"product_reference": "bash-0:3.2-24.el5_6.2.ia64",
"relates_to_product_reference": "5Server-5.6.LL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-24.el5_6.2.src as a component of Red Hat Enterprise Linux Long Life (v. 5.6 server)",
"product_id": "5Server-5.6.LL:bash-0:3.2-24.el5_6.2.src"
},
"product_reference": "bash-0:3.2-24.el5_6.2.src",
"relates_to_product_reference": "5Server-5.6.LL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-24.el5_6.2.x86_64 as a component of Red Hat Enterprise Linux Long Life (v. 5.6 server)",
"product_id": "5Server-5.6.LL:bash-0:3.2-24.el5_6.2.x86_64"
},
"product_reference": "bash-0:3.2-24.el5_6.2.x86_64",
"relates_to_product_reference": "5Server-5.6.LL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.2-24.el5_6.2.i386 as a component of Red Hat Enterprise Linux Long Life (v. 5.6 server)",
"product_id": "5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.i386"
},
"product_reference": "bash-debuginfo-0:3.2-24.el5_6.2.i386",
"relates_to_product_reference": "5Server-5.6.LL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.2-24.el5_6.2.ia64 as a component of Red Hat Enterprise Linux Long Life (v. 5.6 server)",
"product_id": "5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.ia64"
},
"product_reference": "bash-debuginfo-0:3.2-24.el5_6.2.ia64",
"relates_to_product_reference": "5Server-5.6.LL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.2-24.el5_6.2.x86_64 as a component of Red Hat Enterprise Linux Long Life (v. 5.6 server)",
"product_id": "5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.x86_64"
},
"product_reference": "bash-debuginfo-0:3.2-24.el5_6.2.x86_64",
"relates_to_product_reference": "5Server-5.6.LL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-32.el5_9.3.i386 as a component of Red Hat Enterprise Linux EUS (v. 5.9 server)",
"product_id": "5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.i386"
},
"product_reference": "bash-0:3.2-32.el5_9.3.i386",
"relates_to_product_reference": "5Server-5.9.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-32.el5_9.3.ia64 as a component of Red Hat Enterprise Linux EUS (v. 5.9 server)",
"product_id": "5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ia64"
},
"product_reference": "bash-0:3.2-32.el5_9.3.ia64",
"relates_to_product_reference": "5Server-5.9.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-32.el5_9.3.ppc as a component of Red Hat Enterprise Linux EUS (v. 5.9 server)",
"product_id": "5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ppc"
},
"product_reference": "bash-0:3.2-32.el5_9.3.ppc",
"relates_to_product_reference": "5Server-5.9.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-32.el5_9.3.s390x as a component of Red Hat Enterprise Linux EUS (v. 5.9 server)",
"product_id": "5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.s390x"
},
"product_reference": "bash-0:3.2-32.el5_9.3.s390x",
"relates_to_product_reference": "5Server-5.9.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-32.el5_9.3.src as a component of Red Hat Enterprise Linux EUS (v. 5.9 server)",
"product_id": "5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.src"
},
"product_reference": "bash-0:3.2-32.el5_9.3.src",
"relates_to_product_reference": "5Server-5.9.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-32.el5_9.3.x86_64 as a component of Red Hat Enterprise Linux EUS (v. 5.9 server)",
"product_id": "5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.x86_64"
},
"product_reference": "bash-0:3.2-32.el5_9.3.x86_64",
"relates_to_product_reference": "5Server-5.9.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.2-32.el5_9.3.i386 as a component of Red Hat Enterprise Linux EUS (v. 5.9 server)",
"product_id": "5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.i386"
},
"product_reference": "bash-debuginfo-0:3.2-32.el5_9.3.i386",
"relates_to_product_reference": "5Server-5.9.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.2-32.el5_9.3.ia64 as a component of Red Hat Enterprise Linux EUS (v. 5.9 server)",
"product_id": "5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ia64"
},
"product_reference": "bash-debuginfo-0:3.2-32.el5_9.3.ia64",
"relates_to_product_reference": "5Server-5.9.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.2-32.el5_9.3.ppc as a component of Red Hat Enterprise Linux EUS (v. 5.9 server)",
"product_id": "5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ppc"
},
"product_reference": "bash-debuginfo-0:3.2-32.el5_9.3.ppc",
"relates_to_product_reference": "5Server-5.9.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.2-32.el5_9.3.s390x as a component of Red Hat Enterprise Linux EUS (v. 5.9 server)",
"product_id": "5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.s390x"
},
"product_reference": "bash-debuginfo-0:3.2-32.el5_9.3.s390x",
"relates_to_product_reference": "5Server-5.9.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.2-32.el5_9.3.x86_64 as a component of Red Hat Enterprise Linux EUS (v. 5.9 server)",
"product_id": "5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.x86_64"
},
"product_reference": "bash-debuginfo-0:3.2-32.el5_9.3.x86_64",
"relates_to_product_reference": "5Server-5.9.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_4.2.i686 as a component of Red Hat Enterprise Linux HPC Node EUS (v. 6.4)",
"product_id": "6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686"
},
"product_reference": "bash-0:4.1.2-15.el6_4.2.i686",
"relates_to_product_reference": "6ComputeNode-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_4.2.ppc64 as a component of Red Hat Enterprise Linux HPC Node EUS (v. 6.4)",
"product_id": "6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64"
},
"product_reference": "bash-0:4.1.2-15.el6_4.2.ppc64",
"relates_to_product_reference": "6ComputeNode-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_4.2.s390x as a component of Red Hat Enterprise Linux HPC Node EUS (v. 6.4)",
"product_id": "6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x"
},
"product_reference": "bash-0:4.1.2-15.el6_4.2.s390x",
"relates_to_product_reference": "6ComputeNode-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_4.2.src as a component of Red Hat Enterprise Linux HPC Node EUS (v. 6.4)",
"product_id": "6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src"
},
"product_reference": "bash-0:4.1.2-15.el6_4.2.src",
"relates_to_product_reference": "6ComputeNode-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_4.2.x86_64 as a component of Red Hat Enterprise Linux HPC Node EUS (v. 6.4)",
"product_id": "6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64"
},
"product_reference": "bash-0:4.1.2-15.el6_4.2.x86_64",
"relates_to_product_reference": "6ComputeNode-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_4.2.i686 as a component of Red Hat Enterprise Linux HPC Node EUS (v. 6.4)",
"product_id": "6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"relates_to_product_reference": "6ComputeNode-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64 as a component of Red Hat Enterprise Linux HPC Node EUS (v. 6.4)",
"product_id": "6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"relates_to_product_reference": "6ComputeNode-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_4.2.s390x as a component of Red Hat Enterprise Linux HPC Node EUS (v. 6.4)",
"product_id": "6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"relates_to_product_reference": "6ComputeNode-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64 as a component of Red Hat Enterprise Linux HPC Node EUS (v. 6.4)",
"product_id": "6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"relates_to_product_reference": "6ComputeNode-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_4.2.i686 as a component of Red Hat Enterprise Linux HPC Node EUS (v. 6.4)",
"product_id": "6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_4.2.i686",
"relates_to_product_reference": "6ComputeNode-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_4.2.ppc64 as a component of Red Hat Enterprise Linux HPC Node EUS (v. 6.4)",
"product_id": "6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"relates_to_product_reference": "6ComputeNode-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_4.2.s390x as a component of Red Hat Enterprise Linux HPC Node EUS (v. 6.4)",
"product_id": "6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_4.2.s390x",
"relates_to_product_reference": "6ComputeNode-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_4.2.x86_64 as a component of Red Hat Enterprise Linux HPC Node EUS (v. 6.4)",
"product_id": "6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"relates_to_product_reference": "6ComputeNode-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_4.2.i686 as a component of Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.4)",
"product_id": "6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686"
},
"product_reference": "bash-0:4.1.2-15.el6_4.2.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_4.2.ppc64 as a component of Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.4)",
"product_id": "6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64"
},
"product_reference": "bash-0:4.1.2-15.el6_4.2.ppc64",
"relates_to_product_reference": "6ComputeNode-optional-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_4.2.s390x as a component of Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.4)",
"product_id": "6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x"
},
"product_reference": "bash-0:4.1.2-15.el6_4.2.s390x",
"relates_to_product_reference": "6ComputeNode-optional-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_4.2.src as a component of Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.4)",
"product_id": "6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src"
},
"product_reference": "bash-0:4.1.2-15.el6_4.2.src",
"relates_to_product_reference": "6ComputeNode-optional-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_4.2.x86_64 as a component of Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.4)",
"product_id": "6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64"
},
"product_reference": "bash-0:4.1.2-15.el6_4.2.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_4.2.i686 as a component of Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.4)",
"product_id": "6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64 as a component of Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.4)",
"product_id": "6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"relates_to_product_reference": "6ComputeNode-optional-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_4.2.s390x as a component of Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.4)",
"product_id": "6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"relates_to_product_reference": "6ComputeNode-optional-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64 as a component of Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.4)",
"product_id": "6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_4.2.i686 as a component of Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.4)",
"product_id": "6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_4.2.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_4.2.ppc64 as a component of Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.4)",
"product_id": "6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"relates_to_product_reference": "6ComputeNode-optional-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_4.2.s390x as a component of Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.4)",
"product_id": "6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_4.2.s390x",
"relates_to_product_reference": "6ComputeNode-optional-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_4.2.x86_64 as a component of Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.4)",
"product_id": "6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-9.el6_2.2.src as a component of Red Hat Enterprise Linux Server AUS (v. 6.2)",
"product_id": "6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src"
},
"product_reference": "bash-0:4.1.2-9.el6_2.2.src",
"relates_to_product_reference": "6Server-6.2.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-9.el6_2.2.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.2)",
"product_id": "6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.x86_64"
},
"product_reference": "bash-0:4.1.2-9.el6_2.2.x86_64",
"relates_to_product_reference": "6Server-6.2.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.2)",
"product_id": "6Server-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64"
},
"product_reference": "bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"relates_to_product_reference": "6Server-6.2.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-9.el6_2.2.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.2)",
"product_id": "6Server-6.2.AUS:bash-doc-0:4.1.2-9.el6_2.2.x86_64"
},
"product_reference": "bash-doc-0:4.1.2-9.el6_2.2.x86_64",
"relates_to_product_reference": "6Server-6.2.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_4.2.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 6.4)",
"product_id": "6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686"
},
"product_reference": "bash-0:4.1.2-15.el6_4.2.i686",
"relates_to_product_reference": "6Server-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_4.2.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.4)",
"product_id": "6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64"
},
"product_reference": "bash-0:4.1.2-15.el6_4.2.ppc64",
"relates_to_product_reference": "6Server-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_4.2.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 6.4)",
"product_id": "6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x"
},
"product_reference": "bash-0:4.1.2-15.el6_4.2.s390x",
"relates_to_product_reference": "6Server-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_4.2.src as a component of Red Hat Enterprise Linux Server EUS (v. 6.4)",
"product_id": "6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src"
},
"product_reference": "bash-0:4.1.2-15.el6_4.2.src",
"relates_to_product_reference": "6Server-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_4.2.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.4)",
"product_id": "6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64"
},
"product_reference": "bash-0:4.1.2-15.el6_4.2.x86_64",
"relates_to_product_reference": "6Server-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_4.2.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 6.4)",
"product_id": "6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"relates_to_product_reference": "6Server-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.4)",
"product_id": "6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"relates_to_product_reference": "6Server-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_4.2.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 6.4)",
"product_id": "6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"relates_to_product_reference": "6Server-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.4)",
"product_id": "6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"relates_to_product_reference": "6Server-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_4.2.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 6.4)",
"product_id": "6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_4.2.i686",
"relates_to_product_reference": "6Server-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_4.2.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.4)",
"product_id": "6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"relates_to_product_reference": "6Server-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_4.2.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 6.4)",
"product_id": "6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_4.2.s390x",
"relates_to_product_reference": "6Server-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_4.2.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.4)",
"product_id": "6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"relates_to_product_reference": "6Server-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-9.el6_2.2.src as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.2)",
"product_id": "6Server-optional-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src"
},
"product_reference": "bash-0:4.1.2-9.el6_2.2.src",
"relates_to_product_reference": "6Server-optional-6.2.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-9.el6_2.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.2)",
"product_id": "6Server-optional-6.2.AUS:bash-0:4.1.2-9.el6_2.2.x86_64"
},
"product_reference": "bash-0:4.1.2-9.el6_2.2.x86_64",
"relates_to_product_reference": "6Server-optional-6.2.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.2)",
"product_id": "6Server-optional-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64"
},
"product_reference": "bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"relates_to_product_reference": "6Server-optional-6.2.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-9.el6_2.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.2)",
"product_id": "6Server-optional-6.2.AUS:bash-doc-0:4.1.2-9.el6_2.2.x86_64"
},
"product_reference": "bash-doc-0:4.1.2-9.el6_2.2.x86_64",
"relates_to_product_reference": "6Server-optional-6.2.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_4.2.i686 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 6.4)",
"product_id": "6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686"
},
"product_reference": "bash-0:4.1.2-15.el6_4.2.i686",
"relates_to_product_reference": "6Server-optional-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_4.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 6.4)",
"product_id": "6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64"
},
"product_reference": "bash-0:4.1.2-15.el6_4.2.ppc64",
"relates_to_product_reference": "6Server-optional-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_4.2.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 6.4)",
"product_id": "6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x"
},
"product_reference": "bash-0:4.1.2-15.el6_4.2.s390x",
"relates_to_product_reference": "6Server-optional-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_4.2.src as a component of Red Hat Enterprise Linux Server Optional EUS (v. 6.4)",
"product_id": "6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src"
},
"product_reference": "bash-0:4.1.2-15.el6_4.2.src",
"relates_to_product_reference": "6Server-optional-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_4.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 6.4)",
"product_id": "6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64"
},
"product_reference": "bash-0:4.1.2-15.el6_4.2.x86_64",
"relates_to_product_reference": "6Server-optional-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_4.2.i686 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 6.4)",
"product_id": "6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"relates_to_product_reference": "6Server-optional-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 6.4)",
"product_id": "6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"relates_to_product_reference": "6Server-optional-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_4.2.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 6.4)",
"product_id": "6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"relates_to_product_reference": "6Server-optional-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 6.4)",
"product_id": "6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"relates_to_product_reference": "6Server-optional-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_4.2.i686 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 6.4)",
"product_id": "6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_4.2.i686",
"relates_to_product_reference": "6Server-optional-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_4.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 6.4)",
"product_id": "6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"relates_to_product_reference": "6Server-optional-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_4.2.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 6.4)",
"product_id": "6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_4.2.s390x",
"relates_to_product_reference": "6Server-optional-6.4.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_4.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 6.4)",
"product_id": "6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"relates_to_product_reference": "6Server-optional-6.4.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2014-7169",
"cwe": {
"id": "CWE-228",
"name": "Improper Handling of Syntactically Invalid Structure"
},
"discovery_date": "2014-09-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1146319"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2014-6271 was incomplete, and Bash still allowed certain characters to be injected into other environments via specially crafted environment variables. An attacker could potentially use this flaw to override or bypass environment restrictions to execute shell commands. Certain services and applications allow remote unauthenticated attackers to provide environment variables, allowing them to exploit this issue.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bash: code execution via specially-crafted environment (Incomplete fix for CVE-2014-6271)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-ELS:bash-0:3.0-27.el4.4.i386",
"4AS-ELS:bash-0:3.0-27.el4.4.ia64",
"4AS-ELS:bash-0:3.0-27.el4.4.src",
"4AS-ELS:bash-0:3.0-27.el4.4.x86_64",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.i386",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.ia64",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64",
"4ES-ELS:bash-0:3.0-27.el4.4.i386",
"4ES-ELS:bash-0:3.0-27.el4.4.ia64",
"4ES-ELS:bash-0:3.0-27.el4.4.src",
"4ES-ELS:bash-0:3.0-27.el4.4.x86_64",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.i386",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.ia64",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.i386",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.ia64",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.src",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.x86_64",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.i386",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.ia64",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.x86_64",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.i386",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ia64",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ppc",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.s390x",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.src",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.x86_64",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.i386",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ia64",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ppc",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.s390x",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.x86_64",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src",
"6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.2.AUS:bash-doc-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src",
"6Server-optional-6.2.AUS:bash-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.2.AUS:bash-doc-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-7169"
},
{
"category": "external",
"summary": "RHBZ#1146319",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146319"
},
{
"category": "external",
"summary": "RHSB-shellshock",
"url": "https://access.redhat.com/security/vulnerabilities/shellshock"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-7169",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-7169"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7169",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7169"
},
{
"category": "external",
"summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
}
],
"release_date": "2014-09-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-09-26T17:58:08+00:00",
"details": "Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the \nRed Hat Network to apply this update are available at \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"4AS-ELS:bash-0:3.0-27.el4.4.i386",
"4AS-ELS:bash-0:3.0-27.el4.4.ia64",
"4AS-ELS:bash-0:3.0-27.el4.4.src",
"4AS-ELS:bash-0:3.0-27.el4.4.x86_64",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.i386",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.ia64",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64",
"4ES-ELS:bash-0:3.0-27.el4.4.i386",
"4ES-ELS:bash-0:3.0-27.el4.4.ia64",
"4ES-ELS:bash-0:3.0-27.el4.4.src",
"4ES-ELS:bash-0:3.0-27.el4.4.x86_64",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.i386",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.ia64",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.i386",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.ia64",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.src",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.x86_64",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.i386",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.ia64",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.x86_64",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.i386",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ia64",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ppc",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.s390x",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.src",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.x86_64",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.i386",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ia64",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ppc",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.s390x",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.x86_64",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src",
"6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.2.AUS:bash-doc-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src",
"6Server-optional-6.2.AUS:bash-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.2.AUS:bash-doc-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1311"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-ELS:bash-0:3.0-27.el4.4.i386",
"4AS-ELS:bash-0:3.0-27.el4.4.ia64",
"4AS-ELS:bash-0:3.0-27.el4.4.src",
"4AS-ELS:bash-0:3.0-27.el4.4.x86_64",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.i386",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.ia64",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64",
"4ES-ELS:bash-0:3.0-27.el4.4.i386",
"4ES-ELS:bash-0:3.0-27.el4.4.ia64",
"4ES-ELS:bash-0:3.0-27.el4.4.src",
"4ES-ELS:bash-0:3.0-27.el4.4.x86_64",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.i386",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.ia64",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.i386",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.ia64",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.src",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.x86_64",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.i386",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.ia64",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.x86_64",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.i386",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ia64",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ppc",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.s390x",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.src",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.x86_64",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.i386",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ia64",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ppc",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.s390x",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.x86_64",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src",
"6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.2.AUS:bash-doc-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src",
"6Server-optional-6.2.AUS:bash-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.2.AUS:bash-doc-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64"
]
}
],
"threats": [
{
"category": "exploit_status",
"date": "2022-01-28T00:00:00+00:00",
"details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
},
{
"category": "impact",
"details": "Important"
}
],
"title": "bash: code execution via specially-crafted environment (Incomplete fix for CVE-2014-6271)"
},
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-7186",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2014-09-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1146791"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the fixed-sized redir_stack could be forced to overflow in the Bash parser, resulting in memory corruption, and possibly leading to arbitrary code execution when evaluating untrusted input that would not otherwise be run as code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bash: parser can allow out-of-bounds memory access while handling redir_stack",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A patch for this issue was applied to the bash packages in Red Hat Enterprise Linux via RHSA-2014:1306, RHSA-2014:1311, and RHSA-2014:1312. The errata do not mention the CVE in the description, as the CVE was only assigned after those updates were released.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-ELS:bash-0:3.0-27.el4.4.i386",
"4AS-ELS:bash-0:3.0-27.el4.4.ia64",
"4AS-ELS:bash-0:3.0-27.el4.4.src",
"4AS-ELS:bash-0:3.0-27.el4.4.x86_64",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.i386",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.ia64",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64",
"4ES-ELS:bash-0:3.0-27.el4.4.i386",
"4ES-ELS:bash-0:3.0-27.el4.4.ia64",
"4ES-ELS:bash-0:3.0-27.el4.4.src",
"4ES-ELS:bash-0:3.0-27.el4.4.x86_64",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.i386",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.ia64",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.i386",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.ia64",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.src",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.x86_64",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.i386",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.ia64",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.x86_64",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.i386",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ia64",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ppc",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.s390x",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.src",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.x86_64",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.i386",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ia64",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ppc",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.s390x",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.x86_64",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src",
"6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.2.AUS:bash-doc-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src",
"6Server-optional-6.2.AUS:bash-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.2.AUS:bash-doc-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-7186"
},
{
"category": "external",
"summary": "RHBZ#1146791",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146791"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-7186",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-7186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7186"
}
],
"release_date": "2014-09-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-09-26T17:58:08+00:00",
"details": "Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the \nRed Hat Network to apply this update are available at \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"4AS-ELS:bash-0:3.0-27.el4.4.i386",
"4AS-ELS:bash-0:3.0-27.el4.4.ia64",
"4AS-ELS:bash-0:3.0-27.el4.4.src",
"4AS-ELS:bash-0:3.0-27.el4.4.x86_64",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.i386",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.ia64",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64",
"4ES-ELS:bash-0:3.0-27.el4.4.i386",
"4ES-ELS:bash-0:3.0-27.el4.4.ia64",
"4ES-ELS:bash-0:3.0-27.el4.4.src",
"4ES-ELS:bash-0:3.0-27.el4.4.x86_64",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.i386",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.ia64",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.i386",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.ia64",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.src",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.x86_64",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.i386",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.ia64",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.x86_64",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.i386",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ia64",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ppc",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.s390x",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.src",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.x86_64",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.i386",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ia64",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ppc",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.s390x",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.x86_64",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src",
"6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.2.AUS:bash-doc-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src",
"6Server-optional-6.2.AUS:bash-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.2.AUS:bash-doc-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1311"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.6,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-ELS:bash-0:3.0-27.el4.4.i386",
"4AS-ELS:bash-0:3.0-27.el4.4.ia64",
"4AS-ELS:bash-0:3.0-27.el4.4.src",
"4AS-ELS:bash-0:3.0-27.el4.4.x86_64",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.i386",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.ia64",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64",
"4ES-ELS:bash-0:3.0-27.el4.4.i386",
"4ES-ELS:bash-0:3.0-27.el4.4.ia64",
"4ES-ELS:bash-0:3.0-27.el4.4.src",
"4ES-ELS:bash-0:3.0-27.el4.4.x86_64",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.i386",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.ia64",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.i386",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.ia64",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.src",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.x86_64",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.i386",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.ia64",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.x86_64",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.i386",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ia64",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ppc",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.s390x",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.src",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.x86_64",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.i386",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ia64",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ppc",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.s390x",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.x86_64",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src",
"6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.2.AUS:bash-doc-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src",
"6Server-optional-6.2.AUS:bash-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.2.AUS:bash-doc-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "bash: parser can allow out-of-bounds memory access while handling redir_stack"
},
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-7187",
"cwe": {
"id": "CWE-193",
"name": "Off-by-one Error"
},
"discovery_date": "2014-09-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1146804"
}
],
"notes": [
{
"category": "description",
"text": "An off-by-one error was discovered in the way Bash was handling deeply nested flow control constructs. Depending on the layout of the .bss segment, this could allow arbitrary execution of code that would not otherwise be executed by Bash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bash: off-by-one error in deeply nested flow control constructs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security does not consider this bug to have any security impact on the bash packages shipped in Red Hat Enterprise Linux. A fix for this issue was applied as a hardening in RHSA-2014:1306, RHSA-2014:1311, and RHSA-2014:1312.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-ELS:bash-0:3.0-27.el4.4.i386",
"4AS-ELS:bash-0:3.0-27.el4.4.ia64",
"4AS-ELS:bash-0:3.0-27.el4.4.src",
"4AS-ELS:bash-0:3.0-27.el4.4.x86_64",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.i386",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.ia64",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64",
"4ES-ELS:bash-0:3.0-27.el4.4.i386",
"4ES-ELS:bash-0:3.0-27.el4.4.ia64",
"4ES-ELS:bash-0:3.0-27.el4.4.src",
"4ES-ELS:bash-0:3.0-27.el4.4.x86_64",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.i386",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.ia64",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.i386",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.ia64",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.src",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.x86_64",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.i386",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.ia64",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.x86_64",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.i386",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ia64",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ppc",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.s390x",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.src",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.x86_64",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.i386",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ia64",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ppc",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.s390x",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.x86_64",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src",
"6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.2.AUS:bash-doc-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src",
"6Server-optional-6.2.AUS:bash-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.2.AUS:bash-doc-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-7187"
},
{
"category": "external",
"summary": "RHBZ#1146804",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146804"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-7187",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-7187"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7187",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7187"
}
],
"release_date": "2014-09-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-09-26T17:58:08+00:00",
"details": "Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the \nRed Hat Network to apply this update are available at \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"4AS-ELS:bash-0:3.0-27.el4.4.i386",
"4AS-ELS:bash-0:3.0-27.el4.4.ia64",
"4AS-ELS:bash-0:3.0-27.el4.4.src",
"4AS-ELS:bash-0:3.0-27.el4.4.x86_64",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.i386",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.ia64",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64",
"4ES-ELS:bash-0:3.0-27.el4.4.i386",
"4ES-ELS:bash-0:3.0-27.el4.4.ia64",
"4ES-ELS:bash-0:3.0-27.el4.4.src",
"4ES-ELS:bash-0:3.0-27.el4.4.x86_64",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.i386",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.ia64",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.i386",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.ia64",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.src",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.x86_64",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.i386",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.ia64",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.x86_64",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.i386",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ia64",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ppc",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.s390x",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.src",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.x86_64",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.i386",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ia64",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ppc",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.s390x",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.x86_64",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src",
"6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.2.AUS:bash-doc-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src",
"6Server-optional-6.2.AUS:bash-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.2.AUS:bash-doc-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1311"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.6,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"4AS-ELS:bash-0:3.0-27.el4.4.i386",
"4AS-ELS:bash-0:3.0-27.el4.4.ia64",
"4AS-ELS:bash-0:3.0-27.el4.4.src",
"4AS-ELS:bash-0:3.0-27.el4.4.x86_64",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.i386",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.ia64",
"4AS-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64",
"4ES-ELS:bash-0:3.0-27.el4.4.i386",
"4ES-ELS:bash-0:3.0-27.el4.4.ia64",
"4ES-ELS:bash-0:3.0-27.el4.4.src",
"4ES-ELS:bash-0:3.0-27.el4.4.x86_64",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.i386",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.ia64",
"4ES-ELS:bash-debuginfo-0:3.0-27.el4.4.x86_64",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.i386",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.ia64",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.src",
"5Server-5.6.LL:bash-0:3.2-24.el5_6.2.x86_64",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.i386",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.ia64",
"5Server-5.6.LL:bash-debuginfo-0:3.2-24.el5_6.2.x86_64",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.i386",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ia64",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.ppc",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.s390x",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.src",
"5Server-5.9.EUS:bash-0:3.2-32.el5_9.3.x86_64",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.i386",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ia64",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.ppc",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.s390x",
"5Server-5.9.EUS:bash-debuginfo-0:3.2-32.el5_9.3.x86_64",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6ComputeNode-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6ComputeNode-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6ComputeNode-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src",
"6Server-6.2.AUS:bash-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.2.AUS:bash-doc-0:4.1.2-9.el6_2.2.x86_64",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6Server-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6Server-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.2.AUS:bash-0:4.1.2-9.el6_2.2.src",
"6Server-optional-6.2.AUS:bash-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.2.AUS:bash-debuginfo-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.2.AUS:bash-doc-0:4.1.2-9.el6_2.2.x86_64",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.src",
"6Server-optional-6.4.EUS:bash-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-debuginfo-0:4.1.2-15.el6_4.2.x86_64",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.i686",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.ppc64",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.s390x",
"6Server-optional-6.4.EUS:bash-doc-0:4.1.2-15.el6_4.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "bash: off-by-one error in deeply nested flow control constructs"
}
]
}
RHSA-2014_1312
Vulnerability from csaf_redhat - Published: 2014-09-26 21:28 - Updated: 2024-11-14 16:26Summary
Red Hat Security Advisory: bash Shift_JIS security update
Severity
Important
Notes
Topic: [Updated September 30, 2014]
This advisory has been updated with information on restarting system
services after applying this update. No changes have been made to the
original packages.
Updated bash Shift_JIS packages that fix one security issue are now
available for Red Hat Enterprise Linux 5 and 6.
Red Hat Product Security has rated this update as having Important security
impact. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available from the CVE link in the
References section.
Details: The GNU Bourne Again shell (Bash) is a shell and command language
interpreter compatible with the Bourne shell (sh). Bash is the default
shell for Red Hat Enterprise Linux.
Shift_JIS, also known as "SJIS", is a character encoding for the Japanese
language. This package provides bash support for the Shift_JIS encoding.
It was found that the fix for CVE-2014-6271 was incomplete, and Bash still
allowed certain characters to be injected into other environments via
specially crafted environment variables. An attacker could potentially use
this flaw to override or bypass environment restrictions to execute shell
commands. Certain services and applications allow remote unauthenticated
attackers to provide environment variables, allowing them to exploit this
issue. (CVE-2014-7169)
Applications which directly create bash functions as environment variables
need to be made aware of changes to the way names are handled by this
update. Note that certain services, screen sessions, and tmux sessions may
need to be restarted, and affected interactive users may need to re-login.
Installing these updated packages without restarting services will address
the vulnerability, but functionality may be impacted until affected
services are restarted. For more information see the Knowledgebase article
at https://access.redhat.com/articles/1200223
Note: Docker users are advised to use "yum update" within their containers,
and to commit the resulting changes.
For additional information on CVE-2014-6271 and CVE-2014-7169, refer to the
aforementioned Knowledgebase article.
All users who require Shift_JIS encoding support with Bash built-in
functions are advised to upgrade to these updated packages, which contain a
backported patch to correct this issue.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
It was found that the fix for CVE-2014-6271 was incomplete, and Bash still allowed certain characters to be injected into other environments via specially crafted environment variables. An attacker could potentially use this flaw to override or bypass environment restrictions to execute shell commands. Certain services and applications allow remote unauthenticated attackers to provide environment variables, allowing them to exploit this issue.
5.1 ()
Affected products
Fixed
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.x86_64 | — |
Vendor Fix
fix
|
Threats
Exploit Status
CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Impact
Important
It was discovered that the fixed-sized redir_stack could be forced to overflow in the Bash parser, resulting in memory corruption, and possibly leading to arbitrary code execution when evaluating untrusted input that would not otherwise be run as code.
4.6 ()
Affected products
Fixed
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
An off-by-one error was discovered in the way Bash was handling deeply nested flow control constructs. Depending on the layout of the .bss segment, this could allow arbitrary execution of code that would not otherwise be executed by Bash.
4.6 ()
Affected products
Fixed
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
19 references
Acknowledgments
Red Hat Product Security
Florian Weimer
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "[Updated September 30, 2014]\nThis advisory has been updated with information on restarting system\nservices after applying this update. No changes have been made to the\noriginal packages.\n\nUpdated bash Shift_JIS packages that fix one security issue are now\navailable for Red Hat Enterprise Linux 5 and 6.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available from the CVE link in the\nReferences section.",
"title": "Topic"
},
{
"category": "general",
"text": "The GNU Bourne Again shell (Bash) is a shell and command language\ninterpreter compatible with the Bourne shell (sh). Bash is the default\nshell for Red Hat Enterprise Linux.\n\nShift_JIS, also known as \"SJIS\", is a character encoding for the Japanese\nlanguage. This package provides bash support for the Shift_JIS encoding.\n\nIt was found that the fix for CVE-2014-6271 was incomplete, and Bash still\nallowed certain characters to be injected into other environments via\nspecially crafted environment variables. An attacker could potentially use\nthis flaw to override or bypass environment restrictions to execute shell\ncommands. Certain services and applications allow remote unauthenticated\nattackers to provide environment variables, allowing them to exploit this\nissue. (CVE-2014-7169)\n\nApplications which directly create bash functions as environment variables\nneed to be made aware of changes to the way names are handled by this\nupdate. Note that certain services, screen sessions, and tmux sessions may\nneed to be restarted, and affected interactive users may need to re-login.\nInstalling these updated packages without restarting services will address\nthe vulnerability, but functionality may be impacted until affected\nservices are restarted. For more information see the Knowledgebase article\nat https://access.redhat.com/articles/1200223\n\nNote: Docker users are advised to use \"yum update\" within their containers,\nand to commit the resulting changes.\n\nFor additional information on CVE-2014-6271 and CVE-2014-7169, refer to the\naforementioned Knowledgebase article.\n\nAll users who require Shift_JIS encoding support with Bash built-in\nfunctions are advised to upgrade to these updated packages, which contain a\nbackported patch to correct this issue.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2014:1312",
"url": "https://access.redhat.com/errata/RHSA-2014:1312"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/articles/1200223",
"url": "https://access.redhat.com/articles/1200223"
},
{
"category": "external",
"summary": "1146319",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146319"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1312.json"
}
],
"title": "Red Hat Security Advisory: bash Shift_JIS security update",
"tracking": {
"current_release_date": "2024-11-14T16:26:22+00:00",
"generator": {
"date": "2024-11-14T16:26:22+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2014:1312",
"initial_release_date": "2014-09-26T21:28:16+00:00",
"revision_history": [
{
"date": "2014-09-26T21:28:16+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2014-09-30T15:08:43+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T16:26:22+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "S-JIS for Red Hat Enteprise Linux 6 Server",
"product": {
"name": "S-JIS for Red Hat Enteprise Linux 6 Server",
"product_id": "6Server-SJIS-6.5.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_sjis:6"
}
}
},
{
"category": "product_name",
"name": "S-JIS for Red Hat Enteprise Linux 5 Server",
"product": {
"name": "S-JIS for Red Hat Enteprise Linux 5 Server",
"product_id": "5Server-SJIS-5.11.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_sjis:5"
}
}
}
],
"category": "product_family",
"name": "RHEL S-JIS Service"
},
{
"branches": [
{
"category": "product_version",
"name": "bash-0:4.1.2-15.el6_5.1.sjis.2.i686",
"product": {
"name": "bash-0:4.1.2-15.el6_5.1.sjis.2.i686",
"product_id": "bash-0:4.1.2-15.el6_5.1.sjis.2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@4.1.2-15.el6_5.1.sjis.2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.i686",
"product": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.i686",
"product_id": "bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@4.1.2-15.el6_5.1.sjis.2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "bash-doc-0:4.1.2-15.el6_5.1.sjis.2.i686",
"product": {
"name": "bash-doc-0:4.1.2-15.el6_5.1.sjis.2.i686",
"product_id": "bash-doc-0:4.1.2-15.el6_5.1.sjis.2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-doc@4.1.2-15.el6_5.1.sjis.2?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "bash-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"product": {
"name": "bash-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"product_id": "bash-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@4.1.2-15.el6_5.1.sjis.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"product": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"product_id": "bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@4.1.2-15.el6_5.1.sjis.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bash-doc-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"product": {
"name": "bash-doc-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"product_id": "bash-doc-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-doc@4.1.2-15.el6_5.1.sjis.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.x86_64",
"product": {
"name": "bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.x86_64",
"product_id": "bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@3.2-33.el5_11.1.sjis.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bash-0:3.2-33.el5_11.1.sjis.2.x86_64",
"product": {
"name": "bash-0:3.2-33.el5_11.1.sjis.2.x86_64",
"product_id": "bash-0:3.2-33.el5_11.1.sjis.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.2-33.el5_11.1.sjis.2?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "bash-0:4.1.2-15.el6_5.1.sjis.2.src",
"product": {
"name": "bash-0:4.1.2-15.el6_5.1.sjis.2.src",
"product_id": "bash-0:4.1.2-15.el6_5.1.sjis.2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@4.1.2-15.el6_5.1.sjis.2?arch=src"
}
}
},
{
"category": "product_version",
"name": "bash-0:3.2-33.el5_11.1.sjis.2.src",
"product": {
"name": "bash-0:3.2-33.el5_11.1.sjis.2.src",
"product_id": "bash-0:3.2-33.el5_11.1.sjis.2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.2-33.el5_11.1.sjis.2?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.ia64",
"product": {
"name": "bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.ia64",
"product_id": "bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@3.2-33.el5_11.1.sjis.2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "bash-0:3.2-33.el5_11.1.sjis.2.ia64",
"product": {
"name": "bash-0:3.2-33.el5_11.1.sjis.2.ia64",
"product_id": "bash-0:3.2-33.el5_11.1.sjis.2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.2-33.el5_11.1.sjis.2?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.i386",
"product": {
"name": "bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.i386",
"product_id": "bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@3.2-33.el5_11.1.sjis.2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "bash-0:3.2-33.el5_11.1.sjis.2.i386",
"product": {
"name": "bash-0:3.2-33.el5_11.1.sjis.2.i386",
"product_id": "bash-0:3.2-33.el5_11.1.sjis.2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.2-33.el5_11.1.sjis.2?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-33.el5_11.1.sjis.2.i386 as a component of S-JIS for Red Hat Enteprise Linux 5 Server",
"product_id": "5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.i386"
},
"product_reference": "bash-0:3.2-33.el5_11.1.sjis.2.i386",
"relates_to_product_reference": "5Server-SJIS-5.11.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-33.el5_11.1.sjis.2.ia64 as a component of S-JIS for Red Hat Enteprise Linux 5 Server",
"product_id": "5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.ia64"
},
"product_reference": "bash-0:3.2-33.el5_11.1.sjis.2.ia64",
"relates_to_product_reference": "5Server-SJIS-5.11.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-33.el5_11.1.sjis.2.src as a component of S-JIS for Red Hat Enteprise Linux 5 Server",
"product_id": "5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.src"
},
"product_reference": "bash-0:3.2-33.el5_11.1.sjis.2.src",
"relates_to_product_reference": "5Server-SJIS-5.11.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-33.el5_11.1.sjis.2.x86_64 as a component of S-JIS for Red Hat Enteprise Linux 5 Server",
"product_id": "5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.x86_64"
},
"product_reference": "bash-0:3.2-33.el5_11.1.sjis.2.x86_64",
"relates_to_product_reference": "5Server-SJIS-5.11.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.i386 as a component of S-JIS for Red Hat Enteprise Linux 5 Server",
"product_id": "5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.i386"
},
"product_reference": "bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.i386",
"relates_to_product_reference": "5Server-SJIS-5.11.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.ia64 as a component of S-JIS for Red Hat Enteprise Linux 5 Server",
"product_id": "5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.ia64"
},
"product_reference": "bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.ia64",
"relates_to_product_reference": "5Server-SJIS-5.11.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.x86_64 as a component of S-JIS for Red Hat Enteprise Linux 5 Server",
"product_id": "5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.x86_64"
},
"product_reference": "bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.x86_64",
"relates_to_product_reference": "5Server-SJIS-5.11.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.1.sjis.2.i686 as a component of S-JIS for Red Hat Enteprise Linux 6 Server",
"product_id": "6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.i686"
},
"product_reference": "bash-0:4.1.2-15.el6_5.1.sjis.2.i686",
"relates_to_product_reference": "6Server-SJIS-6.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.1.sjis.2.src as a component of S-JIS for Red Hat Enteprise Linux 6 Server",
"product_id": "6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.src"
},
"product_reference": "bash-0:4.1.2-15.el6_5.1.sjis.2.src",
"relates_to_product_reference": "6Server-SJIS-6.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:4.1.2-15.el6_5.1.sjis.2.x86_64 as a component of S-JIS for Red Hat Enteprise Linux 6 Server",
"product_id": "6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.x86_64"
},
"product_reference": "bash-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"relates_to_product_reference": "6Server-SJIS-6.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.i686 as a component of S-JIS for Red Hat Enteprise Linux 6 Server",
"product_id": "6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.i686"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.i686",
"relates_to_product_reference": "6Server-SJIS-6.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.x86_64 as a component of S-JIS for Red Hat Enteprise Linux 6 Server",
"product_id": "6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.x86_64"
},
"product_reference": "bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"relates_to_product_reference": "6Server-SJIS-6.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_5.1.sjis.2.i686 as a component of S-JIS for Red Hat Enteprise Linux 6 Server",
"product_id": "6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.i686"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_5.1.sjis.2.i686",
"relates_to_product_reference": "6Server-SJIS-6.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-doc-0:4.1.2-15.el6_5.1.sjis.2.x86_64 as a component of S-JIS for Red Hat Enteprise Linux 6 Server",
"product_id": "6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.x86_64"
},
"product_reference": "bash-doc-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"relates_to_product_reference": "6Server-SJIS-6.5.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2014-7169",
"cwe": {
"id": "CWE-228",
"name": "Improper Handling of Syntactically Invalid Structure"
},
"discovery_date": "2014-09-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1146319"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2014-6271 was incomplete, and Bash still allowed certain characters to be injected into other environments via specially crafted environment variables. An attacker could potentially use this flaw to override or bypass environment restrictions to execute shell commands. Certain services and applications allow remote unauthenticated attackers to provide environment variables, allowing them to exploit this issue.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bash: code execution via specially-crafted environment (Incomplete fix for CVE-2014-6271)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.i386",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.ia64",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.src",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.x86_64",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.i386",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.ia64",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.src",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-7169"
},
{
"category": "external",
"summary": "RHBZ#1146319",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146319"
},
{
"category": "external",
"summary": "RHSB-shellshock",
"url": "https://access.redhat.com/security/vulnerabilities/shellshock"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-7169",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-7169"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7169",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7169"
},
{
"category": "external",
"summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
}
],
"release_date": "2014-09-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-09-26T21:28:16+00:00",
"details": "Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the \nRed Hat Network to apply this update are available at \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.i386",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.ia64",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.src",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.x86_64",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.i386",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.ia64",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.src",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1312"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.i386",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.ia64",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.src",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.x86_64",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.i386",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.ia64",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.src",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.x86_64"
]
}
],
"threats": [
{
"category": "exploit_status",
"date": "2022-01-28T00:00:00+00:00",
"details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
},
{
"category": "impact",
"details": "Important"
}
],
"title": "bash: code execution via specially-crafted environment (Incomplete fix for CVE-2014-6271)"
},
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-7186",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2014-09-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1146791"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the fixed-sized redir_stack could be forced to overflow in the Bash parser, resulting in memory corruption, and possibly leading to arbitrary code execution when evaluating untrusted input that would not otherwise be run as code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bash: parser can allow out-of-bounds memory access while handling redir_stack",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A patch for this issue was applied to the bash packages in Red Hat Enterprise Linux via RHSA-2014:1306, RHSA-2014:1311, and RHSA-2014:1312. The errata do not mention the CVE in the description, as the CVE was only assigned after those updates were released.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.i386",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.ia64",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.src",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.x86_64",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.i386",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.ia64",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.src",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-7186"
},
{
"category": "external",
"summary": "RHBZ#1146791",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146791"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-7186",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-7186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7186"
}
],
"release_date": "2014-09-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-09-26T21:28:16+00:00",
"details": "Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the \nRed Hat Network to apply this update are available at \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.i386",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.ia64",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.src",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.x86_64",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.i386",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.ia64",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.src",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1312"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.6,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.i386",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.ia64",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.src",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.x86_64",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.i386",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.ia64",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.src",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "bash: parser can allow out-of-bounds memory access while handling redir_stack"
},
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-7187",
"cwe": {
"id": "CWE-193",
"name": "Off-by-one Error"
},
"discovery_date": "2014-09-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1146804"
}
],
"notes": [
{
"category": "description",
"text": "An off-by-one error was discovered in the way Bash was handling deeply nested flow control constructs. Depending on the layout of the .bss segment, this could allow arbitrary execution of code that would not otherwise be executed by Bash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bash: off-by-one error in deeply nested flow control constructs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security does not consider this bug to have any security impact on the bash packages shipped in Red Hat Enterprise Linux. A fix for this issue was applied as a hardening in RHSA-2014:1306, RHSA-2014:1311, and RHSA-2014:1312.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.i386",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.ia64",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.src",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.x86_64",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.i386",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.ia64",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.src",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-7187"
},
{
"category": "external",
"summary": "RHBZ#1146804",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146804"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-7187",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-7187"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7187",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7187"
}
],
"release_date": "2014-09-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-09-26T21:28:16+00:00",
"details": "Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the \nRed Hat Network to apply this update are available at \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.i386",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.ia64",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.src",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.x86_64",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.i386",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.ia64",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.src",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1312"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.6,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.i386",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.ia64",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.src",
"5Server-SJIS-5.11.z:bash-0:3.2-33.el5_11.1.sjis.2.x86_64",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.i386",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.ia64",
"5Server-SJIS-5.11.z:bash-debuginfo-0:3.2-33.el5_11.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.src",
"6Server-SJIS-6.5.Z:bash-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-debuginfo-0:4.1.2-15.el6_5.1.sjis.2.x86_64",
"6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.i686",
"6Server-SJIS-6.5.Z:bash-doc-0:4.1.2-15.el6_5.1.sjis.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "bash: off-by-one error in deeply nested flow control constructs"
}
]
}
RHSA-2014_1354
Vulnerability from csaf_redhat - Published: 2014-10-02 18:40 - Updated: 2024-12-15 18:38Summary
Red Hat Security Advisory: rhev-hypervisor6 security update
Severity
Critical
Notes
Topic: An updated rhev-hypervisor6 package that fixes several security issues is
now available.
Red Hat Product Security has rated this update as having Critical security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details: The rhev-hypervisor6 package provides a Red Hat Enterprise Virtualization
Hypervisor ISO disk image. The Red Hat Enterprise Virtualization Hypervisor
is a dedicated Kernel-based Virtual Machine (KVM) hypervisor. It includes
everything necessary to run and manage virtual machines: a subset of the
Red Hat Enterprise Linux operating environment and the Red Hat Enterprise
Virtualization Agent.
Note: Red Hat Enterprise Virtualization Hypervisor is only available for
the Intel 64 and AMD64 architectures with virtualization extensions.
A flaw was found in the way Bash evaluated certain specially crafted
environment variables. An attacker could use this flaw to override or
bypass environment restrictions to execute shell commands. Certain services
and applications allow remote unauthenticated attackers to provide
environment variables, allowing them to exploit this issue. (CVE-2014-6271)
It was found that the fix for CVE-2014-6271 was incomplete, and Bash still
allowed certain characters to be injected into other environments via
specially crafted environment variables. An attacker could potentially use
this flaw to override or bypass environment restrictions to execute shell
commands. Certain services and applications allow remote unauthenticated
attackers to provide environment variables, allowing them to exploit this
issue. (CVE-2014-7169)
A flaw was found in the way NSS parsed ASN.1 (Abstract Syntax Notation One)
input from certain RSA signatures. A remote attacker could use this flaw to
forge RSA certificates by providing a specially crafted signature to an
application using NSS. (CVE-2014-1568)
It was discovered that the fixed-sized redir_stack could be forced to
overflow in the Bash parser, resulting in memory corruption, and possibly
leading to arbitrary code execution when evaluating untrusted input that
would not otherwise be run as code. (CVE-2014-7186)
An off-by-one error was discovered in the way Bash was handling deeply
nested flow control constructs. Depending on the layout of the .bss
segment, this could allow arbitrary execution of code that would not
otherwise be executed by Bash. (CVE-2014-7187)
Red Hat would like to thank Stephane Chazelas for reporting CVE-2014-6271,
and the Mozilla project for reporting CVE-2014-1568. Upstream acknowledges
Antoine Delignat-Lavaud and Intel Product Security Incident Response Team
as the original reporters of CVE-2014-1568. The CVE-2014-7186 and
CVE-2014-7187 issues were discovered by Florian Weimer of Red Hat Product
Security.
Users of the Red Hat Enterprise Virtualization Hypervisor are advised to
upgrade to this updated package.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the way NSS parsed ASN.1 (Abstract Syntax Notation One) input from certain RSA signatures. A remote attacker could use this flaw to forge RSA certificates by providing a specially crafted signature to an application using NSS.
5.8 ()
Affected products
Threats
Impact
Important
A flaw was found in the way Bash evaluated certain specially crafted environment variables. An attacker could use this flaw to override or bypass environment restrictions to execute shell commands. Certain services and applications allow remote unauthenticated attackers to provide environment variables, allowing them to exploit this issue.
7.5 ()
Affected products
Threats
Exploit Status
CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Impact
Critical
It was found that the fix for CVE-2014-6271 was incomplete, and Bash still allowed certain characters to be injected into other environments via specially crafted environment variables. An attacker could potentially use this flaw to override or bypass environment restrictions to execute shell commands. Certain services and applications allow remote unauthenticated attackers to provide environment variables, allowing them to exploit this issue.
5.1 ()
Affected products
Threats
Exploit Status
CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Impact
Important
It was discovered that the fixed-sized redir_stack could be forced to overflow in the Bash parser, resulting in memory corruption, and possibly leading to arbitrary code execution when evaluating untrusted input that would not otherwise be run as code.
4.6 ()
Affected products
Threats
Impact
Moderate
An off-by-one error was discovered in the way Bash was handling deeply nested flow control constructs. Depending on the layout of the .bss segment, this could allow arbitrary execution of code that would not otherwise be executed by Bash.
4.6 ()
Affected products
Threats
Impact
Moderate
References
33 references
Acknowledgments
Mozilla project
Antoine Delignat-Lavaud
Intel Product Security Incident Response Team
Red Hat Product Security
Florian Weimer
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An updated rhev-hypervisor6 package that fixes several security issues is\nnow available.\n\nRed Hat Product Security has rated this update as having Critical security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The rhev-hypervisor6 package provides a Red Hat Enterprise Virtualization\nHypervisor ISO disk image. The Red Hat Enterprise Virtualization Hypervisor\nis a dedicated Kernel-based Virtual Machine (KVM) hypervisor. It includes\neverything necessary to run and manage virtual machines: a subset of the\nRed Hat Enterprise Linux operating environment and the Red Hat Enterprise\nVirtualization Agent.\n\nNote: Red Hat Enterprise Virtualization Hypervisor is only available for\nthe Intel 64 and AMD64 architectures with virtualization extensions.\n\nA flaw was found in the way Bash evaluated certain specially crafted\nenvironment variables. An attacker could use this flaw to override or\nbypass environment restrictions to execute shell commands. Certain services\nand applications allow remote unauthenticated attackers to provide\nenvironment variables, allowing them to exploit this issue. (CVE-2014-6271)\n\nIt was found that the fix for CVE-2014-6271 was incomplete, and Bash still\nallowed certain characters to be injected into other environments via\nspecially crafted environment variables. An attacker could potentially use\nthis flaw to override or bypass environment restrictions to execute shell\ncommands. Certain services and applications allow remote unauthenticated\nattackers to provide environment variables, allowing them to exploit this\nissue. (CVE-2014-7169)\n\nA flaw was found in the way NSS parsed ASN.1 (Abstract Syntax Notation One)\ninput from certain RSA signatures. A remote attacker could use this flaw to\nforge RSA certificates by providing a specially crafted signature to an\napplication using NSS. (CVE-2014-1568)\n\nIt was discovered that the fixed-sized redir_stack could be forced to\noverflow in the Bash parser, resulting in memory corruption, and possibly\nleading to arbitrary code execution when evaluating untrusted input that\nwould not otherwise be run as code. (CVE-2014-7186)\n\nAn off-by-one error was discovered in the way Bash was handling deeply\nnested flow control constructs. Depending on the layout of the .bss\nsegment, this could allow arbitrary execution of code that would not\notherwise be executed by Bash. (CVE-2014-7187)\n\nRed Hat would like to thank Stephane Chazelas for reporting CVE-2014-6271,\nand the Mozilla project for reporting CVE-2014-1568. Upstream acknowledges\nAntoine Delignat-Lavaud and Intel Product Security Incident Response Team\nas the original reporters of CVE-2014-1568. The CVE-2014-7186 and\nCVE-2014-7187 issues were discovered by Florian Weimer of Red Hat Product\nSecurity.\n\nUsers of the Red Hat Enterprise Virtualization Hypervisor are advised to\nupgrade to this updated package.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2014:1354",
"url": "https://access.redhat.com/errata/RHSA-2014:1354"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "1141597",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1141597"
},
{
"category": "external",
"summary": "1145429",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1145429"
},
{
"category": "external",
"summary": "1146319",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146319"
},
{
"category": "external",
"summary": "1146791",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146791"
},
{
"category": "external",
"summary": "1146804",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146804"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1354.json"
}
],
"title": "Red Hat Security Advisory: rhev-hypervisor6 security update",
"tracking": {
"current_release_date": "2024-12-15T18:38:44+00:00",
"generator": {
"date": "2024-12-15T18:38:44+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.3"
}
},
"id": "RHSA-2014:1354",
"initial_release_date": "2014-10-02T18:40:05+00:00",
"revision_history": [
{
"date": "2014-10-02T18:40:05+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2014-10-02T18:40:05+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-12-15T18:38:44+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "RHEV-M 3.4",
"product": {
"name": "RHEV-M 3.4",
"product_id": "6Server-RHEV-S-3.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhev_manager:3"
}
}
}
],
"category": "product_family",
"name": "Red Hat Virtualization"
},
{
"branches": [
{
"category": "product_version",
"name": "rhev-hypervisor6-0:6.5-20140930.1.el6ev.src",
"product": {
"name": "rhev-hypervisor6-0:6.5-20140930.1.el6ev.src",
"product_id": "rhev-hypervisor6-0:6.5-20140930.1.el6ev.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhev-hypervisor6@6.5-20140930.1.el6ev?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "rhev-hypervisor6-0:6.5-20140930.1.el6ev.noarch",
"product": {
"name": "rhev-hypervisor6-0:6.5-20140930.1.el6ev.noarch",
"product_id": "rhev-hypervisor6-0:6.5-20140930.1.el6ev.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhev-hypervisor6@6.5-20140930.1.el6ev?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rhev-hypervisor6-0:6.5-20140930.1.el6ev.noarch as a component of RHEV-M 3.4",
"product_id": "6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.noarch"
},
"product_reference": "rhev-hypervisor6-0:6.5-20140930.1.el6ev.noarch",
"relates_to_product_reference": "6Server-RHEV-S-3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhev-hypervisor6-0:6.5-20140930.1.el6ev.src as a component of RHEV-M 3.4",
"product_id": "6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.src"
},
"product_reference": "rhev-hypervisor6-0:6.5-20140930.1.el6ev.src",
"relates_to_product_reference": "6Server-RHEV-S-3.4"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Mozilla project"
]
},
{
"names": [
"Antoine Delignat-Lavaud",
"Intel Product Security Incident Response Team"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2014-1568",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2014-09-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1145429"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the way NSS parsed ASN.1 (Abstract Syntax Notation One) input from certain RSA signatures. A remote attacker could use this flaw to forge RSA certificates by providing a specially crafted signature to an application using NSS.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss: RSA PKCS#1 signature verification forgery flaw (MFSA 2014-73)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.noarch",
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-1568"
},
{
"category": "external",
"summary": "RHBZ#1145429",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1145429"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-1568",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1568"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-1568",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-1568"
},
{
"category": "external",
"summary": "http://www.mozilla.org/security/announce/2014/mfsa2014-73.html",
"url": "http://www.mozilla.org/security/announce/2014/mfsa2014-73.html"
}
],
"release_date": "2014-09-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-10-02T18:40:05+00:00",
"details": "This update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258\n\nTo upgrade Hypervisors in Red Hat Enterprise Virtualization environments\nusing the disk image provided by this package, refer to:\n\nhttps://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html",
"product_ids": [
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.noarch",
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1354"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.noarch",
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nss: RSA PKCS#1 signature verification forgery flaw (MFSA 2014-73)"
},
{
"cve": "CVE-2014-6271",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2014-09-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1141597"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the way Bash evaluated certain specially crafted environment variables. An attacker could use this flaw to override or bypass environment restrictions to execute shell commands. Certain services and applications allow remote unauthenticated attackers to provide environment variables, allowing them to exploit this issue.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bash: specially-crafted environment variables can be used to inject shell commands",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.noarch",
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-6271"
},
{
"category": "external",
"summary": "RHBZ#1141597",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1141597"
},
{
"category": "external",
"summary": "RHSB-shellshock",
"url": "https://access.redhat.com/security/vulnerabilities/shellshock"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-6271",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-6271"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-6271",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-6271"
},
{
"category": "external",
"summary": "https://access.redhat.com/articles/1200223",
"url": "https://access.redhat.com/articles/1200223"
},
{
"category": "external",
"summary": "https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack",
"url": "https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack"
},
{
"category": "external",
"summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
}
],
"release_date": "2014-09-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-10-02T18:40:05+00:00",
"details": "This update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258\n\nTo upgrade Hypervisors in Red Hat Enterprise Virtualization environments\nusing the disk image provided by this package, refer to:\n\nhttps://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html",
"product_ids": [
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.noarch",
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1354"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.noarch",
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.src"
]
}
],
"threats": [
{
"category": "exploit_status",
"date": "2022-01-28T00:00:00+00:00",
"details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
},
{
"category": "impact",
"details": "Critical"
}
],
"title": "bash: specially-crafted environment variables can be used to inject shell commands"
},
{
"cve": "CVE-2014-7169",
"cwe": {
"id": "CWE-228",
"name": "Improper Handling of Syntactically Invalid Structure"
},
"discovery_date": "2014-09-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1146319"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2014-6271 was incomplete, and Bash still allowed certain characters to be injected into other environments via specially crafted environment variables. An attacker could potentially use this flaw to override or bypass environment restrictions to execute shell commands. Certain services and applications allow remote unauthenticated attackers to provide environment variables, allowing them to exploit this issue.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bash: code execution via specially-crafted environment (Incomplete fix for CVE-2014-6271)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.noarch",
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-7169"
},
{
"category": "external",
"summary": "RHBZ#1146319",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146319"
},
{
"category": "external",
"summary": "RHSB-shellshock",
"url": "https://access.redhat.com/security/vulnerabilities/shellshock"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-7169",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-7169"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7169",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7169"
},
{
"category": "external",
"summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
}
],
"release_date": "2014-09-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-10-02T18:40:05+00:00",
"details": "This update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258\n\nTo upgrade Hypervisors in Red Hat Enterprise Virtualization environments\nusing the disk image provided by this package, refer to:\n\nhttps://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html",
"product_ids": [
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.noarch",
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1354"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.noarch",
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.src"
]
}
],
"threats": [
{
"category": "exploit_status",
"date": "2022-01-28T00:00:00+00:00",
"details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
},
{
"category": "impact",
"details": "Important"
}
],
"title": "bash: code execution via specially-crafted environment (Incomplete fix for CVE-2014-6271)"
},
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-7186",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2014-09-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1146791"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the fixed-sized redir_stack could be forced to overflow in the Bash parser, resulting in memory corruption, and possibly leading to arbitrary code execution when evaluating untrusted input that would not otherwise be run as code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bash: parser can allow out-of-bounds memory access while handling redir_stack",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A patch for this issue was applied to the bash packages in Red Hat Enterprise Linux via RHSA-2014:1306, RHSA-2014:1311, and RHSA-2014:1312. The errata do not mention the CVE in the description, as the CVE was only assigned after those updates were released.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.noarch",
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-7186"
},
{
"category": "external",
"summary": "RHBZ#1146791",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146791"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-7186",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-7186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7186"
}
],
"release_date": "2014-09-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-10-02T18:40:05+00:00",
"details": "This update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258\n\nTo upgrade Hypervisors in Red Hat Enterprise Virtualization environments\nusing the disk image provided by this package, refer to:\n\nhttps://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html",
"product_ids": [
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.noarch",
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1354"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.6,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.noarch",
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "bash: parser can allow out-of-bounds memory access while handling redir_stack"
},
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-7187",
"cwe": {
"id": "CWE-193",
"name": "Off-by-one Error"
},
"discovery_date": "2014-09-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1146804"
}
],
"notes": [
{
"category": "description",
"text": "An off-by-one error was discovered in the way Bash was handling deeply nested flow control constructs. Depending on the layout of the .bss segment, this could allow arbitrary execution of code that would not otherwise be executed by Bash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bash: off-by-one error in deeply nested flow control constructs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security does not consider this bug to have any security impact on the bash packages shipped in Red Hat Enterprise Linux. A fix for this issue was applied as a hardening in RHSA-2014:1306, RHSA-2014:1311, and RHSA-2014:1312.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.noarch",
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-7187"
},
{
"category": "external",
"summary": "RHBZ#1146804",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146804"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-7187",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-7187"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7187",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7187"
}
],
"release_date": "2014-09-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-10-02T18:40:05+00:00",
"details": "This update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258\n\nTo upgrade Hypervisors in Red Hat Enterprise Virtualization environments\nusing the disk image provided by this package, refer to:\n\nhttps://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html",
"product_ids": [
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.noarch",
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1354"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.6,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.noarch",
"6Server-RHEV-S-3.4:rhev-hypervisor6-0:6.5-20140930.1.el6ev.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "bash: off-by-one error in deeply nested flow control constructs"
}
]
}
RHSA-2014_1865
Vulnerability from csaf_redhat - Published: 2014-11-17 18:11 - Updated: 2024-11-14 16:27Summary
Red Hat Security Advisory: bash Shift_JIS security update
Severity
Important
Notes
Topic: Updated bash Shift_JIS packages that fix one security issue are now
available for Red Hat Enterprise Linux 5.9 Extended Update Support.
Red Hat Product Security has rated this update as having Important security
impact. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available from the CVE link in the
References section.
Details: The GNU Bourne Again shell (Bash) is a shell and command language
interpreter compatible with the Bourne shell (sh). Bash is the default
shell for Red Hat Enterprise Linux.
Shift_JIS, also known as "SJIS", is a character encoding for the Japanese
language. This package provides bash support for the Shift_JIS encoding.
It was found that the fix for CVE-2014-6271 was incomplete, and Bash still
allowed certain characters to be injected into other environments via
specially crafted environment variables. An attacker could potentially use
this flaw to override or bypass environment restrictions to execute shell
commands. Certain services and applications allow remote unauthenticated
attackers to provide environment variables, allowing them to exploit this
issue. (CVE-2014-7169)
Applications which directly create bash functions as environment variables
need to be made aware of changes to the way names are handled by this
update. Note that certain services, screen sessions, and tmux sessions may
need to be restarted, and affected interactive users may need to re-login.
Installing these updated packages without restarting services will address
the vulnerability, but functionality may be impacted until affected
services are restarted. For more information see the Knowledgebase article
at https://access.redhat.com/articles/1200223
Note: Docker users are advised to use "yum update" within their containers,
and to commit the resulting changes.
For additional information on CVE-2014-6271 and CVE-2014-7169, refer to the
aforementioned Knowledgebase article.
All users who require Shift_JIS encoding support with Bash built-in
functions are advised to upgrade to these updated packages, which contain a
backported patch to correct this issue.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
It was found that the fix for CVE-2014-6271 was incomplete, and Bash still allowed certain characters to be injected into other environments via specially crafted environment variables. An attacker could potentially use this flaw to override or bypass environment restrictions to execute shell commands. Certain services and applications allow remote unauthenticated attackers to provide environment variables, allowing them to exploit this issue.
5.1 ()
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.x86_64 | — |
Vendor Fix
fix
|
Threats
Exploit Status
CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Impact
Important
It was discovered that the fixed-sized redir_stack could be forced to overflow in the Bash parser, resulting in memory corruption, and possibly leading to arbitrary code execution when evaluating untrusted input that would not otherwise be run as code.
4.6 ()
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
An off-by-one error was discovered in the way Bash was handling deeply nested flow control constructs. Depending on the layout of the .bss segment, this could allow arbitrary execution of code that would not otherwise be executed by Bash.
4.6 ()
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
19 references
Acknowledgments
Red Hat Product Security
Florian Weimer
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated bash Shift_JIS packages that fix one security issue are now\navailable for Red Hat Enterprise Linux 5.9 Extended Update Support.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available from the CVE link in the\nReferences section.",
"title": "Topic"
},
{
"category": "general",
"text": "The GNU Bourne Again shell (Bash) is a shell and command language\ninterpreter compatible with the Bourne shell (sh). Bash is the default\nshell for Red Hat Enterprise Linux.\n\nShift_JIS, also known as \"SJIS\", is a character encoding for the Japanese\nlanguage. This package provides bash support for the Shift_JIS encoding.\n\nIt was found that the fix for CVE-2014-6271 was incomplete, and Bash still\nallowed certain characters to be injected into other environments via\nspecially crafted environment variables. An attacker could potentially use\nthis flaw to override or bypass environment restrictions to execute shell\ncommands. Certain services and applications allow remote unauthenticated\nattackers to provide environment variables, allowing them to exploit this\nissue. (CVE-2014-7169)\n\nApplications which directly create bash functions as environment variables\nneed to be made aware of changes to the way names are handled by this\nupdate. Note that certain services, screen sessions, and tmux sessions may\nneed to be restarted, and affected interactive users may need to re-login.\nInstalling these updated packages without restarting services will address\nthe vulnerability, but functionality may be impacted until affected\nservices are restarted. For more information see the Knowledgebase article\nat https://access.redhat.com/articles/1200223\n\nNote: Docker users are advised to use \"yum update\" within their containers,\nand to commit the resulting changes.\n\nFor additional information on CVE-2014-6271 and CVE-2014-7169, refer to the\naforementioned Knowledgebase article.\n\nAll users who require Shift_JIS encoding support with Bash built-in\nfunctions are advised to upgrade to these updated packages, which contain a\nbackported patch to correct this issue.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2014:1865",
"url": "https://access.redhat.com/errata/RHSA-2014:1865"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/articles/1200223",
"url": "https://access.redhat.com/articles/1200223"
},
{
"category": "external",
"summary": "1146319",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146319"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1865.json"
}
],
"title": "Red Hat Security Advisory: bash Shift_JIS security update",
"tracking": {
"current_release_date": "2024-11-14T16:27:19+00:00",
"generator": {
"date": "2024-11-14T16:27:19+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2014:1865",
"initial_release_date": "2014-11-17T18:11:13+00:00",
"revision_history": [
{
"date": "2014-11-17T18:11:13+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2014-11-17T18:11:14+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T16:27:19+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "SJIS (v. 5.9.z Server)",
"product": {
"name": "SJIS (v. 5.9.z Server)",
"product_id": "5Server-SJIS-5.9.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_sjis:5"
}
}
}
],
"category": "product_family",
"name": "RHEL S-JIS Service"
},
{
"branches": [
{
"category": "product_version",
"name": "bash-0:3.2-32.el5_9.3.sjis.1.ia64",
"product": {
"name": "bash-0:3.2-32.el5_9.3.sjis.1.ia64",
"product_id": "bash-0:3.2-32.el5_9.3.sjis.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.2-32.el5_9.3.sjis.1?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.ia64",
"product": {
"name": "bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.ia64",
"product_id": "bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@3.2-32.el5_9.3.sjis.1?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "bash-0:3.2-32.el5_9.3.sjis.1.i386",
"product": {
"name": "bash-0:3.2-32.el5_9.3.sjis.1.i386",
"product_id": "bash-0:3.2-32.el5_9.3.sjis.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.2-32.el5_9.3.sjis.1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.i386",
"product": {
"name": "bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.i386",
"product_id": "bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@3.2-32.el5_9.3.sjis.1?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "bash-0:3.2-32.el5_9.3.sjis.1.x86_64",
"product": {
"name": "bash-0:3.2-32.el5_9.3.sjis.1.x86_64",
"product_id": "bash-0:3.2-32.el5_9.3.sjis.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.2-32.el5_9.3.sjis.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.x86_64",
"product": {
"name": "bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.x86_64",
"product_id": "bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash-debuginfo@3.2-32.el5_9.3.sjis.1?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "bash-0:3.2-32.el5_9.3.sjis.1.src",
"product": {
"name": "bash-0:3.2-32.el5_9.3.sjis.1.src",
"product_id": "bash-0:3.2-32.el5_9.3.sjis.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bash@3.2-32.el5_9.3.sjis.1?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-32.el5_9.3.sjis.1.i386 as a component of SJIS (v. 5.9.z Server)",
"product_id": "5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.i386"
},
"product_reference": "bash-0:3.2-32.el5_9.3.sjis.1.i386",
"relates_to_product_reference": "5Server-SJIS-5.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-32.el5_9.3.sjis.1.ia64 as a component of SJIS (v. 5.9.z Server)",
"product_id": "5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.ia64"
},
"product_reference": "bash-0:3.2-32.el5_9.3.sjis.1.ia64",
"relates_to_product_reference": "5Server-SJIS-5.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-32.el5_9.3.sjis.1.src as a component of SJIS (v. 5.9.z Server)",
"product_id": "5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.src"
},
"product_reference": "bash-0:3.2-32.el5_9.3.sjis.1.src",
"relates_to_product_reference": "5Server-SJIS-5.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-0:3.2-32.el5_9.3.sjis.1.x86_64 as a component of SJIS (v. 5.9.z Server)",
"product_id": "5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.x86_64"
},
"product_reference": "bash-0:3.2-32.el5_9.3.sjis.1.x86_64",
"relates_to_product_reference": "5Server-SJIS-5.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.i386 as a component of SJIS (v. 5.9.z Server)",
"product_id": "5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.i386"
},
"product_reference": "bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.i386",
"relates_to_product_reference": "5Server-SJIS-5.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.ia64 as a component of SJIS (v. 5.9.z Server)",
"product_id": "5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.ia64"
},
"product_reference": "bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.ia64",
"relates_to_product_reference": "5Server-SJIS-5.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.x86_64 as a component of SJIS (v. 5.9.z Server)",
"product_id": "5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.x86_64"
},
"product_reference": "bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.x86_64",
"relates_to_product_reference": "5Server-SJIS-5.9.z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2014-7169",
"cwe": {
"id": "CWE-228",
"name": "Improper Handling of Syntactically Invalid Structure"
},
"discovery_date": "2014-09-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1146319"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2014-6271 was incomplete, and Bash still allowed certain characters to be injected into other environments via specially crafted environment variables. An attacker could potentially use this flaw to override or bypass environment restrictions to execute shell commands. Certain services and applications allow remote unauthenticated attackers to provide environment variables, allowing them to exploit this issue.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bash: code execution via specially-crafted environment (Incomplete fix for CVE-2014-6271)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.i386",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.ia64",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.src",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.x86_64",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.i386",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.ia64",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-7169"
},
{
"category": "external",
"summary": "RHBZ#1146319",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146319"
},
{
"category": "external",
"summary": "RHSB-shellshock",
"url": "https://access.redhat.com/security/vulnerabilities/shellshock"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-7169",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-7169"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7169",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7169"
},
{
"category": "external",
"summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
}
],
"release_date": "2014-09-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-11-17T18:11:13+00:00",
"details": "Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the \nRed Hat Network to apply this update are available at \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.i386",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.ia64",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.src",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.x86_64",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.i386",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.ia64",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1865"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.i386",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.ia64",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.src",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.x86_64",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.i386",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.ia64",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.x86_64"
]
}
],
"threats": [
{
"category": "exploit_status",
"date": "2022-01-28T00:00:00+00:00",
"details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
},
{
"category": "impact",
"details": "Important"
}
],
"title": "bash: code execution via specially-crafted environment (Incomplete fix for CVE-2014-6271)"
},
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-7186",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2014-09-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1146791"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the fixed-sized redir_stack could be forced to overflow in the Bash parser, resulting in memory corruption, and possibly leading to arbitrary code execution when evaluating untrusted input that would not otherwise be run as code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bash: parser can allow out-of-bounds memory access while handling redir_stack",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A patch for this issue was applied to the bash packages in Red Hat Enterprise Linux via RHSA-2014:1306, RHSA-2014:1311, and RHSA-2014:1312. The errata do not mention the CVE in the description, as the CVE was only assigned after those updates were released.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.i386",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.ia64",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.src",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.x86_64",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.i386",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.ia64",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-7186"
},
{
"category": "external",
"summary": "RHBZ#1146791",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146791"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-7186",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-7186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7186"
}
],
"release_date": "2014-09-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-11-17T18:11:13+00:00",
"details": "Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the \nRed Hat Network to apply this update are available at \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.i386",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.ia64",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.src",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.x86_64",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.i386",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.ia64",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1865"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.6,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.i386",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.ia64",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.src",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.x86_64",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.i386",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.ia64",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "bash: parser can allow out-of-bounds memory access while handling redir_stack"
},
{
"acknowledgments": [
{
"names": [
"Florian Weimer"
],
"organization": "Red Hat Product Security",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-7187",
"cwe": {
"id": "CWE-193",
"name": "Off-by-one Error"
},
"discovery_date": "2014-09-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1146804"
}
],
"notes": [
{
"category": "description",
"text": "An off-by-one error was discovered in the way Bash was handling deeply nested flow control constructs. Depending on the layout of the .bss segment, this could allow arbitrary execution of code that would not otherwise be executed by Bash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bash: off-by-one error in deeply nested flow control constructs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security does not consider this bug to have any security impact on the bash packages shipped in Red Hat Enterprise Linux. A fix for this issue was applied as a hardening in RHSA-2014:1306, RHSA-2014:1311, and RHSA-2014:1312.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.i386",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.ia64",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.src",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.x86_64",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.i386",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.ia64",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-7187"
},
{
"category": "external",
"summary": "RHBZ#1146804",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146804"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-7187",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-7187"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-7187",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7187"
}
],
"release_date": "2014-09-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-11-17T18:11:13+00:00",
"details": "Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the \nRed Hat Network to apply this update are available at \nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.i386",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.ia64",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.src",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.x86_64",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.i386",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.ia64",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1865"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.6,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.i386",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.ia64",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.src",
"5Server-SJIS-5.9.z:bash-0:3.2-32.el5_9.3.sjis.1.x86_64",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.i386",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.ia64",
"5Server-SJIS-5.9.z:bash-debuginfo-0:3.2-32.el5_9.3.sjis.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "bash: off-by-one error in deeply nested flow control constructs"
}
]
}
ubuntu-cve-2014-7186
Vulnerability from osv_ubuntu
Published
2014-09-26 00:00
Modified
2025-09-08 16:43
Summary
Details
The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted use of here documents, aka the "redir_stack" issue.
Severity
N/A (UNKNOWN)
References
{
"affected": [
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "bash",
"binary_version": "4.3-7ubuntu1.4"
},
{
"binary_name": "bash-builtins",
"binary_version": "4.3-7ubuntu1.4"
},
{
"binary_name": "bash-static",
"binary_version": "4.3-7ubuntu1.4"
}
]
},
"package": {
"ecosystem": "Ubuntu:14.04:LTS",
"name": "bash",
"purl": "pkg:deb/ubuntu/bash@4.3-7ubuntu1.4?arch=source\u0026distro=trusty"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.3-7ubuntu1.4"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"4.2-5ubuntu3",
"4.3-1ubuntu2",
"4.3-2ubuntu1",
"4.3-3ubuntu1",
"4.3-4ubuntu1",
"4.3-4ubuntu2",
"4.3-6ubuntu1",
"4.3-7ubuntu1",
"4.3-7ubuntu1.1",
"4.3-7ubuntu1.2",
"4.3-7ubuntu1.3"
]
}
],
"aliases": [],
"details": "The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted use of here documents, aka the \"redir_stack\" issue.",
"id": "UBUNTU-CVE-2014-7186",
"modified": "2025-09-08T16:43:13Z",
"published": "2014-09-26T00:00:00Z",
"references": [
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2014-7186"
},
{
"type": "REPORT",
"url": "http://www.openwall.com/lists/oss-security/2014/09/25/32"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-2364-1"
},
{
"type": "REPORT",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-7186"
}
],
"related": [
"USN-2364-1"
],
"schema_version": "1.7.0",
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
],
"upstream": [
"CVE-2014-7186"
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…