{"id":"CVE-2014-6277","url":"https://www.cyber-defence.io/tools/cve/CVE-2014-6277","generatedAt":"2026-11-05T06:48:57.011Z","title":"GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized memory access, and untrusted-pointer…","description":"GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized memory access, and untrusted-pointer read and write operations) via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271 and CVE-2014-7169.","published":"2014-09-27T22:55:03.000Z","lastModified":"2026-06-17T00:12:50.000Z","status":"Modified","sourceIdentifier":"security@debian.org","cvss":{"version":"2.0","score":10,"severity":"HIGH","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C"},"cwe":["CWE-78"],"affected":["gnu/bash"],"epss":{"score":0.64326,"percentile":0.99235,"date":"2026-11-04","history":[{"date":"2026-09-20","score":0.69775,"percentile":0.99338},{"date":"2026-10-03","score":0.64326,"percentile":0.99213}]},"kev":{"listed":false},"exploits":{"count":3,"verified":true,"firstPublished":"2014-09-29","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":35081,"kind":"exploit","title":"Binary File Descriptor Library (libbfd) - Out-of-Bounds Crash","url":"https://www.exploit-db.com/exploits/35081","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/35081.txt","file":"exploits/linux/dos/35081.txt","published":"2014-10-27","added":"2014-10-27","updated":"2017-07-14","author":"Michal Zalewski","type":"dos","platform":"linux","port":null,"verified":true,"codes":["CVE-2014-6277"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null},{"edbId":34860,"kind":"exploit","title":"GNU bash 4.3.11 - Environment Variable dhclient","url":"https://www.exploit-db.com/exploits/34860","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/34860.py","file":"exploits/linux/remote/34860.py","published":"2014-10-02","added":"2014-10-02","updated":"2014-10-02","author":"@0x00string","type":"remote","platform":"linux","port":null,"verified":false,"codes":["CVE-2014-7910","OSVDB-112169","CVE-2014-7227","CVE-2014-7196","CVE-2014-7187","CVE-2014-7186","CVE-2014-7169","CVE-2014-6278","CVE-2014-62771","OSVDB-112158","OSVDB-112097","OSVDB-112096","OSVDB-112004","CVE-2014-6277","CVE-2014-6271","CVE-2014-3671","CVE-2014-3659"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null},{"edbId":36933,"kind":"exploit","title":"dhclient 4.1 - Bash Environment Variable Command Injection (Shellshock)","url":"https://www.exploit-db.com/exploits/36933","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/36933.py","file":"exploits/linux/remote/36933.py","published":"2014-09-29","added":"2014-09-29","updated":"2017-11-15","author":"fdiskyou","type":"remote","platform":"linux","port":null,"verified":true,"codes":["CVE-2014-7187","CVE-2014-7186","CVE-2014-7169","CVE-2014-6278","CVE-2014-6277"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 64.3%, higher than 99% of all known CVEs. Patch or mitigate before the next change window."},"changes":[{"kind":"epss","label":"EPSS jump","at":"2026-09-20T00:00:00.000Z","detail":{"to":0.69775,"from":0.64326,"percentile":0.99338},"summary":"EPSS moved from 64.3% to 69.8% probability of exploitation in the next thirty days."}],"references":[{"url":"http://jvn.jp/en/jp/JVN55667175/index.html","source":"security@debian.org"},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2014-000126","source":"security@debian.org"},{"url":"http://lcamtuf.blogspot.com/2014/09/bash-bug-apply-unofficial-patch-now.html","tags":["Exploit","Patch"],"source":"security@debian.org"},{"url":"http://lcamtuf.blogspot.com/2014/10/bash-bug-how-we-finally-cracked.html","source":"security@debian.org"},{"url":"http://linux.oracle.com/errata/ELSA-2014-3093","source":"security@debian.org"},{"url":"http://linux.oracle.com/errata/ELSA-2014-3094","source":"security@debian.org"},{"url":"http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html","source":"security@debian.org"},{"url":"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html","source":"security@debian.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00004.html","source":"security@debian.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-10/msg00025.html","source":"security@debian.org"},{"url":"http://marc.info/?l=bugtraq&m=141330468527613&w=2","source":"security@debian.org"},{"url":"http://marc.info/?l=bugtraq&m=141345648114150&w=2","source":"security@debian.org"},{"url":"http://marc.info/?l=bugtraq&m=141383026420882&w=2","source":"security@debian.org"},{"url":"http://marc.info/?l=bugtraq&m=141383081521087&w=2","source":"security@debian.org"},{"url":"http://marc.info/?l=bugtraq&m=141383196021590&w=2","source":"security@debian.org"},{"url":"http://marc.info/?l=bugtraq&m=141383244821813&w=2","source":"security@debian.org"},{"url":"http://marc.info/?l=bugtraq&m=141383304022067&w=2","source":"security@debian.org"},{"url":"http://marc.info/?l=bugtraq&m=141383353622268&w=2","source":"security@debian.org"},{"url":"http://marc.info/?l=bugtraq&m=141383465822787&w=2","source":"security@debian.org"},{"url":"http://marc.info/?l=bugtraq&m=141450491804793&w=2","source":"security@debian.org"},{"url":"http://marc.info/?l=bugtraq&m=141576728022234&w=2","source":"security@debian.org"},{"url":"http://marc.info/?l=bugtraq&m=141577137423233&w=2","source":"security@debian.org"},{"url":"http://marc.info/?l=bugtraq&m=141577241923505&w=2","source":"security@debian.org"},{"url":"http://marc.info/?l=bugtraq&m=141577297623641&w=2","source":"security@debian.org"},{"url":"http://marc.info/?l=bugtraq&m=141585637922673&w=2","source":"security@debian.org"},{"url":"http://marc.info/?l=bugtraq&m=141879528318582&w=2","source":"security@debian.org"},{"url":"http://marc.info/?l=bugtraq&m=142118135300698&w=2","source":"security@debian.org"},{"url":"http://marc.info/?l=bugtraq&m=142289270617409&w=2","source":"security@debian.org"},{"url":"http://marc.info/?l=bugtraq&m=142358026505815&w=2","source":"security@debian.org"},{"url":"http://marc.info/?l=bugtraq&m=142358078406056&w=2","source":"security@debian.org"},{"url":"http://marc.info/?l=bugtraq&m=142721162228379&w=2","source":"security@debian.org"},{"url":"http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html","source":"security@debian.org"},{"url":"http://secunia.com/advisories/58200","source":"security@debian.org"},{"url":"http://secunia.com/advisories/59907","source":"security@debian.org"},{"url":"http://secunia.com/advisories/59961","source":"security@debian.org"},{"url":"http://secunia.com/advisories/60024","source":"security@debian.org"},{"url":"http://secunia.com/advisories/60034","source":"security@debian.org"},{"url":"http://secunia.com/advisories/60044","source":"security@debian.org"},{"url":"http://secunia.com/advisories/60055","source":"security@debian.org"},{"url":"http://secunia.com/advisories/60063","source":"security@debian.org"},{"url":"http://secunia.com/advisories/60193","source":"security@debian.org"},{"url":"http://secunia.com/advisories/60325","source":"security@debian.org"},{"url":"http://secunia.com/advisories/60433","source":"security@debian.org"},{"url":"http://secunia.com/advisories/61065","source":"security@debian.org"},{"url":"http://secunia.com/advisories/61128","source":"security@debian.org"},{"url":"http://secunia.com/advisories/61129","source":"security@debian.org"},{"url":"http://secunia.com/advisories/61283","source":"security@debian.org"},{"url":"http://secunia.com/advisories/61287","source":"security@debian.org"},{"url":"http://secunia.com/advisories/61291","source":"security@debian.org"},{"url":"http://secunia.com/advisories/61312","source":"security@debian.org"},{"url":"http://secunia.com/advisories/61313","source":"security@debian.org"},{"url":"http://secunia.com/advisories/61328","source":"security@debian.org"},{"url":"http://secunia.com/advisories/61442","source":"security@debian.org"},{"url":"http://secunia.com/advisories/61471","source":"security@debian.org"},{"url":"http://secunia.com/advisories/61485","source":"security@debian.org"},{"url":"http://secunia.com/advisories/61503","source":"security@debian.org"},{"url":"http://secunia.com/advisories/61550","source":"security@debian.org"},{"url":"http://secunia.com/advisories/61552","source":"security@debian.org"},{"url":"http://secunia.com/advisories/61565","source":"security@debian.org"},{"url":"http://secunia.com/advisories/61603","source":"security@debian.org"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2014-6277","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}