{"id":"CVE-2014-7169","url":"https://www.cyber-defence.io/tools/cve/CVE-2014-7169","generatedAt":"2026-10-31T22:34:08.184Z","title":"GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability","description":"GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271.","published":"2014-09-25T01:55:04.000Z","lastModified":"2026-06-17T00:14:28.000Z","status":"Analyzed","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.1","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-78"],"affected":["gnu/bash","arista/eos","oracle/linux","qnap/qts","mageia/mageia","redhat/gluster storage server for on-premise","redhat/virtualization","redhat/enterprise linux","redhat/enterprise linux desktop","redhat/enterprise linux eus","redhat/enterprise linux for ibm z systems","redhat/enterprise linux for power big endian","redhat/enterprise linux for power big endian eus","redhat/enterprise linux for scientific computing","redhat/enterprise linux server","redhat/enterprise linux server aus","redhat/enterprise linux server from rhui","redhat/enterprise linux server tus","redhat/enterprise linux workstation","suse/studio onsite","opensuse/opensuse","suse/linux enterprise desktop","suse/linux enterprise server","suse/linux enterprise software development kit","debian/debian linux","ibm/infosphere guardium database activity monitoring","ibm/pureapplication system","ibm/qradar risk manager","ibm/qradar security information and event manager","ibm/qradar vulnerability manager","ibm/smartcloud entry appliance","ibm/smartcloud provisioning","ibm/software defined network for virtual environments","ibm/starter kit for cloud","ibm/workload deployer","ibm/security access manager for mobile 8.0 firmware","ibm/security access manager for web 7.0 firmware","ibm/security access manager for web 8.0 firmware","ibm/storwize v7000 firmware","ibm/storwize v5000 firmware","ibm/storwize v3700 firmware","ibm/storwize v3500 firmware","ibm/flex system v7000 firmware","ibm/san volume controller firmware","ibm/stn6500 firmware","ibm/stn6800 firmware","ibm/stn7800 firmware","canonical/ubuntu linux","novell/zenworks configuration management","novell/open enterprise server","checkpoint/security gateway","f5/big-ip access policy manager","f5/big-ip advanced firewall manager","f5/big-ip analytics","f5/big-ip application acceleration manager","f5/big-ip application security manager","f5/big-ip edge gateway","f5/big-ip global traffic manager","f5/big-ip link controller","f5/big-ip local traffic manager"],"epss":{"score":0.9994,"percentile":0.99972,"date":"2026-10-30","history":[]},"kev":{"listed":true,"dateAdded":"2022-01-28","dueDate":"2022-07-28","knownRansomwareCampaignUse":"Unknown","notes":"Apply updates per vendor instructions.\nhttps://nvd.nist.gov/vuln/detail/CVE-2014-7169"},"exploits":{"count":15,"verified":true,"firstPublished":"2014-09-25","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":36609,"kind":"exploit","title":"Kemp Load Master 7.1.16 - Multiple Vulnerabilities","url":"https://www.exploit-db.com/exploits/36609","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/webapps/36609.txt","file":"exploits/multiple/webapps/36609.txt","published":"2015-04-02","added":"2015-04-02","updated":"2015-04-02","author":"Roberto Suggi Liverani","type":"webapps","platform":"multiple","port":80,"verified":false,"codes":["CVE-2014-7910","CVE-2014-7227","CVE-2014-7196","CVE-2014-7169","CVE-2014-62771","CVE-2014-6271","CVE-2014-5288","CVE-2014-5287","CVE-2014-3671","OSVDB-120255","CVE-2014-3659","OSVDB-120254","OSVDB-120253","OSVDB-120252","OSVDB-120251","OSVDB-120250","OSVDB-120249","OSVDB-112004"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null},{"edbId":36504,"kind":"exploit","title":"QNAP - Web Server Remote Code Execution via Bash Environment Variable Code Injection (Metasploit)","url":"https://www.exploit-db.com/exploits/36504","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/hardware/remote/36504.rb","file":"exploits/hardware/remote/36504.rb","published":"2015-03-26","added":"2015-03-26","updated":"2015-03-26","author":"Patrick Pellegrino","type":"remote","platform":"hardware","port":null,"verified":false,"codes":["CVE-2014-7910","OSVDB-112004","CVE-2014-7227","CVE-2014-7196","CVE-2014-7169","CVE-2014-62771","CVE-2014-6271","CVE-2014-3671","CVE-2014-3659"],"tags":"Metasploit Framework (MSF)","aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"https://github.com/d3vpp/metasploit-modules"},{"edbId":36503,"kind":"exploit","title":"QNAP - Admin Shell via Bash Environment Variable Code Injection (Metasploit)","url":"https://www.exploit-db.com/exploits/36503","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/hardware/remote/36503.rb","file":"exploits/hardware/remote/36503.rb","published":"2015-03-26","added":"2015-03-26","updated":"2015-03-26","author":"Patrick Pellegrino","type":"remote","platform":"hardware","port":9993,"verified":false,"codes":["CVE-2014-7910","OSVDB-112004","CVE-2014-7227","CVE-2014-7196","CVE-2014-7169","CVE-2014-62771","CVE-2014-6271","CVE-2014-3671","CVE-2014-3659"],"tags":"Metasploit Framework (MSF)","aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"https://github.com/d3vpp/metasploit-modules"},{"edbId":35146,"kind":"exploit","title":"PHP < 5.6.2 - 'Shellshock' Safe Mode / disable_functions Bypass / Command Injection","url":"https://www.exploit-db.com/exploits/35146","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/35146.txt","file":"exploits/php/webapps/35146.txt","published":"2014-11-03","added":"2014-11-17","updated":"2020-02-14","author":"Ryan King (Starfall)","type":"webapps","platform":"php","port":null,"verified":false,"codes":["CVE-2014-7910","CVE-2014-7227","CVE-2014-7196","CVE-2014-7169","CVE-2014-62771","OSVDB-112004","CVE-2014-6271","CVE-2014-3671","CVE-2014-3659"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":"http://www.exploit-db.com/screenshots/misc/auxxrjf.png","referenceUrl":null},{"edbId":35115,"kind":"exploit","title":"CUPS Filter - Bash Environment Variable Code Injection (Metasploit)","url":"https://www.exploit-db.com/exploits/35115","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/35115.rb","file":"exploits/linux/remote/35115.rb","published":"2014-10-29","added":"2014-10-29","updated":"2014-10-29","author":"Metasploit","type":"remote","platform":"linux","port":631,"verified":true,"codes":["CVE-2014-7910","CVE-2014-7227","CVE-2014-7196","CVE-2014-7169","CVE-2014-62771","OSVDB-112004","CVE-2014-6271","CVE-2014-3671","CVE-2014-3659"],"tags":"Metasploit Framework (MSF)","aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null},{"edbId":34896,"kind":"exploit","title":"Postfix SMTP 4.2.x < 4.2.48 - 'Shellshock' Remote Command Injection","url":"https://www.exploit-db.com/exploits/34896","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/34896.py","file":"exploits/linux/remote/34896.py","published":"2014-10-06","added":"2014-10-06","updated":"2018-01-22","author":"Phil Blank","type":"remote","platform":"linux","port":null,"verified":true,"codes":["CVE-2014-7910","CVE-2014-7227","CVE-2014-7196","CVE-2014-7169","OSVDB-112004","CVE-2014-62771","CVE-2014-6271","CVE-2014-3671","CVE-2014-3659"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null},{"edbId":34895,"kind":"exploit","title":"Bash CGI - 'Shellshock' Remote Command Injection (Metasploit)","url":"https://www.exploit-db.com/exploits/34895","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/cgi/webapps/34895.rb","file":"exploits/cgi/webapps/34895.rb","published":"2014-10-06","added":"2014-10-06","updated":"2018-01-22","author":"Fady Mohammed Osman","type":"webapps","platform":"cgi","port":null,"verified":true,"codes":["CVE-2014-7910","CVE-2014-7227","CVE-2014-7196","CVE-2014-7169","OSVDB-112004","CVE-2014-62771","CVE-2014-6271","CVE-2014-3671","CVE-2014-3659"],"tags":"Metasploit Framework (MSF)","aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null},{"edbId":34879,"kind":"exploit","title":"OpenVPN 2.2.29 - 'Shellshock' Remote Command Injection","url":"https://www.exploit-db.com/exploits/34879","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/34879.txt","file":"exploits/linux/remote/34879.txt","published":"2014-10-04","added":"2014-10-06","updated":"2018-01-22","author":"hobbily plunt","type":"remote","platform":"linux","port":null,"verified":false,"codes":["CVE-2014-7910","CVE-2014-7227","CVE-2014-7196","CVE-2014-7169","OSVDB-112004","CVE-2014-62771","CVE-2014-6271","CVE-2014-3671","CVE-2014-3659"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null},{"edbId":34862,"kind":"exploit","title":"Pure-FTPd - External Authentication Bash Environment Variable Code Injection (Metasploit)","url":"https://www.exploit-db.com/exploits/34862","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/34862.rb","file":"exploits/linux/remote/34862.rb","published":"2014-10-02","added":"2014-10-02","updated":"2014-10-02","author":"Metasploit","type":"remote","platform":"linux","port":21,"verified":true,"codes":["CVE-2014-7910","OSVDB-112004","CVE-2014-7227","CVE-2014-7196","CVE-2014-7169","CVE-2014-62771","CVE-2014-6271","CVE-2014-3671","CVE-2014-3659"],"tags":"Metasploit Framework (MSF)","aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null},{"edbId":34860,"kind":"exploit","title":"GNU bash 4.3.11 - Environment Variable dhclient","url":"https://www.exploit-db.com/exploits/34860","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/34860.py","file":"exploits/linux/remote/34860.py","published":"2014-10-02","added":"2014-10-02","updated":"2014-10-02","author":"@0x00string","type":"remote","platform":"linux","port":null,"verified":false,"codes":["CVE-2014-7910","OSVDB-112169","CVE-2014-7227","CVE-2014-7196","CVE-2014-7187","CVE-2014-7186","CVE-2014-7169","CVE-2014-6278","CVE-2014-62771","OSVDB-112158","OSVDB-112097","OSVDB-112096","OSVDB-112004","CVE-2014-6277","CVE-2014-6271","CVE-2014-3671","CVE-2014-3659"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null},{"edbId":34839,"kind":"exploit","title":"IPFire - CGI Web Interface (Authenticated) Bash Environment Variable Code Injection","url":"https://www.exploit-db.com/exploits/34839","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/cgi/webapps/34839.py","file":"exploits/cgi/webapps/34839.py","published":"2014-10-01","added":"2014-10-01","updated":"2014-10-04","author":"Claudio Viviani","type":"webapps","platform":"cgi","port":null,"verified":true,"codes":["CVE-2014-7910","CVE-2014-7227","CVE-2014-7196","CVE-2014-7169","CVE-2014-62771","OSVDB-112004","CVE-2014-6271","CVE-2014-3671","CVE-2014-3659"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null},{"edbId":36933,"kind":"exploit","title":"dhclient 4.1 - Bash Environment Variable Command Injection (Shellshock)","url":"https://www.exploit-db.com/exploits/36933","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/36933.py","file":"exploits/linux/remote/36933.py","published":"2014-09-29","added":"2014-09-29","updated":"2017-11-15","author":"fdiskyou","type":"remote","platform":"linux","port":null,"verified":true,"codes":["CVE-2014-7187","CVE-2014-7186","CVE-2014-7169","CVE-2014-6278","CVE-2014-6277"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null},{"edbId":34777,"kind":"exploit","title":"GNU Bash - Environment Variable Command Injection (Metasploit)","url":"https://www.exploit-db.com/exploits/34777","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/cgi/remote/34777.rb","file":"exploits/cgi/remote/34777.rb","published":"2014-09-25","added":"2014-09-25","updated":"2014-09-25","author":"Shaun Colley","type":"remote","platform":"cgi","port":null,"verified":true,"codes":["CVE-2014-7910","OSVDB-112004","CVE-2014-7227","CVE-2014-7196","CVE-2014-7169","CVE-2014-62771","CVE-2014-6271","CVE-2014-3671","CVE-2014-3659"],"tags":"Metasploit Framework (MSF)","aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null},{"edbId":34766,"kind":"exploit","title":"Bash - 'Shellshock' Environment Variables Command Injection","url":"https://www.exploit-db.com/exploits/34766","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/34766.php","file":"exploits/linux/remote/34766.php","published":"2014-09-25","added":"2014-09-25","updated":"2018-01-22","author":"Prakhar Prasad & Subho Halder","type":"remote","platform":"linux","port":80,"verified":true,"codes":["CVE-2014-7910","OSVDB-112004","CVE-2014-7227","CVE-2014-7196","CVE-2014-7169","CVE-2014-62771","CVE-2014-6271","CVE-2014-3671","CVE-2014-3659"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null},{"edbId":34765,"kind":"exploit","title":"GNU Bash - 'Shellshock' Environment Variable Command Injection","url":"https://www.exploit-db.com/exploits/34765","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/34765.txt","file":"exploits/linux/remote/34765.txt","published":"2014-09-25","added":"2014-09-25","updated":"2018-01-22","author":"Stephane Chazelas","type":"remote","platform":"linux","port":null,"verified":true,"codes":["CVE-2014-7910","OSVDB-112004","CVE-2014-7227","CVE-2014-7196","CVE-2014-7169","CVE-2014-62771","CVE-2014-6271","CVE-2014-3671","CVE-2014-3659"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null}]},"verdict":{"level":"urgent","text":"Known to be exploited in the wild (CISA KEV, CISA remediation deadline 28 July 2022). Treat as an emergency change: patch or isolate now, then hunt for prior compromise."},"changes":[],"references":[{"url":"http://advisories.mageia.org/MGASA-2014-0393.html","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN55667175/index.html","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2014-000126","tags":["Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"http://lcamtuf.blogspot.com/2014/09/quick-notes-about-bash-bug-its-impact.html","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://linux.oracle.com/errata/ELSA-2014-1306.html","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://linux.oracle.com/errata/ELSA-2014-3075.html","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://linux.oracle.com/errata/ELSA-2014-3077.html","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://linux.oracle.com/errata/ELSA-2014-3078.html","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00038.html","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00041.html","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00042.html","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.html","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00048.html","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00004.html","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-10/msg00023.html","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-10/msg00025.html","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=141216207813411&w=2","tags":["Mailing List"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=141216668515282&w=2","tags":["Mailing List"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=141235957116749&w=2","tags":["Mailing List"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=141319209015420&w=2","tags":["Mailing List"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=141330425327438&w=2","tags":["Mailing List"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=141330468527613&w=2","tags":["Mailing List"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=141345648114150&w=2","tags":["Mailing List"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=141383026420882&w=2","tags":["Mailing List"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=141383081521087&w=2","tags":["Mailing List"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=141383138121313&w=2","tags":["Mailing List"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=141383196021590&w=2","tags":["Mailing List"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=141383244821813&w=2","tags":["Mailing List"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=141383304022067&w=2","tags":["Mailing List"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=141383353622268&w=2","tags":["Mailing List"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=141383465822787&w=2","tags":["Mailing List"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=141450491804793&w=2","tags":["Mailing List"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=141576728022234&w=2","tags":["Mailing List"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=141577137423233&w=2","tags":["Mailing List"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=141577241923505&w=2","tags":["Mailing List"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=141577297623641&w=2","tags":["Mailing List"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=141585637922673&w=2","tags":["Mailing List"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=141694386919794&w=2","tags":["Mailing List"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=141879528318582&w=2","tags":["Mailing List"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=142113462216480&w=2","tags":["Mailing List"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=142118135300698&w=2","tags":["Mailing List"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=142358026505815&w=2","tags":["Mailing List"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=142358078406056&w=2","tags":["Mailing List"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=142721162228379&w=2","tags":["Mailing List"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=142805027510172&w=2","tags":["Mailing List"],"source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.html","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1306.html","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1311.html","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1312.html","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1354.html","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2014/Oct/0","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/58200","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/59272","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/59737","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/59907","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/60024","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/60034","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/60044","tags":["Broken Link"],"source":"cve@mitre.org"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2014-7169","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}