https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 11:38:59 +0000 https://vulnerability.circl.lu/vuln/cve-2014-7186 <p>The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted use of here documents, aka the &#34;redir_stack&#34; issue.</p> <p>The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted use of here documents, aka the &#34;redir_stack&#34; issue.</p> https://vulnerability.circl.lu/vuln/cve-2014-7186 https://vulnerability.circl.lu/vuln/usn-2364-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: bash</p> <p>Florian Weimer and Todd Sabin discovered that the Bash parser incorrectly handled memory. An attacker could possibly use this issue to bypass certain environment restrictions and execute arbitrary code. (CVE-2014-7186, CVE-2014-7187)</p> <p>In addition, this update introduces a hardening measure which adds prefixes and suffixes around environment variable names which contain shell functions.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: bash</p> <p>Florian Weimer and Todd Sabin discovered that the Bash parser incorrectly handled memory. An attacker could possibly use this issue to bypass certain environment restrictions and execute arbitrary code. (CVE-2014-7186, CVE-2014-7187)</p> <p>In addition, this update introduces a hardening measure which adds prefixes and suffixes around environment variable names which contain shell functions.</p> https://vulnerability.circl.lu/vuln/usn-2364-1