CVE-2014-7187

critical

Published 2014-09-28 · Modified 2026-05-06

CVSS v3

—

CVSS v2

10.0

VIR risk

10.0

Description

Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via deeply nested for loops, aka the "word_lineno" issue.

Predictions

Exploit likelihood

20%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2014-7187

OS impact

OS	Version	Status	Fixed in
debian	bookworm	fixed	`4.3-9.2`
debian	bullseye	fixed	`4.3-9.2`
debian	forky	fixed	`4.3-9.2`
debian	sid	fixed	`4.3-9.2`
debian	trixie	fixed	`4.3-9.2`

Application impact

Vendor	Product	Versions
gnu	bash	`1.14.0`
gnu	bash	`1.14.1`
gnu	bash	`1.14.2`
gnu	bash	`1.14.3`
gnu	bash	`1.14.4`
gnu	bash	`1.14.5`
gnu	bash	`1.14.6`
gnu	bash	`1.14.7`
gnu	bash	`2.0`
gnu	bash	`2.01`
gnu	bash	`2.01.1`
gnu	bash	`2.02`
gnu	bash	`2.02.1`
gnu	bash	`2.03`
gnu	bash	`2.04`
gnu	bash	`2.05`
gnu	bash	`3.0`
gnu	bash	`3.0.16`
gnu	bash	`3.1`
gnu	bash	`3.2`
gnu	bash	`3.2.48`
gnu	bash	`4.0`
gnu	bash	`4.1`
gnu	bash	`4.2`
gnu	bash	`4.3`

References

CWEs

CWE-119

Verify integrity in audit chain (admin only). AS-IS.