Industrial Cybersecurity Threat Briefing
“Vulnerability Summary for CVE-2014-7187,” National Vulnerability Database, September 28, 2014, modified October 9,…
2 passages name itOriginal (opens in a new tab) ↗
CVE-2014-7187 Public exploit EPSS 60.3%
Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers…
Summary
The flaw is an off-by-one error in the read_token_word function in parse.y of GNU Bash through version 4.3 (bash43-026), which is the component that parses shell input. An attacker who can supply input that Bash parses can trigger deeply nested for loops to cause an out-of-bounds array access, resulting in a denial of service via application crash and possibly other unspecified impact.
Official description · CVE.org
Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via deeply nested for loops, aka the "word_lineno" issue.
Priority scorePatchfirst’s 0 to 100 ranking. It adds points for CISA KEV listing, ransomware use, EPSS, threat reports, public exploit code and CVSS. Every CVE page shows the breakdown. Breakdown
63.7 / 100
- Exploited
- Yes, in VulnCheck KEV
- Reports
- 1
- Tactics
- 0/15
Exploitation timelineDated milestones for a CVE: when it was disclosed, when exploit code became public, when exploitation was confirmed, and when threat reports named it.
First seen exploited 3 years after disclosure. Public exploit code (Exploit-DB) appeared 1 day after disclosure.
- Disclosedday 0
- Public exploit codeExploit-DB+1 day
- First seen exploitedVulnCheck KEV evidence+3 yrs
MITRE ATT&CKA public catalogue of the techniques attackers use, maintained by MITRE. Patchfirst uses it to describe what attackers do with a vulnerability. techniques
No techniques linkedNo high- or medium-confidence techniques. The 4 available links are lower confidence and listed below.
Lower-confidence links (4)
These come from early or generic mappings, text matching, or contradict this CVE’s details (for example a public-facing technique on a bug that needs a user to open a file). Shown for completeness.
- Drive-by CompromiseT1189 CTID attack_to_cve Phase 1 "Uncategorized" mapping (not staged by impact)
- Exploitation for Client ExecutionT1203 CTID attack_to_cve Phase 1 "Uncategorized" mapping (not staged by impact)
- Malicious FileT1204.002 CTID attack_to_cve Phase 1 "Uncategorized" mapping (not staged by impact)
- Application or System ExploitationT1499.004 CTID attack_to_cve Phase 1 "Uncategorized" mapping (not staged by impact)
What security researchers reported
Named in 1 threat report1 reportboozallen.com
Reports are matched by finding the exact id CVE-2014-7187 in their text; nobody has reviewed the match. One passage is shown per report, at most 320 characters, linked to the original.