CVE-2014-6271
GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
GNU · Bourne-Again Shell (Bash)
Vulnerability details
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.
Added to CISA KEV: 2022-01-28
Ransomware campaign use: Unknown
CISA due date: 2022-07-28
Defensive guidance from CISA
Apply updates per vendor instructions.
This is the source's required-action field, not an independently validated patch procedure. Refer to the vendor for exact affected versions and fixes.
Source catalog date: 2026-11-06T19:44:45.1797Z · Last retrieved: 2026-11-06 21:02:26 UTC