GNU Bourne-Again SHellbash (GNU Bash) 2.02.1
Approved changes feed: RSS · Atom
cpe:2.3:a:gnu:bash:2.02.1:*:*:*:*:*:*:*
part: a version: 2.02.1 update: *
| Vendor | Gnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9) |
|---|---|
| Product | Bash (079666e7-d9bd-5cfd-adba-02c753f8876b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/bash |
purl2cpe | 2026-06-01 10:11:54.259225 |
pkg:deb/ubuntu/bash |
purl2cpe | 2026-06-01 10:11:54.259226 |
pkg:github/bminor/bash |
purl2cpe | 2026-06-01 10:11:54.259227 |
pkg:github/gitgnu/gnu_bash |
purl2cpe | 2026-06-01 10:11:54.259229 |
pkg:gitlab/redhat/bash |
purl2cpe | 2026-06-01 10:11:54.259230 |
pkg:gnu/bash |
purl2cpe | 2026-06-01 10:11:54.259232 |
pkg:rpm/centos/bash |
purl2cpe | 2026-06-01 10:11:54.259233 |
pkg:rpm/fedora/bash |
purl2cpe | 2026-06-01 10:11:54.259234 |
pkg:rpm/opensuse/bash |
purl2cpe | 2026-06-01 10:11:54.259236 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-7187 |
vulnerable | 2026-06-08 05:05:58.873598 |
Details available
Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via deeply nested for loops, aka the "word_lineno" issue.
Published: 2014-09-28T19:00:00.000Z
Updated: 2024-08-06T12:40:19.211Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-7186 |
vulnerable | 2026-06-08 05:05:58.871073 |
Details available
The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted use of here documents, aka the "redir_stack" issue.
Published: 2014-09-28T19:00:00.000Z
Updated: 2024-08-06T12:40:19.198Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-6278 |
vulnerable | 2026-06-08 05:05:57.310179 |
Details available
GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary commands via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271, CVE-2014-7169, and CVE-2014-6277.
Published: 2014-09-30T10:00:00.000Z
Updated: 2025-12-30T20:24:56.789Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-6277 |
vulnerable | 2026-06-08 05:05:57.298995 |
Details available
GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized memory access, and untrusted-pointer read and write operations) via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271 and CVE-2014-7169.
Published: 2014-09-27T22:00:00.000Z
Updated: 2024-08-06T12:10:13.286Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-1999-0491 |
vulnerable | 2026-06-08 04:44:58.048734 |
Details available
The prompt parsing in bash allows a local user to execute commands as another user by creating a directory with the name of the command to execute.
Published: 2000-06-02T04:00:00.000Z
Updated: 2024-08-01T16:41:45.463Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.