| Package | Affected versions | Patched versions |
|---|---|---|
| bash | = 1.14.0= 1.14.1= 1.14.2= 1.14.3= 1.14.4= 1.14.5= 1.14.6= 1.14.7= 2.0= 2.01= 2.01.1= 2.02= 2.02.1= 2.03= 2.04= 2.05= 3.0= 3.0.16= 3.1= 3.2= 3.2.48= 4.0= 4.1= 4.2= 4.3 |
Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via deeply nested for loops, aka the "word_lineno" issue.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free