CVE-2014-7187

CVE-2014-7187 is an off-by-one error in the read_token_word function of GNU Bash through version 4.3 bash43-026. This vulnerability, also known as the "word_lineno" issue, can be triggered by deeply nested for loops. It carries a critical CVSS score of 10.0, indicating a network-exploitable vulnerability with low attack complexity that can lead to a complete denial of service (application crash) and potentially other unspecified impacts, including full compromise of confidentiality, integrity, and availability. While not listed in KEV, its high EPSS and FAUCET Risk Score, along with significant community discussion and media coverage, suggest widespread awareness and potential for exploitation. Although no direct Metasploit or Nuclei exploits are listed for CVE-2014-7187 specifically, it is often discussed alongside other Shellshock-related vulnerabilities, and tools exist to test for its presence.