Off-by-one Error in GNU Bash Leading to Denial of Service

CVE-2014-7187

Summary

A vulnerability exists in GNU Bash due to an off-by-one error in the read_token_word function found in parse.y. This flaw allows attackers to trigger a denial of service condition by exploiting deeply nested for loops, potentially leading to out-of-bounds array access and application crashes. The vulnerability highlights significant security risks associated with inadequate input validation.

References