Two vulnerabilities have been reported in GNU Bash, where one has an unknown impact and the other can be exploited by malicious people to cause a DoS (Denial of Service) or potentially compromise a vulnerable system.
1) A boundary error when handling here documents can be exploited to cause a buffer overflow.
Successful exploitation of this vulnerability may allow execution of arbitrary code.
2) An off-by-one error when handling nested flow control structures can be exploited to cause a buffer overflow.
The vulnerabilities are reported in versions 3.2 through 4.3. Other versions may also be affected.
