Tracker / CVE-2014-6271
CVE-2014-6271
Exploited Critical 9.8
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka "ShellShock." NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.
Affected products and versions
| apple | mac_os_x · 10.0.0 → 10.10.0 |
|---|---|
| arista | eos · 4.10.0 → 4.10.9 |
| arista | eos · 4.11.0 → 4.11.11 |
| arista | eos · 4.12.0 → 4.12.9 |
| arista | eos · 4.13.0 → 4.13.9 |
| arista | eos · 4.14.0 → 4.14.4f |
| arista | eos · 4.9.0 → 4.9.12 |
| canonical | ubuntu_linux |
| checkpoint | security_gateway · … → r77.30 |
| citrix | netscaler_sdx_firmware · … → 9.3.67.5r1 |
| citrix | netscaler_sdx_firmware · 10 → 10.1.129.11r1 |
| citrix | netscaler_sdx_firmware · 10.5 → 10.5.52.11r1 |
| debian | debian_linux |
| f5 | arx_firmware · 6.0.0 → 6.4.0 |
| f5 | big-ip_access_policy_manager |
| f5 | big-ip_access_policy_manager · 10.1.0 → 10.2.4 |
| f5 | big-ip_access_policy_manager · 11.0.0 → 11.5.1 |
| f5 | big-ip_advanced_firewall_manager |
| f5 | big-ip_advanced_firewall_manager · 11.3.0 → 11.5.1 |
| f5 | big-ip_analytics |
| f5 | big-ip_analytics · 11.0.0 → 11.5.1 |
| f5 | big-ip_application_acceleration_manager |
| f5 | big-ip_application_acceleration_manager · 11.4.0 → 11.5.1 |
| f5 | big-ip_application_security_manager |
| f5 | big-ip_application_security_manager · 10.0.0 → 10.2.4 |
| f5 | big-ip_application_security_manager · 11.0.0 → 11.5.1 |
| f5 | big-ip_edge_gateway · 10.1.0 → 10.2.4 |
| f5 | big-ip_edge_gateway · 11.0.0 → 11.3.0 |
| f5 | big-ip_global_traffic_manager |
| f5 | big-ip_global_traffic_manager · 10.0.0 → 10.2.4 |
| f5 | big-ip_global_traffic_manager · 11.0.0 → 11.5.1 |
| f5 | big-ip_link_controller |
| f5 | big-ip_link_controller · 10.0.0 → 10.2.4 |
| f5 | big-ip_link_controller · 11.0.0 → 11.5.1 |
| f5 | big-ip_local_traffic_manager |
| f5 | big-ip_local_traffic_manager · 10.0.0 → 10.2.4 |
| f5 | big-ip_local_traffic_manager · 11.0.0 → 11.5.1 |
| f5 | big-ip_policy_enforcement_manager |
| f5 | big-ip_policy_enforcement_manager · 11.3.0 → 11.5.1 |
| f5 | big-ip_protocol_security_module · 10.0.0 → 10.2.4 |
| f5 | big-ip_protocol_security_module · 11.0.0 → 11.4.1 |
| f5 | big-ip_wan_optimization_manager · 10.0.0 → 10.2.4 |
| f5 | big-ip_wan_optimization_manager · 11.0.0 → 11.3.0 |
| f5 | big-ip_webaccelerator · 10.0.0 → 10.2.4 |
| f5 | big-ip_webaccelerator · 11.0.0 → 11.3.0 |
| f5 | big-iq_cloud · 4.0.0 → 4.4.0 |
| f5 | big-iq_device · 4.2.0 → 4.4.0 |
| f5 | big-iq_security · 4.0.0 → 4.4.0 |
| f5 | enterprise_manager · 2.1.0 → 2.3.0 |
| f5 | enterprise_manager · 3.0.0 → 3.1.1 |
| f5 | traffix_signaling_delivery_controller |
| f5 | traffix_signaling_delivery_controller · 4.0.0 → 4.0.5 |
| gnu | bash · … → 4.3 |
| ibm | flex_system_v7000_firmware · 1.1.0.0 → 7.1.0.11 |
| ibm | flex_system_v7000_firmware · 7.2.0.0 → 7.2.0.9 |
| ibm | flex_system_v7000_firmware · 7.3.0.0 → 7.3.0.7 |
| ibm | infosphere_guardium_database_activity_monitoring |
| ibm | pureapplication_system |
| ibm | pureapplication_system · 1.0.0.0 → 1.0.0.4 |
| ibm | pureapplication_system · 1.1.0.0 → 1.1.0.4 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.