CVE-2014-6271
Fixed in a distro release ExploitedEPSS 100%CVSS 9.8
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka "ShellShock." NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.
Products: gnu bash, arista eos, oracle linux, qnap qts, mageia, redhat gluster_storage_server_for_on-premise, redhat virtualization, redhat enterprise_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_eus, redhat enterprise_linux_for_ibm_z_systems, redhat enterprise_linux_for_power_big_endian, redhat enterprise_linux_for_power_big_endian_eus, redhat enterprise_linux_for_scientific_computing, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_from_rhui, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation, suse studio_onsite, opensuse, suse linux_enterprise_desktop, suse linux_enterprise_server, suse linux_enterprise_software_development_kit, debian_linux, ibm infosphere_guardium_database_activity_monitoring, ibm pureapplication_system, ibm qradar_risk_manager, ibm qradar_security_information_and_event_manager, ibm qradar_vulnerability_manager, ibm smartcloud_entry_appliance, ibm smartcloud_provisioning, ibm software_defined_network_for_virtual_environments, ibm starter_kit_for_cloud, ibm workload_deployer, ibm security_access_manager_for_mobile_8.0_firmware, ibm security_access_manager_for_web_7.0_firmware, ibm security_access_manager_for_web_8.0_firmware, ibm storwize_v7000_firmware, ibm storwize_v5000_firmware, ibm storwize_v3700_firmware, ibm storwize_v3500_firmware, ibm flex_system_v7000_firmware, ibm san_volume_controller_firmware, ibm stn6500_firmware, ibm stn6800_firmware, ibm stn7800_firmware, canonical ubuntu_linux, novell zenworks_configuration_management, novell open_enterprise_server, checkpoint security_gateway, f5 big-ip_access_policy_manager, f5 big-ip_advanced_firewall_manager, f5 big-ip_analytics, f5 big-ip_application_acceleration_manager, f5 big-ip_application_security_manager, f5 big-ip_edge_gateway, f5 big-ip_global_traffic_manager, f5 big-ip_link_controller, f5 big-ip_local_traffic_manager, f5 big-ip_policy_enforcement_manager, f5 big-ip_protocol_security_module, f5 big-ip_wan_optimization_manager, f5 big-ip_webaccelerator, f5 big-iq_cloud, f5 big-iq_device, f5 big-iq_security, f5 enterprise_manager, f5 traffix_signaling_delivery_controller, f5 arx_firmware, citrix netscaler_sdx_firmware, apple mac_os_x, vmware vcenter_server_appliance, vmware esx
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | bash | 4.3-9.1 |
| Debian 13 | bash | 4.3-9.1 |
| Debian 14 | bash | 4.3-9.1 |
| Debian 6.0 | bash | 4.1-3+deb6u1 |
| Debian 7 | bash | 4.2+dfsg-0.1+deb7u1 |
| Red Hat Enterprise Linux 5 | bash | 0:3.2-33.el5.1 |
| Red Hat Enterprise Linux 5 | bash-debuginfo | 0:3.2-33.el5.1 |
| Red Hat Enterprise Linux 6 | bash | 0:4.1.2-15.el6_5.1 |
| Red Hat Enterprise Linux 6 | bash-debuginfo | 0:4.1.2-15.el6_5.1 |
| Red Hat Enterprise Linux 6 | bash-doc | 0:4.1.2-15.el6_5.1 |
| Red Hat Enterprise Linux 7 | bash | 0:4.2.45-5.el7_0.2 |
| Red Hat Enterprise Linux 7 | bash-debuginfo | 0:4.2.45-5.el7_0.2 |
| Red Hat Enterprise Linux 7 | bash-doc | 0:4.2.45-5.el7_0.2 |
| Red Hat rhel els 4 | bash | 0:3.0-27.el4.2 |
| Red Hat rhel els 4 | bash-debuginfo | 0:3.0-27.el4.2 |
| Red Hat rhel eus 5.9 | bash | 0:3.2-32.el5_9.2 |
| Red Hat rhel eus 5.9 | bash-debuginfo | 0:3.2-32.el5_9.2 |
| Red Hat rhel eus 6.4 | bash | 0:4.1.2-15.el6_4.1 |
| Red Hat rhel eus 6.4 | bash-debuginfo | 0:4.1.2-15.el6_4.1 |
| Red Hat rhel eus 6.4 | bash-doc | 0:4.1.2-15.el6_4.1 |
| Red Hat rhel mission critical 5.6 | bash | 0:3.2-24.el5_6.1 |
| Red Hat rhel mission critical 5.6 | bash-debuginfo | 0:3.2-24.el5_6.1 |
| Red Hat rhel mission critical 6.2 | bash | 0:4.1.2-9.el6_2.1 |
| Red Hat rhel mission critical 6.2 | bash-debuginfo | 0:4.1.2-9.el6_2.1 |
| Red Hat rhel mission critical 6.2 | bash-doc | 0:4.1.2-9.el6_2.1 |
| Red Hat rhel sjis 5 | bash | 0:3.2-33.el5_11.1.sjis.1 |
| Red Hat rhel sjis 5 | bash-debuginfo | 0:3.2-33.el5_11.1.sjis.1 |
| Red Hat rhel sjis 6 | bash | 0:4.1.2-15.el6_5.1.sjis.1 |
| Red Hat rhel sjis 6 | bash-debuginfo | 0:4.1.2-15.el6_5.1.sjis.1 |
| Red Hat rhel sjis 6 | bash-doc | 0:4.1.2-15.el6_5.1.sjis.1 |
| Red Hat rhev manager 3 | rhev-hypervisor6 | 0:6.5-20140930.1.el6ev |
| Ubuntu 14.04 LTS | bash | 4.3-7ubuntu1.1 |
| openSUSE Tumbleweed | bash | 7.0-92.1 |