NetSight
IP …
critical9.8Known exploitedPublic exploit code

CVE-2014-6271

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

Exploited in the wild

This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-01-28. Federal due date: 2022-07-28.

Apply updates per vendor instructions.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka "ShellShock." NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.

Affected products

VendorProductAffected versions
GnuBash
through 4.3
AristaEos
from 4.9.0 before 4.9.12
from 4.10.0 before 4.10.9
from 4.11.0 before 4.11.11
from 4.12.0 before 4.12.9
from 4.13.0 before 4.13.9
from 4.14.0 before 4.14.4f
OracleLinux
Versions 4, 5, 6
QnapQts
before 4.1.1
Version 4.1.1
MageiaMageia
Versions 3.0, 4.0
RedhatGluster Storage Server For On-Premise
Version 2.1
RedhatVirtualization
Version 3.4
RedhatEnterprise Linux
Versions 4.0, 5.0, 6.0, 7.0
RedhatEnterprise Linux Desktop
Versions 5.0, 6.0, 7.0
RedhatEnterprise Linux Eus
Versions 5.9, 6.4, 6.5, 7.3, 7.4, 7.5
RedhatEnterprise Linux For Ibm Z Systems
Versions 5.9_s390x, 6.4_s390x, 6.5_s390x, 7.3_s390x, 7.4_s390x, 7.5_s390x
RedhatEnterprise Linux For Power Big Endian
Versions 5.0_ppc, 5.9_ppc, 6.0_ppc64, 6.4_ppc64, 7.0_ppc64

Weakness classification

CWE-78

References