# CVE-2014-6271 (Shellshock) GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka "ShellShock." NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix. - Page: https://www.vulneraibility.com/cve/CVE-2014-6271 - CVSS: 9.8 - Known exploited: yes, in CISA KEV since 2022-01-28; CISA due date 2022-07-28 - EPSS: 100.00% (percentile 100.0) - Public exploit code: 21 on Exploit-DB · 10 Metasploit modules · 96 GitHub proofs of concept · 1 Nuclei template (first 2014-09-24) - CISA SSVC: exploitation active, automatable yes, technical impact total (assessed 2025-02-07) - Weakness: CWE-78 - Published: 2014-09-24 ## Affected - gnu:bash - arista:eos - oracle:linux - qnap:qts - mageia:mageia - redhat:gluster_storage_server_for_on-premise - redhat:virtualization - redhat:enterprise_linux - redhat:enterprise_linux_desktop - redhat:enterprise_linux_eus - redhat:enterprise_linux_for_ibm_z_systems - redhat:enterprise_linux_for_power_big_endian - redhat:enterprise_linux_for_power_big_endian_eus - redhat:enterprise_linux_for_scientific_computing - redhat:enterprise_linux_server - redhat:enterprise_linux_server_aus - redhat:enterprise_linux_server_from_rhui - redhat:enterprise_linux_server_tus - redhat:enterprise_linux_workstation - suse:studio_onsite - opensuse:opensuse - suse:linux_enterprise_desktop - suse:linux_enterprise_server - suse:linux_enterprise_software_development_kit - debian:debian_linux - ibm:infosphere_guardium_database_activity_monitoring - ibm:pureapplication_system - ibm:qradar_risk_manager - ibm:qradar_security_information_and_event_manager - ibm:qradar_vulnerability_manager ## References - [exploit] https://www.exploit-db.com/exploits/37816/ - [other] http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.html - [advisory] http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00034.html - [other] http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897 - [other] http://www-01.ibm.com/support/docview.wss?uid=swg21685749 - [advisory] http://marc.info/?l=bugtraq&m=141577137423233&w=2 - [advisory] http://marc.info/?l=bugtraq&m=142719845423222&w=2 - [exploit] https://www.exploit-db.com/exploits/39918/ - [advisory] http://marc.info/?l=bugtraq&m=141216668515282&w=2 - [advisory] http://rhn.redhat.com/errata/RHSA-2014-1295.html - [advisory] http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00037.html - [other] https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/ - [other] https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk102673&src=securityAlerts - [advisory] http://marc.info/?l=bugtraq&m=141383138121313&w=2 - [advisory] http://marc.info/?l=bugtraq&m=142721162228379&w=2 - [other] http://www.securityfocus.com/archive/1/533593/100/0/threaded - [advisory] http://marc.info/?l=bugtraq&m=142358026505815&w=2 - [other] http://www-01.ibm.com/support/docview.wss?uid=swg21686084 - [other] http://www-01.ibm.com/support/docview.wss?uid=swg21686479 - [advisory] http://secunia.com/advisories/61188 - [other] http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0 - [advisory] http://jvn.jp/en/jp/JVN55667175/index.html - [advisory] http://secunia.com/advisories/61676 - [exploit] https://www.exploit-db.com/exploits/40619/ - [advisory] http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.html - [advisory] http://secunia.com/advisories/60433 - [exploit] https://www.exploit-db.com/exploits/38849/ - [advisory] http://marc.info/?l=bugtraq&m=141383026420882&w=2 - [advisory] http://marc.info/?l=bugtraq&m=141585637922673&w=2 - [other] http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673 - [advisory] http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00049.html - [advisory] http://marc.info/?l=bugtraq&m=141576728022234&w=2 - [other] http://www-01.ibm.com/support/docview.wss?uid=swg21685541 - [advisory] http://secunia.com/advisories/61715 - [other] http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html - [advisory] http://secunia.com/advisories/61816 - [advisory] http://lists.opensuse.org/opensuse-updates/2014-10/msg00025.html - [advisory] http://secunia.com/advisories/61442 - [advisory] http://marc.info/?l=bugtraq&m=142358078406056&w=2 - [advisory] http://marc.info/?l=bugtraq&m=142805027510172&w=2 - [advisory] http://secunia.com/advisories/61283 - [advisory] http://marc.info/?l=bugtraq&m=142113462216480&w=2 - [advisory] http://www.ubuntu.com/usn/USN-2362-1 - [other] https://kc.mcafee.com/corporate/index?page=content&id=SB10085 - [advisory] http://lists.opensuse.org/opensuse-updates/2014-10/msg00023.html - [advisory] http://secunia.com/advisories/61654 - [advisory] http://secunia.com/advisories/61542 - [other] http://www.novell.com/support/kb/doc.php?id=7015701 - [other] http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315 - [advisory] http://secunia.com/advisories/62312 --- Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.