CVE-2014-6271
Description
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka "ShellShock." NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.
How to fix
Apply updates per vendor instructions.
CISA due date: Jul 28, 2022- arista eos4.9.12, 4.10.9, 4.11.11, 4.12.9, 4.13.9, 4.14.4f or later
- qnap qts4.1.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gnu bash | v ≤ 4.3 | — |
| arista eos | 4.9.0 ≤ v < 4.9.12, 4.10.0 ≤ v < 4.10.9, 4.11.0 ≤ v < 4.11.11, 4.12.0 ≤ v < 4.12.9, 4.13.0 ≤ v < 4.13.9, 4.14.0 ≤ v < 4.14.4f | 4.9.12, 4.10.9, 4.11.11, 4.12.9, 4.13.9, 4.14.4f |
| oracle linux | 4, 5, 6 | — |
| qnap qts | v < 4.1.1, 4.1.1 | 4.1.1 |
| mageia mageia | 3.0, 4.0 | — |
| redhat gluster_storage_server_for_on-premise | 2.1 | — |
| redhat virtualization | 3.4 | — |
| redhat enterprise_linux | 4.0, 5.0, 6.0, 7.0 | — |
| redhat enterprise_linux_desktop | 5.0, 6.0, 7.0 | — |
| redhat enterprise_linux_eus | 5.9, 6.4, 6.5, 7.3, 7.4, 7.5, 7.6, 7.7 | — |
| redhat enterprise_linux_for_ibm_z_systems | 5.9_s390x, 6.4_s390x, 6.5_s390x, 7.3_s390x, 7.4_s390x, 7.5_s390x, 7.6_s390x, 7.7_s390x | — |
| redhat enterprise_linux_for_power_big_endian | 5.0_ppc, 5.9_ppc, 6.0_ppc64, 6.4_ppc64, 7.0_ppc64 | — |
| redhat enterprise_linux_for_power_big_endian_eus | 6.5_ppc64, 7.3_ppc64, 7.4_ppc64, 7.5_ppc64, 7.6_ppc64, 7.7_ppc64 | — |
| redhat enterprise_linux_for_scientific_computing | 6.0, 7.0 | — |
| redhat enterprise_linux_server | 5.0, 6.0, 7.0 | — |
| redhat enterprise_linux_server_aus | 5.6, 5.9, 6.2, 6.4, 6.5, 7.3, 7.4, 7.6, 7.7 | — |
| redhat enterprise_linux_server_from_rhui | 5.0, 6.0, 7.0 | — |
| redhat enterprise_linux_server_tus | 6.5, 7.3, 7.6, 7.7 | — |
| redhat enterprise_linux_workstation | 5.0, 6.0, 7.0 | — |
| suse studio_onsite | 1.3 | — |
| opensuse opensuse | 12.3, 13.1, 13.2 | — |
| suse linux_enterprise_desktop | 11, 12 | — |
| suse linux_enterprise_server | 10, 11, 12 | — |
| suse linux_enterprise_software_development_kit | 11, 12 | — |
| debian debian_linux | 7.0 | — |
| ibm infosphere_guardium_database_activity_monitoring | 8.2, 9.0, 9.1 | — |
| ibm pureapplication_system | 1.0.0.0 ≤ v ≤ 1.0.0.4, 1.1.0.0 ≤ v ≤ 1.1.0.4, 2.0.0.0 | — |
| ibm qradar_risk_manager | 7.1.0 | — |
| ibm qradar_security_information_and_event_manager | 7.1.0, 7.1.1, 7.1.2, 7.2, 7.2.0, 7.2.1, 7.2.2, 7.2.3, 7.2.4, 7.2.5, 7.2.6, 7.2.7, 7.2.8, 7.2.8.15, 7.2.9 | — |
| ibm qradar_vulnerability_manager | 7.2.0, 7.2.1, 7.2.2, 7.2.3, 7.2.4, 7.2.6, 7.2.8 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.