Lucene search
K

CVE-2014-6271

🗓️ 24 Sep 2014 18:00:00Reported by debianType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 17 Media mentions👁 2827 Views🌐 WEB

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, allowing remote attackers to execute arbitrary code via crafted environment

Related
Detection
Refs
Paths
Social
ReporterTitlePublishedViews
Family
IBM Security Bulletins
Security Bulletin: Vulnerabilities in Bash affect IBM Workload Deployer (CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277, CVE-2014-6278)
15 Jun 201807:01
ibm
IBM Security Bulletins
Security Bulletin: Vulnerabilities in Bash affect SmartCloud Provisioning for IBM Provided Software Virtual Appliance
17 Jun 201822:30
ibm
IBM Security Bulletins
Security Bulletin: Vulnerabilities in Bash affect IBM SmartCloud Entry Appliance (CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277, CVE-2014-6278)
19 Jul 202000:49
ibm
IBM Security Bulletins
Security Bulletin: Vulnerabilities in Bash affect certain Brocade products that IBM resells for use with IBM BladeCenter (CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277, CVE-2014-6278)
31 Jan 201901:35
ibm
IBM Security Bulletins
Security Bulletins for IBM Tealeaf Customer Experience offerings
16 Jun 201819:35
ibm
IBM Security Bulletins
Security Bulletin: Vulnerabilities in Bash affect certain IBM N Series products (CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277, CVE-2014-6278)
18 Jun 201800:08
ibm
IBM Security Bulletins
Security Bulletin: Vulnerabilities in Bash affect IBM Smart Analytics System 5600 (CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277, CVE-2014-6278)
16 Jun 201813:58
ibm
IBM Security Bulletins
Security Bulletin: Vulnerabilities in Bash affect IBM PureData System for Operational Analytics (CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277, CVE-2014-6278)
18 Oct 201903:50
ibm
IBM Security Bulletins
Security Bulletin: Vulnerabilities in Bash affect IBM Flex System Manager (FSM): (CVE-2014-6271, CVE-2014-6277, CVE-2014-6278, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187)
31 Jan 201901:30
ibm
IBM Security Bulletins
Security Bulletin: UPDATE: Vulnerabilities in Bash affect AIX Toolbox for Linux Applications (CVE-2014-6271, CVE-2014-6277, CVE-2014-6278, CVE-2014-7169, CVE-2014-7186, and CVE-2014-7187)
15 Sep 202112:14
ibm
Rows per page
NVD
Node
gnubashRange4.3
Node
aristaeosRange4.9.04.9.12
OR
aristaeosRange4.10.04.10.9
OR
aristaeosRange4.11.04.11.11
OR
aristaeosRange4.12.04.12.9
OR
aristaeosRange4.13.04.13.9
OR
aristaeosRange4.14.04.14.4f
Node
OROR
Node
qnapqtsRange<4.1.1
OR
qnapqtsMatch4.1.1-
OR
qnapqtsMatch4.1.1build_0927
Node
mageiamageiaMatch3.0
OR
mageiamageiaMatch4.0
Node
OROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROR
Node
Node
OROROR
ibmpureapplication_systemRange1.0.0.01.0.0.4
OR
ibmpureapplication_systemRange1.1.0.01.1.0.4
OROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROR
ibmworkload_deployerRange3.1.03.1.0.7
OROROROROROROROROROROROROROROR
Node
ibmstorwize_v7000_firmwareRange1.1.0.01.4.3.5
OR
ibmstorwize_v7000_firmwareRange1.5.0.01.5.0.4
OR
ibmstorwize_v7000_firmwareRange7.2.0.07.2.0.9
OR
ibmstorwize_v7000_firmwareRange7.3.0.07.3.0.7
AND
Node
ibmstorwize_v5000_firmwareRange1.1.0.07.1.0.11
OR
ibmstorwize_v5000_firmwareRange7.2.0.07.2.0.9
OR
ibmstorwize_v5000_firmwareRange7.3.0.07.3.0.7
AND
Node
ibmstorwize_v3700_firmwareRange1.1.0.07.1.0.11
OR
ibmstorwize_v3700_firmwareRange7.2.0.07.2.0.9
OR
ibmstorwize_v3700_firmwareRange7.3.0.07.3.0.7
AND
Node
ibmstorwize_v3500_firmwareRange1.1.0.07.1.0.11
OR
ibmstorwize_v3500_firmwareRange7.2.0.07.2.0.9
OR
ibmstorwize_v3500_firmwareRange7.3.0.07.3.0.7
AND
Node
ibmflex_system_v7000_firmwareRange1.1.0.07.1.0.11
OR
ibmflex_system_v7000_firmwareRange7.2.0.07.2.0.9
OR
ibmflex_system_v7000_firmwareRange7.3.0.07.3.0.7
AND
Node
Node
ibmstn6500_firmwareRange3.8.0.03.8.0.07
OR
ibmstn6500_firmwareRange3.9.1.03.9.1.08
OR
ibmstn6500_firmwareRange4.1.2.04.1.2.06
AND
Node
ibmstn6800_firmwareRange3.8.0.03.8.0.07
OR
ibmstn6800_firmwareRange3.9.1.03.9.1.08
OR
ibmstn6800_firmwareRange4.1.2.04.1.2.06
AND
Node
ibmstn7800_firmwareRange3.8.0.03.8.0.07
OR
ibmstn7800_firmwareRange3.9.1.03.9.1.08
OR
ibmstn7800_firmwareRange4.1.2.04.1.2.06
AND
Node
Node
f5big-ip_access_policy_managerRange10.1.010.2.4
OR
f5big-ip_access_policy_managerRange11.0.011.5.1
OROROROR
f5big-ip_analyticsRange11.0.011.5.1
OROROROROROROR
f5big-ip_edge_gatewayRange10.1.010.2.4
OR
f5big-ip_edge_gatewayRange11.0.011.3.0
OROROROR
f5big-ip_link_controllerRange10.0.010.2.4
OR
f5big-ip_link_controllerRange11.0.011.5.1
OROR
f5big-ip_local_traffic_managerRange10.0.010.2.4
OR
f5big-ip_local_traffic_managerRange11.0.011.5.1
OROROROROROROROR
f5big-ip_webacceleratorRange10.0.010.2.4
OR
f5big-ip_webacceleratorRange11.0.011.3.0
OR
f5big-iq_cloudRange4.0.04.4.0
OR
f5big-iq_deviceRange4.2.04.4.0
OR
f5big-iq_securityRange4.0.04.4.0
OR
f5enterprise_managerRange2.1.02.3.0
OR
f5enterprise_managerRange3.0.03.1.1
OROROROROR
Node
f5arx_firmwareRange6.0.06.4.0
AND
f5arxMatch-
Node
OR
citrixnetscaler_sdx_firmwareRange1010.1.129.11r1
OR
citrixnetscaler_sdx_firmwareRange10.510.5.52.11r1
AND
Node
applemac_os_xRange10.0.010.10.0
ParameterPositionPathDescriptionCWE
loginpath/usr/lib/openvpn/openvpn-auth-pam.soOpenVPN PAM authentication module path used in ShellShock exploit vector via crafted environment variablesCWE-78

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

22 Apr 2026 16:07Current
9.9High risk
Vulners AI Score9.9
CVSS 3.19.8
CVSS 210
EPSS0.9422
SSVC
2827