GNU Bourne-Again Shell (Bash) 'Shellshock'

**Lenovo Security Advisory:******LEN-2014-003

Potential Impact: Execution of arbitrary code

Severity**:** High

Summary:
GNU Bash is the common command-line shell used in many Linux/UNIX systems. The vulnerability is also referred to as “Shellshock. ” Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code on an affected system. More information about this issue is available at CVE-2014-7169.

Description:
The GNU Bash Remote Code Execution Vulnerability (CVE-2014-6271 and CVE-2014-7169) could allow attackers to gain control over a targeted computer if exploited successfully, giving them access to your data and networks. The vulnerability leverages the Bash shell, a command language interpreter. An attacker could attach malicious code to environment variables that affect the way processes are run on a computer.

Affected Products: