Lucene search
SuseOPENSUSE-SU-2014:1242-1HistorySep 28, 2014 - 12:10 p.m.
bash (important)
2014-09-2812:10:05
lists.opensuse.org
31
0.976 High
EPSS
Percentile
100.0%
The command-line shell ‘bash’ evaluates environment variables, which
allows the injection of characters and might be used to access files on
the system in some circumstances (CVE-2014-7169).
Please note that this issue is different from a previously fixed
vulnerability tracked under CVE-2014-6271 and it is less serious due to
the special, non-default system configuration that is needed to create an
exploitable situation.
To remove further exploitation potential we now limit the
function-in-environment variable to variables prefixed with BASH_FUNC_ .
This hardening feature is work in progress and might be improved in later
updates.
Additionaly two more security issues were fixed in bash: CVE-2014-7186:
Nested HERE documents could lead to a crash of bash.
CVE-2014-7187: Nesting of for loops could lead to a crash of bash.
Related
nessus
nessus
RHEL 5 / 6 / 7 : bash (RHSA-2014:1306)
2014-09-26 00:00:00
RHEL 4 / 5 / 6 : bash (RHSA-2014:1311)
2014-11-08 00:00:00
openSUSE Security Update : bash (openSUSE-SU-2014:1229-1) (Shellshock)
2014-09-29 00:00:00
openvas
openvas
openSUSE: Security Advisory for bash (openSUSE-SU-2014:1229-1)
2014-10-01 00:00:00
SUSE: Security Advisory for bash (SUSE-SU-2014:1247-1)
2015-10-13 00:00:00
SUSE: Security Advisory for bash (SUSE-SU-2014:1259-1)
2015-10-16 00:00:00
suse
suse
Security update for bash (important)
2014-09-28 19:05:16
bash (critical)
2014-09-29 14:04:19
bash (important)
2014-09-30 17:05:22
securityvulns
securityvulns
NEW VMSA-2014-0010 - VMware product updates address critical Bash security vulnerabilities
2014-10-05 00:00:00
CA20141001-01: Security Notice for Bash Shellshock Vulnerability
2014-10-13 00:00:00
the other bash RCEs (CVE-2014-6277 and CVE-2014-6278)
2014-10-05 00:00:00
redhat
redhat
(RHSA-2014:1311) Important: bash security update
2014-09-26 00:00:00
(RHSA-2014:1865) Important: bash Shift_JIS security update
2014-11-17 00:00:00
(RHSA-2014:1306) Important: bash security update
2014-09-26 00:00:00
osv
osv
bash - security update
2014-09-26 00:00:00
bash - security update
2014-09-25 00:00:00
ibm
ibm
amazon
amazon
Important: bash
2014-09-24 22:26:00
threatpost
threatpost
VMware Begins to Patch Bash Issues Across Product Line
2014-10-01 14:43:47
Researcher Takes Wraps off Undisclosed Bash Vulnerabilities
2014-10-03 05:00:50
Bash Botnet Exploit Found, Bash Patches Incomplete
2014-09-25 11:41:51
centos
centos
bash security update
2014-09-26 02:16:02
oraclelinux
oraclelinux
bash security update
2014-09-26 00:00:00
bash security update
2014-09-25 00:00:00
lenovo
lenovo
GNU Bourne-Again Shell (Bash) 'Shellshock'
2016-11-16 00:00:00
GNU Bourne-Again Shell (Bash) 'Shellshock' - Lenovo Support US
2016-11-16 00:00:00
cert
cert
huawei
huawei
Security Advisory-Bash Code Injection Vulnerability
2014-10-24 00:00:00
f5
f5
K15629 : Multiple GNU Bash vulnerabilities
2015-05-22 00:00:00
SOL15629 - Multiple GNU Bash vulnerabilities
2014-09-25 00:00:00
seebug
seebug
Bash 4.3 远程命令执行漏洞
(破壳)
2014-09-26 00:00:00
freebsd
freebsd
rt42 -- vulnerabilities related to shellshock
2014-10-02 00:00:00
bash -- out-of-bounds memory access in parser
2014-09-25 00:00:00
bash -- remote code execution vulnerability
2014-09-24 00:00:00
jvn
jvn
JVN#55667175: QNAP QTS vulnerable to OS command injection
2014-10-28 00:00:00
citrix
citrix
Citrix Security Advisory for GNU Bash Shellshock Vulnerabilities
2014-09-26 04:00:00
checkpoint_advisories
checkpoint_advisories
kitploit
kitploit
ShellShockHunter - It's A Simple Tool For Test Vulnerability Shellshock
2021-02-10 11:30:00
cisco
cisco
GNU Bash Environment Variable Command Injection Vulnerability
2014-09-26 01:00:00
vmware
vmware
VMware product updates address critical Bash security vulnerabilities
2014-09-30 00:00:00
VMware product updates address critical Bash security vulnerabilities
2014-09-30 00:00:00
zdt
zdt
DNS Reverse Lookup Shellshock Exploit
2014-10-14 00:00:00
nvidia
nvidia
packetstorm
packetstorm
DNS Reverse Lookup Shellshock
2014-10-13 00:00:00
Bash Me Some More
2014-10-01 00:00:00
Gnu Bash 4.3 CGI REFERER Command Injection
2014-09-26 00:00:00
ubuntu
ubuntu
Bash vulnerabilities
2014-09-27 00:00:00
cloudfoundry
cloudfoundry
CVE-2014-7186 and CVE-2014-7187 - Bash Out of Bounds | Cloud Foundry
2014-09-29 00:00:00
CVE-2014-6271 and CVE-2014-7169 - ShellShock | Cloud Foundry
2014-09-25 00:00:00
cve
cve
hp
hp
ubuntucve
ubuntucve
CVE-2014-7169
2014-09-25 00:00:00
CVE-2014-6271
2014-09-24 00:00:00
debian
debian
[SECURITY] [DLA 63-1] bash security update
2014-09-25 22:35:21
[SECURITY] [DSA 3035-1] bash security update
2014-09-25 21:18:46
[SECURITY] [DSA 3035-1] bash security update
2014-09-25 21:18:46
fedora
fedora
[SECURITY] Fedora 21 Update: bash-4.3.25-2.fc21
2014-09-27 10:08:26
[SECURITY] Fedora 19 Update: bash-4.2.48-2.fc19
2014-09-26 09:00:48
[SECURITY] Fedora 20 Update: bash-4.2.48-2.fc20
2014-09-26 09:03:00
veracode
veracode
Arbitrary File Overwrite
2019-01-15 09:02:02
Remote Code Execution (RCE)
2019-01-15 09:01:57
archlinux
archlinux
bash: Remote code execution
2014-09-26 00:00:00
nuclei
nuclei
ShellShock - Remote Code Execution
2020-10-01 18:03:35
symantec
symantec
GNU Bash CVE-2014-6271 Remote Code Execution Vulnerability
2014-09-24 00:00:00
myhack58
myhack58
mageia
mageia
Updated bash packages fix CVE-2014-7169
2014-09-28 16:17:31
ics
ics
Bash Command Injection Vulnerability (Update A)
2018-09-06 12:00:00
gentoo
gentoo
Bash: Code Injection (Updated fix for GLSA 201409-09)
2014-09-25 00:00:00
thn
thn
Hackers Using 'Shellshock' Bash Vulnerability to Launch Botnet Attacks
2014-09-26 20:07:00
attackerkb
attackerkb
CVE-2014-7169
2014-09-25 00:00:00
debiancve
debiancve
CVE-2014-7169
2014-09-25 01:55:00