Lucene search
UbuntuUSN-2363-1HistorySep 25, 2014 - 12:00 a.m.
Bash vulnerability
2014-09-2500:00:00
ubuntu.com
84
10 High
AI Score
Confidence
High
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.973 High
EPSS
Percentile
99.9%
Releases
- Ubuntu 14.04 ESM
- Ubuntu 12.04
- Ubuntu 10.04
Packages
- bash - GNU Bourne Again SHell
Details
Tavis Ormandy discovered that the security fix for Bash included in
USN-2362-1 was incomplete. An attacker could use this issue to bypass
certain environment restrictions. (CVE-2014-7169)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 14.04 | noarch | bash | < 4.3-7ubuntu1.2 | UNKNOWN |
| Ubuntu | 14.04 | noarch | bash-builtins | < 4.3-7ubuntu1.2 | UNKNOWN |
| Ubuntu | 14.04 | noarch | bash-static | < 4.3-7ubuntu1.2 | UNKNOWN |
| Ubuntu | 12.04 | noarch | bash | < 4.2-2ubuntu2.3 | UNKNOWN |
| Ubuntu | 12.04 | noarch | bash-builtins | < 4.2-2ubuntu2.3 | UNKNOWN |
| Ubuntu | 12.04 | noarch | bash-static | < 4.2-2ubuntu2.3 | UNKNOWN |
| Ubuntu | 10.04 | noarch | bash | < 4.1-2ubuntu3.2 | UNKNOWN |
| Ubuntu | 10.04 | noarch | bash-builtins | < 4.1-2ubuntu3.2 | UNKNOWN |
| Ubuntu | 10.04 | noarch | bash-static | < 4.1-2ubuntu3.2 | UNKNOWN |
References
Related
fedora
fedora
[SECURITY] Fedora 20 Update: bash-4.2.51-2.fc20
2014-10-05 08:13:46
[SECURITY] Fedora 21 Update: bash-4.3.25-2.fc21
2014-09-27 10:08:26
[SECURITY] Fedora 19 Update: bash-4.2.48-2.fc19
2014-09-26 09:00:48
nessus
nessus
Oracle Linux 6 : bash (ELSA-2014-3075)
2014-09-26 00:00:00
OracleVM 3.3 : bash (OVMSA-2014-0021)
2014-10-10 00:00:00
Fedora 20 : bash-4.2.51-2.fc20 (2014-12202)
2014-10-06 00:00:00
cisa
cisa
Oracle Patches Bash Vulnerabilities
2014-10-07 00:00:00
openvas
openvas
Oracle Linux Local Check: ELSA-2014-3077
2015-10-06 00:00:00
Oracle Linux Local Check: ELSA-2014-3076
2015-10-06 00:00:00
Oracle Linux Local Check: ELSA-2014-3075
2015-10-06 00:00:00
oraclelinux
oraclelinux
bash security update
2014-09-25 00:00:00
bash security update
2014-09-25 00:00:00
bash security update
2014-09-25 00:00:00
slackware
slackware
SSA-2014-0925230703
2014-09-25 23:07:03
bash (rebuild for Slackware 13.0 only)
2014-09-25 16:07:03
[slackware-security] bash
2014-09-25 20:38:49
ubuntu
ubuntu
Bash vulnerability
2014-09-26 00:00:00
securityvulns
securityvulns
hp
hp
ubuntucve
ubuntucve
debian
debian
[SECURITY] [DLA 63-1] bash security update
2014-09-25 22:35:21
[SECURITY] [DSA 3035-1] bash security update
2014-09-25 21:18:46
[SECURITY] [DSA 3035-1] bash security update
2014-09-25 21:18:46
ibm
ibm
lenovo
lenovo
GNU Bourne-Again Shell (Bash) 'Shellshock' - Lenovo Support US
2016-11-16 00:00:00
GNU Bourne-Again Shell (Bash) 'Shellshock'
2016-11-16 00:00:00
osv
osv
bash - security update
2014-09-25 00:00:00
bash - security update
2014-09-26 00:00:00
veracode
veracode
Arbitrary File Overwrite
2019-01-15 09:02:02
Remote Code Execution (RCE)
2019-01-15 09:01:57
archlinux
archlinux
bash: Remote code execution
2014-09-26 00:00:00
cve
cve
cloudfoundry
cloudfoundry
CVE-2014-6271 and CVE-2014-7169 - ShellShock | Cloud Foundry
2014-09-25 00:00:00
nuclei
nuclei
ShellShock - Remote Code Execution
2020-10-01 18:03:35
checkpoint_security
checkpoint_security
prion
prion
Design/Logic Flaw
2014-09-24 18:48:00
Design/Logic Flaw
2015-02-15 20:59:00
Design/Logic Flaw
2014-09-25 01:55:00
paloalto
paloalto
Bash Shell remote code execution (CVE-2014-6271, CVE-2014-7169)
2014-09-24 00:00:00
debiancve
debiancve
cisa_kev
cisa_kev
GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
2022-01-28 00:00:00
packetstorm
packetstorm
Sniffit Root Shell
2014-11-27 00:00:00
Gnu Bash 4.3 CGI Scan Remote Command Injection
2014-09-26 00:00:00
Gnu Bash 4.3 CGI REFERER Command Injection
2014-09-26 00:00:00
myhack58
myhack58
symantec
symantec
GNU Bash CVE-2014-6271 Remote Code Execution Vulnerability
2014-09-24 00:00:00
gentoo
gentoo
Bash: Code Injection (Updated fix for GLSA 201409-09)
2014-09-25 00:00:00
mageia
mageia
Updated bash packages fix CVE-2014-7169
2014-09-28 16:17:31
ics
ics
Bash Command Injection Vulnerability (Update A)
2018-09-06 12:00:00
thn
thn
Hackers Using 'Shellshock' Bash Vulnerability to Launch Botnet Attacks
2014-09-26 20:07:00
attackerkb
attackerkb
freebsd
freebsd
bash -- remote code execution vulnerability
2014-09-24 00:00:00
threatpost
threatpost
Bash Botnet Exploit Found, Bash Patches Incomplete
2014-09-25 11:41:51
VMware Begins to Patch Bash Issues Across Product Line
2014-10-01 14:43:47
arista
arista
Security Advisory 0006
2014-09-29 00:00:00
suse
suse
Security update for bash (important)
2014-09-28 19:05:16
bash (critical)
2014-09-29 14:04:19
Security update for Containment-Studio (important)
2014-10-14 01:05:00
redhat
redhat
(RHSA-2014:1311) Important: bash security update
2014-09-26 00:00:00
(RHSA-2014:1865) Important: bash Shift_JIS security update
2014-11-17 00:00:00
(RHSA-2014:1306) Important: bash security update
2014-09-26 00:00:00
fortinet
fortinet
Remote Exploit Vulnerability in Bash - (Shellshock)
2014-09-25 00:00:00
nmap
nmap
http-shellshock NSE Script
2015-01-17 03:01:58
centos
centos
bash security update
2014-09-26 02:16:02
amazon
amazon
Important: bash
2014-09-24 22:26:00
exploitpack
exploitpack
GNU bash 4.3.11 - Environment Variable dhclient
2014-10-02 00:00:00
dhclient 4.1 - Bash Environment Variable Command Injection (Shellshock)
2014-09-29 00:00:00
seebug
seebug
GNU bash 4.3.11 Environment Variable dhclient Exploit
2014-10-10 00:00:00
cert
cert
huawei
huawei
Security Advisory-Bash Code Injection Vulnerability
2014-10-24 00:00:00
vmware
vmware
VMware product updates address critical Bash security vulnerabilities
2014-09-30 00:00:00
10 High
AI Score
Confidence
High
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.973 High
EPSS
Percentile
99.9%
Related for USN-2363-1