{"history":[{"alert":0,"cve":"CVE-2014-6271","id":21457,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.99999, \"percentile\": 0.99993}"},{"alert":0,"cve":"CVE-2014-6271","id":19073,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.99999, \"percentile\": 0.99993}"},{"alert":0,"cve":"CVE-2014-6271","id":17039,"kind":"epss","observed_at":1794241201,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.99999, \"percentile\": 0.99993}"},{"alert":0,"cve":"CVE-2014-6271","id":15102,"kind":"epss","observed_at":1794154800,"payload":"{\"date\": \"2026-11-08\", \"epss\": 0.99999, \"percentile\": 0.99993}"},{"alert":0,"cve":"CVE-2014-6271","id":13080,"kind":"epss","observed_at":1794068402,"payload":"{\"date\": \"2026-11-07\", \"epss\": 0.99999, \"percentile\": 0.99993}"},{"alert":1,"cve":"CVE-2014-6271","id":12947,"kind":"cna","observed_at":1794046801,"payload":"{\"containers\": {\"adp\": [{\"providerMetadata\": {\"dateUpdated\": \"2024-08-06T12:10:13.276Z\", \"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\"}, \"references\": [{\"name\": \"37816\", \"tags\": [\"exploit\", \"x_refsource_EXPLOIT-DB\", \"x_transferred\"], \"url\": \"https://www.exploit-db.com/exploits/37816/\"}, {\"tags\": [\"x_refsource_MISC\", \"x_transferred\"], \"url\": \"http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.html\"}, {\"name\": \"SUSE-SU-2014:1223\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\", \"x_transferred\"], \"url\": \"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00034.html\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21685749\"}, {\"name\": \"HPSBMU03165\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\", \"x_transferred\"], \"url\": \"http://marc.info/?l=bugtraq&m=141577137423233&w=2\"}, {\"name\": \"SSRT101816\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\", \"x_transferred\"], \"url\": \"http://marc.info/?l=bugtraq&m=142719845423222&w=2\"}, {\"name\": \"39918\", \"tags\": [\"exploit\", \"x_refsource_EXPLOIT-DB\", \"x_transferred\"], \"url\": \"https://www.exploit-db.com/exploits/39918/\"}, {\"name\": \"HPSBHF03119\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\", \"x_transferred\"], \"url\": \"http://marc.info/?l=bugtraq&m=141216668515282&w=2\"}, {\"name\": \"RHSA-2014:1295\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"], \"url\": \"http://rhn.redhat.com/errata/RHSA-2014-1295.html\"}, {\"name\": \"openSUSE-SU-2014:1226\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\", \"x_transferred\"], \"url\": \"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00037.html\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk102673&src=securityAlerts\"}, {\"name\": \"HPSBST03131\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\", \"x_transferred\"], \"url\": \"http://marc.info/?l=bugtraq&m=141383138121313&w=2\"}, {\"name\": \"SSRT101819\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\", \"x_transferred\"], \"url\": \"http://marc.info/?l=bugtraq&m=142721162228379&w=2\"}, {\"name\": \"20141001 NEW VMSA-2014-0010 - VMware product updates address critical Bash security vulnerabilities\", \"tags\": [\"mailing-list\", \"x_refsource_BUGTRAQ\", \"x_transferred\"], \"url\": \"http://www.securityfocus.com/archive/1/533593/100/0/threaded\"}, {\"name\": \"HPSBMU03245\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\", \"x_transferred\"], \"url\": \"http://marc.info/?l=bugtraq&m=142358026505815&w=2\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21686084\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21686479\"}, {\"name\": \"HPSBST03196\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\", \"x_transferred\"], \"url\": \"http://marc.info/?l=bugtraq&m=142719845423222&w=2\"}, {\"name\": \"61188\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/61188\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0\"}, {\"name\": \"JVN#55667175\", \"tags\": [\"third-party-advisory\", \"x_refsource_JVN\", \"x_transferred\"], \"url\": \"http://jvn.jp/en/jp/JVN55667175/index.html\"}, {\"name\": \"61676\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/61676\"}, {\"name\": \"40619\", \"tags\": [\"exploit\", \"x_refsource_EXPLOIT-DB\", \"x_transferred\"], \"url\": \"https://www.exploit-db.com/exploits/40619/\"}, {\"name\": \"openSUSE-SU-2014:1254\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\", \"x_transferred\"], \"url\": \"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.html\"}, {\"name\": \"60433\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/60433\"}, {\"name\": \"38849\", \"tags\": [\"exploit\", \"x_refsource_EXPLOIT-DB\", \"x_transferred\"], \"url\": \"https://www.exploit-db.com/exploits/38849/\"}, {\"name\": \"HPSBMU03143\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\", \"x_transferred\"], \"url\": \"http://marc.info/?l=bugtraq&m=141383026420882&w=2\"}, {\"name\": \"HPSBMU03182\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\", \"x_transferred\"], \"url\": \"http://marc.info/?l=bugtraq&m=141585637922673&w=2\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673\"}, {\"name\": \"SUSE-SU-2014:1260\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\", \"x_transferred\"], \"url\": \"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00049.html\"}, {\"name\": \"HPSBST03155\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\", \"x_transferred\"], \"url\": \"http://marc.info/?l=bugtraq&m=141576728022234&w=2\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21685541\"}, {\"name\": \"61715\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/61715\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html\"}, {\"name\": \"61816\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/61816\"}, {\"name\": \"openSUSE-SU-2014:1310\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\", \"x_transferred\"], \"url\": \"http://lists.opensuse.org/opensuse-updates/2014-10/msg00025.html\"}, {\"name\": \"61442\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/61442\"}, {\"name\": \"HPSBMU03246\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\", \"x_transferred\"], \"url\": \"http://marc.info/?l=bugtraq&m=142358078406056&w=2\"}, {\"name\": \"HPSBST03195\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\", \"x_transferred\"], \"url\": \"http://marc.info/?l=bugtraq&m=142805027510172&w=2\"}, {\"name\": \"61283\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/61283\"}, {\"name\": \"SSRT101711\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\", \"x_transferred\"], \"url\": \"http://marc.info/?l=bugtraq&m=142113462216480&w=2\"}, {\"name\": \"USN-2362-1\", \"tags\": [\"vendor-advisory\", \"x_refsource_UBUNTU\", \"x_transferred\"], \"url\": \"http://www.ubuntu.com/usn/USN-2362-1\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"https://kc.mcafee.com/corporate/index?page=content&id=SB10085\"}, {\"name\": \"openSUSE-SU-2014:1308\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\", \"x_transferred\"], \"url\": \"http://lists.opensuse.org/opensuse-updates/2014-10/msg00023.html\"}, {\"name\": \"61654\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/61654\"}, {\"name\": \"61542\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/61542\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"http://www.novell.com/support/kb/doc.php?id=7015701\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315\"}, {\"name\": \"62312\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/62312\"}, {\"name\": \"59272\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/59272\"}, {\"name\": \"HPSBST03122\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\", \"x_transferred\"], \"url\": \"http://marc.info/?l=bugtraq&m=141319209015420&w=2\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html\"}, {\"name\": \"HPSBMU03217\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\", \"x_transferred\"], \"url\": \"http://marc.info/?l=bugtraq&m=141879528318582&w=2\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21685604\"}, {\"name\": \"SSRT101868\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\", \"x_transferred\"], \"url\": \"http://marc.info/?l=bugtraq&m=142118135300698&w=2\"}, {\"name\": \"61703\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/61703\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"http://support.apple.com/kb/HT6495\"}, {\"name\": \"VU#252743\", \"tags\": [\"third-party-advisory\", \"x_refsource_CERT-VN\", \"x_transferred\"], \"url\": \"http://www.kb.cert.org/vuls/id/252743\"}, {\"name\": \"61065\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/61065\"}, {\"name\": \"SUSE-SU-2014:1213\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\", \"x_transferred\"], \"url\": \"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00029.html\"}, {\"name\": \"HPSBST03129\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\", \"x_transferred\"], \"url\": \"http://marc.info/?l=bugtraq&m=141383196021590&w=2\"}, {\"name\": \"HPSBMU03144\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\", \"x_transferred\"], \"url\": \"http://marc.info/?l=bugtraq&m=141383081521087&w=2\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21686445\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21686131\"}, {\"name\": \"70103\", \"tags\": [\"vdb-entry\", \"x_refsource_BID\", \"x_transferred\"], \"url\": \"http://www.securityfocus.com/bid/70103\"}, {\"name\": \"JVNDB-2014-000126\", \"tags\": [\"third-party-advisory\", \"x_refsource_JVNDB\", \"x_transferred\"], \"url\": \"http://jvndb.jvn.jp/jvndb/JVNDB-2014-000126\"}, {\"name\": \"SSRT101827\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\", \"x_transferred\"], \"url\": \"http://marc.info/?l=bugtraq&m=141879528318582&w=2\"}, {\"name\": \"TA14-268A\", \"tags\": [\"third-party-advisory\", \"x_refsource_CERT\", \"x_transferred\"], \"url\": \"http://www.us-cert.gov/ncas/alerts/TA14-268A\"}, {\"name\": \"SUSE-SU-2014:1212\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\", \"x_transferred\"], \"url\": \"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00028.html\"}, {\"name\": \"61641\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/61641\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10648\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"https://access.redhat.com/node/1200223\"}, {\"tags\": [\"x_refsource_MISC\", \"x_transferred\"], \"url\": \"http://packetstormsecurity.com/files/137376/IPFire-Bash-Environment-Variable-Injection-Shellshock.html\"}, {\"name\": \"SUSE-SU-2014:1287\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\", \"x_transferred\"], \"url\": \"http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00004.html\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898\"}, {\"name\": \"APPLE-SA-2014-10-16-1\", \"tags\": [\"vendor-advisory\", \"x_refsource_APPLE\", \"x_transferred\"], \"url\": \"http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21685914\"}, {\"name\": \"20141001 FW: NEW VMSA-2014-0010 - VMware product updates address critical Bash security vulnerabilities\", \"tags\": [\"mailing-list\", \"x_refsource_FULLDISC\", \"x_transferred\"], \"url\": \"http://seclists.org/fulldisclosure/2014/Oct/0\"}, {\"name\": \"MDVSA-2015:164\", \"tags\": [\"vendor-advisory\", \"x_refsource_MANDRIVA\", \"x_transferred\"], \"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2015:164\"}, {\"name\": \"RHSA-2014:1293\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"], \"url\": \"http://rhn.redhat.com/errata/RHSA-2014-1293.html\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04497075\"}, {\"name\": \"openSUSE-SU-2014:1238\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\", \"x_transferred\"], \"url\": \"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00040.html\"}, {\"name\": \"HPSBMU03220\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\", \"x_transferred\"], \"url\": \"http://marc.info/?l=bugtraq&m=142721162228379&w=2\"}, {\"name\": \"60325\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/60325\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes\"}, {\"name\": \"60024\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/60024\"}, {\"tags\": [\"x_refsource_MISC\", \"x_transferred\"], \"url\": \"http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html\"}, {\"name\": \"34879\", \"tags\": [\"exploit\", \"x_refsource_EXPLOIT-DB\", \"x_transferred\"], \"url\": \"https://www.exploit-db.com/exploits/34879/\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"https://access.redhat.com/articles/1200223\"}, {\"name\": \"62343\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/62343\"}, {\"name\": \"61565\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/61565\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"https://www.suse.com/support/shellshock/\"}, {\"name\": \"HPSBST03157\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\", \"x_transferred\"], \"url\": \"http://marc.info/?l=bugtraq&m=141450491804793&w=2\"}, {\"name\": \"61313\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/61313\"}, {\"name\": \"SSRT101742\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\", \"x_transferred\"], \"url\": \"http://marc.info/?l=bugtraq&m=142358026505815&w=2\"}, {\"name\": \"61873\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/61873\"}, {\"name\": \"61485\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/61485\"}, {\"name\": \"60947\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/60947\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04518183\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"https://support.apple.com/kb/HT6535\"}, {\"name\": \"HPSBST03154\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\", \"x_transferred\"], \"url\": \"http://marc.info/?l=bugtraq&m=141577297623641&w=2\"}, {\"name\": \"HPSBST03265\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\", \"x_transferred\"], \"url\": \"http://marc.info/?l=bugtraq&m=142546741516006&w=2\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021272\"}, {\"name\": \"HPSBGN03142\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\", \"x_transferred\"], \"url\": \"http://marc.info/?l=bugtraq&m=141383244821813&w=2\"}, {\"name\": \"61312\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/61312\"}, {\"name\": \"60193\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/60193\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"http://www.vmware.com/security/advisories/VMSA-2014-0010.html\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"http://linux.oracle.com/errata/ELSA-2014-1294.html\"}, {\"name\": \"60063\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/60063\"}, {\"tags\": [\"x_refsource_MISC\", \"x_transferred\"], \"url\": \"http://packetstormsecurity.com/files/128573/Apache-mod_cgi-Remote-Command-Execution.html\"}, {\"name\": \"60034\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/60034\"}, {\"name\": \"HPSBMU03133\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\", \"x_transferred\"], \"url\": \"http://marc.info/?l=bugtraq&m=141330425327438&w=2\"}, {\"tags\": [\"x_refsource_MISC\", \"x_transferred\"], \"url\": \"http://lcamtuf.blogspot.com/2014/09/quick-notes-about-bash-bug-its-impact.html\"}, {\"name\": \"59907\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/59907\"}, {\"name\": \"58200\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/58200\"}, {\"name\": \"HPSBST03181\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\", \"x_transferred\"], \"url\": \"http://marc.info/?l=bugtraq&m=141577241923505&w=2\"}, {\"name\": \"61643\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/61643\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"http://www.novell.com/support/kb/doc.php?id=7015721\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21687079\"}, {\"name\": \"61503\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/61503\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21686246\"}, {\"name\": \"RHSA-2014:1354\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"], \"url\": \"http://rhn.redhat.com/errata/RHSA-2014-1354.html\"}, {\"name\": \"40938\", \"tags\": [\"exploit\", \"x_refsource_EXPLOIT-DB\", \"x_transferred\"], \"url\": \"https://www.exploit-db.com/exploits/40938/\"}, {\"name\": \"HPSBGN03117\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\", \"x_transferred\"], \"url\": \"http://marc.info/?l=bugtraq&m=141216207813411&w=2\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"http://support.novell.com/security/cve/CVE-2014-6271.html\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915\"}, {\"name\": \"61547\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/61547\"}, {\"name\": \"HPSBHF03145\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\", \"x_transferred\"], \"url\": \"http://marc.info/?l=bugtraq&m=141383465822787&w=2\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"http://www.qnap.com/i/en/support/con_show.php?cid=61\"}, {\"name\": \"HPSBST03148\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\", \"x_transferred\"], \"url\": \"http://marc.info/?l=bugtraq&m=141694386919794&w=2\"}, {\"name\": \"61552\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/61552\"}, {\"name\": \"61780\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/61780\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"https://support.citrix.com/article/CTX200223\"}, {\"name\": \"DSA-3032\", \"tags\": [\"vendor-advisory\", \"x_refsource_DEBIAN\", \"x_transferred\"], \"url\": \"http://www.debian.org/security/2014/dsa-3032\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21686447\"}, {\"name\": \"62228\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/62228\"}, {\"name\": \"HPSBGN03138\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\", \"x_transferred\"], \"url\": \"http://marc.info/?l=bugtraq&m=141330468527613&w=2\"}, {\"name\": \"61855\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/61855\"}, {\"name\": \"HPSBHF03124\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\", \"x_transferred\"], \"url\": \"http://marc.info/?l=bugtraq&m=141235957116749&w=2\"}, {\"name\": \"60044\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/60044\"}, {\"name\": \"61291\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/61291\"}, {\"name\": \"RHSA-2014:1294\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"], \"url\": \"http://rhn.redhat.com/errata/RHSA-2014-1294.html\"}, {\"name\": \"HPSBHF03125\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\", \"x_transferred\"], \"url\": \"http://marc.info/?l=bugtraq&m=141345648114150&w=2\"}, {\"name\": \"59737\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/59737\"}, {\"name\": \"61287\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/61287\"}, {\"name\": \"HPSBHF03146\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\", \"x_transferred\"], \"url\": \"http://marc.info/?l=bugtraq&m=141383353622268&w=2\"}, {\"name\": \"HPSBGN03233\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\", \"x_transferred\"], \"url\": \"http://marc.info/?l=bugtraq&m=142118135300698&w=2\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=1141597\"}, {\"name\": \"SSRT101739\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\", \"x_transferred\"], \"url\": \"http://marc.info/?l=bugtraq&m=142118135300698&w=2\"}, {\"name\": \"61711\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/61711\"}, {\"name\": \"HPSBOV03228\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\", \"x_transferred\"], \"url\": \"http://marc.info/?l=bugtraq&m=142113462216480&w=2\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021361\"}, {\"name\": \"HPSBGN03141\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\", \"x_transferred\"], \"url\": \"http://marc.info/?l=bugtraq&m=141383304022067&w=2\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"http://advisories.mageia.org/MGASA-2014-0388.html\"}, {\"name\": \"61128\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/61128\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"https://support.citrix.com/article/CTX200217\"}, {\"name\": \"61471\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/61471\"}, {\"name\": \"60055\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/60055\"}, {\"name\": \"20140926 GNU Bash Environmental Variable Command Injection Vulnerability\", \"tags\": [\"vendor-advisory\", \"x_refsource_CISCO\", \"x_transferred\"], \"url\": \"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bash\"}, {\"name\": \"61550\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/61550\"}, {\"name\": \"61633\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/61633\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"http://linux.oracle.com/errata/ELSA-2014-1293.html\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21686494\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"https://kb.bluecoat.com/index?page=content&id=SA82\"}, {\"name\": \"61328\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/61328\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21685733\"}, {\"name\": \"42938\", \"tags\": [\"exploit\", \"x_refsource_EXPLOIT-DB\", \"x_transferred\"], \"url\": \"https://www.exploit-db.com/exploits/42938/\"}, {\"name\": \"61129\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/61129\"}, {\"name\": \"61700\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/61700\"}, {\"name\": \"61603\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/61603\"}, {\"name\": \"61857\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/61857\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879\"}, {\"tags\": [\"x_refsource_MISC\", \"x_transferred\"], \"url\": \"http://packetstormsecurity.com/files/161107/SonicWall-SSL-VPN-Shellshock-Remote-Code-Execution.html\"}, {\"tags\": [\"x_refsource_MISC\", \"x_transferred\"], \"url\": \"https://www.arista.com/en/support/advisories-notices/security-advisories/1008-security-advisory-0006\"}], \"title\": \"CVE Program Container\"}, {\"metrics\": [{\"cvssV3_1\": {\"attackComplexity\": \"LOW\", \"attackVector\": \"NETWORK\", \"availabilityImpact\": \"HIGH\", \"baseScore\": 9.8, \"baseSeverity\": \"CRITICAL\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"scope\": \"UNCHANGED\", \"userInteraction\": \"NONE\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"version\": \"3.1\"}}, {\"other\": {\"content\": {\"id\": \"CVE-2014-6271\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2025-02-07T13:45:49.549420Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}, {\"other\": {\"content\": {\"dateAdded\": \"2022-01-28\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-6271\"}, \"type\": \"kev\"}}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-78\", \"description\": \"CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2025-10-22T00:05:36.342Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"references\": [{\"tags\": [\"government-resource\"], \"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-6271\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2022-01-28T00:00:00.000Z\", \"value\": \"CVE-2014-6271 added to CISA KEV\"}], \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"product\": \"n/a\", \"vendor\": \"n/a\", \"versions\": [{\"status\": \"affected\", \"version\": \"n/a\"}]}], \"datePublic\": \"2014-09-24T00:00:00.000Z\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka \\\"ShellShock.\\\"  NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.\"}], \"problemTypes\": [{\"descriptions\": [{\"description\": \"n/a\", \"lang\": \"en\", \"type\": \"text\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2021-11-05T16:37:05.000Z\", \"orgId\": \"79363d38-fa19-49d1-9214-5f28da3f3ac5\", \"shortName\": \"debian\"}, \"references\": [{\"name\": \"37816\", \"tags\": [\"exploit\", \"x_refsource_EXPLOIT-DB\"], \"url\": \"https://www.exploit-db.com/exploits/37816/\"}, {\"tags\": [\"x_refsource_MISC\"], \"url\": \"http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.html\"}, {\"name\": \"SUSE-SU-2014:1223\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\"], \"url\": \"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00034.html\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21685749\"}, {\"name\": \"HPSBMU03165\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\"], \"url\": \"http://marc.info/?l=bugtraq&m=141577137423233&w=2\"}, {\"name\": \"SSRT101816\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\"], \"url\": \"http://marc.info/?l=bugtraq&m=142719845423222&w=2\"}, {\"name\": \"39918\", \"tags\": [\"exploit\", \"x_refsource_EXPLOIT-DB\"], \"url\": \"https://www.exploit-db.com/exploits/39918/\"}, {\"name\": \"HPSBHF03119\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\"], \"url\": \"http://marc.info/?l=bugtraq&m=141216668515282&w=2\"}, {\"name\": \"RHSA-2014:1295\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"], \"url\": \"http://rhn.redhat.com/errata/RHSA-2014-1295.html\"}, {\"name\": \"openSUSE-SU-2014:1226\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\"], \"url\": \"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00037.html\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk102673&src=securityAlerts\"}, {\"name\": \"HPSBST03131\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\"], \"url\": \"http://marc.info/?l=bugtraq&m=141383138121313&w=2\"}, {\"name\": \"SSRT101819\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\"], \"url\": \"http://marc.info/?l=bugtraq&m=142721162228379&w=2\"}, {\"name\": \"20141001 NEW VMSA-2014-0010 - VMware product updates address critical Bash security vulnerabilities\", \"tags\": [\"mailing-list\", \"x_refsource_BUGTRAQ\"], \"url\": \"http://www.securityfocus.com/archive/1/533593/100/0/threaded\"}, {\"name\": \"HPSBMU03245\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\"], \"url\": \"http://marc.info/?l=bugtraq&m=142358026505815&w=2\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21686084\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21686479\"}, {\"name\": \"HPSBST03196\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\"], \"url\": \"http://marc.info/?l=bugtraq&m=142719845423222&w=2\"}, {\"name\": \"61188\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/61188\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0\"}, {\"name\": \"JVN#55667175\", \"tags\": [\"third-party-advisory\", \"x_refsource_JVN\"], \"url\": \"http://jvn.jp/en/jp/JVN55667175/index.html\"}, {\"name\": \"61676\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/61676\"}, {\"name\": \"40619\", \"tags\": [\"exploit\", \"x_refsource_EXPLOIT-DB\"], \"url\": \"https://www.exploit-db.com/exploits/40619/\"}, {\"name\": \"openSUSE-SU-2014:1254\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\"], \"url\": \"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.html\"}, {\"name\": \"60433\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/60433\"}, {\"name\": \"38849\", \"tags\": [\"exploit\", \"x_refsource_EXPLOIT-DB\"], \"url\": \"https://www.exploit-db.com/exploits/38849/\"}, {\"name\": \"HPSBMU03143\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\"], \"url\": \"http://marc.info/?l=bugtraq&m=141383026420882&w=2\"}, {\"name\": \"HPSBMU03182\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\"], \"url\": \"http://marc.info/?l=bugtraq&m=141585637922673&w=2\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673\"}, {\"name\": \"SUSE-SU-2014:1260\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\"], \"url\": \"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00049.html\"}, {\"name\": \"HPSBST03155\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\"], \"url\": \"http://marc.info/?l=bugtraq&m=141576728022234&w=2\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21685541\"}, {\"name\": \"61715\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/61715\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html\"}, {\"name\": \"61816\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/61816\"}, {\"name\": \"openSUSE-SU-2014:1310\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\"], \"url\": \"http://lists.opensuse.org/opensuse-updates/2014-10/msg00025.html\"}, {\"name\": \"61442\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/61442\"}, {\"name\": \"HPSBMU03246\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\"], \"url\": \"http://marc.info/?l=bugtraq&m=142358078406056&w=2\"}, {\"name\": \"HPSBST03195\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\"], \"url\": \"http://marc.info/?l=bugtraq&m=142805027510172&w=2\"}, {\"name\": \"61283\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/61283\"}, {\"name\": \"SSRT101711\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\"], \"url\": \"http://marc.info/?l=bugtraq&m=142113462216480&w=2\"}, {\"name\": \"USN-2362-1\", \"tags\": [\"vendor-advisory\", \"x_refsource_UBUNTU\"], \"url\": \"http://www.ubuntu.com/usn/USN-2362-1\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"https://kc.mcafee.com/corporate/index?page=content&id=SB10085\"}, {\"name\": \"openSUSE-SU-2014:1308\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\"], \"url\": \"http://lists.opensuse.org/opensuse-updates/2014-10/msg00023.html\"}, {\"name\": \"61654\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/61654\"}, {\"name\": \"61542\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/61542\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"http://www.novell.com/support/kb/doc.php?id=7015701\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315\"}, {\"name\": \"62312\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/62312\"}, {\"name\": \"59272\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/59272\"}, {\"name\": \"HPSBST03122\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\"], \"url\": \"http://marc.info/?l=bugtraq&m=141319209015420&w=2\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html\"}, {\"name\": \"HPSBMU03217\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\"], \"url\": \"http://marc.info/?l=bugtraq&m=141879528318582&w=2\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21685604\"}, {\"name\": \"SSRT101868\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\"], \"url\": \"http://marc.info/?l=bugtraq&m=142118135300698&w=2\"}, {\"name\": \"61703\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/61703\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"http://support.apple.com/kb/HT6495\"}, {\"name\": \"VU#252743\", \"tags\": [\"third-party-advisory\", \"x_refsource_CERT-VN\"], \"url\": \"http://www.kb.cert.org/vuls/id/252743\"}, {\"name\": \"61065\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/61065\"}, {\"name\": \"SUSE-SU-2014:1213\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\"], \"url\": \"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00029.html\"}, {\"name\": \"HPSBST03129\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\"], \"url\": \"http://marc.info/?l=bugtraq&m=141383196021590&w=2\"}, {\"name\": \"HPSBMU03144\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\"], \"url\": \"http://marc.info/?l=bugtraq&m=141383081521087&w=2\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21686445\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21686131\"}, {\"name\": \"70103\", \"tags\": [\"vdb-entry\", \"x_refsource_BID\"], \"url\": \"http://www.securityfocus.com/bid/70103\"}, {\"name\": \"JVNDB-2014-000126\", \"tags\": [\"third-party-advisory\", \"x_refsource_JVNDB\"], \"url\": \"http://jvndb.jvn.jp/jvndb/JVNDB-2014-000126\"}, {\"name\": \"SSRT101827\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\"], \"url\": \"http://marc.info/?l=bugtraq&m=141879528318582&w=2\"}, {\"name\": \"TA14-268A\", \"tags\": [\"third-party-advisory\", \"x_refsource_CERT\"], \"url\": \"http://www.us-cert.gov/ncas/alerts/TA14-268A\"}, {\"name\": \"SUSE-SU-2014:1212\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\"], \"url\": \"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00028.html\"}, {\"name\": \"61641\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/61641\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10648\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"https://access.redhat.com/node/1200223\"}, {\"tags\": [\"x_refsource_MISC\"], \"url\": \"http://packetstormsecurity.com/files/137376/IPFire-Bash-Environment-Variable-Injection-Shellshock.html\"}, {\"name\": \"SUSE-SU-2014:1287\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\"], \"url\": \"http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00004.html\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898\"}, {\"name\": \"APPLE-SA-2014-10-16-1\", \"tags\": [\"vendor-advisory\", \"x_refsource_APPLE\"], \"url\": \"http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21685914\"}, {\"name\": \"20141001 FW: NEW VMSA-2014-0010 - VMware product updates address critical Bash security vulnerabilities\", \"tags\": [\"mailing-list\", \"x_refsource_FULLDISC\"], \"url\": \"http://seclists.org/fulldisclosure/2014/Oct/0\"}, {\"name\": \"MDVSA-2015:164\", \"tags\": [\"vendor-advisory\", \"x_refsource_MANDRIVA\"], \"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2015:164\"}, {\"name\": \"RHSA-2014:1293\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"], \"url\": \"http://rhn.redhat.com/errata/RHSA-2014-1293.html\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04497075\"}, {\"name\": \"openSUSE-SU-2014:1238\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\"], \"url\": \"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00040.html\"}, {\"name\": \"HPSBMU03220\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\"], \"url\": \"http://marc.info/?l=bugtraq&m=142721162228379&w=2\"}, {\"name\": \"60325\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/60325\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes\"}, {\"name\": \"60024\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/60024\"}, {\"tags\": [\"x_refsource_MISC\"], \"url\": \"http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html\"}, {\"name\": \"34879\", \"tags\": [\"exploit\", \"x_refsource_EXPLOIT-DB\"], \"url\": \"https://www.exploit-db.com/exploits/34879/\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"https://access.redhat.com/articles/1200223\"}, {\"name\": \"62343\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/62343\"}, {\"name\": \"61565\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/61565\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"https://www.suse.com/support/shellshock/\"}, {\"name\": \"HPSBST03157\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\"], \"url\": \"http://marc.info/?l=bugtraq&m=141450491804793&w=2\"}, {\"name\": \"61313\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/61313\"}, {\"name\": \"SSRT101742\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\"], \"url\": \"http://marc.info/?l=bugtraq&m=142358026505815&w=2\"}, {\"name\": \"61873\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/61873\"}, {\"name\": \"61485\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/61485\"}, {\"name\": \"60947\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/60947\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04518183\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"https://support.apple.com/kb/HT6535\"}, {\"name\": \"HPSBST03154\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\"], \"url\": \"http://marc.info/?l=bugtraq&m=141577297623641&w=2\"}, {\"name\": \"HPSBST03265\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\"], \"url\": \"http://marc.info/?l=bugtraq&m=142546741516006&w=2\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021272\"}, {\"name\": \"HPSBGN03142\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\"], \"url\": \"http://marc.info/?l=bugtraq&m=141383244821813&w=2\"}, {\"name\": \"61312\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/61312\"}, {\"name\": \"60193\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/60193\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"http://www.vmware.com/security/advisories/VMSA-2014-0010.html\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"http://linux.oracle.com/errata/ELSA-2014-1294.html\"}, {\"name\": \"60063\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/60063\"}, {\"tags\": [\"x_refsource_MISC\"], \"url\": \"http://packetstormsecurity.com/files/128573/Apache-mod_cgi-Remote-Command-Execution.html\"}, {\"name\": \"60034\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/60034\"}, {\"name\": \"HPSBMU03133\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\"], \"url\": \"http://marc.info/?l=bugtraq&m=141330425327438&w=2\"}, {\"tags\": [\"x_refsource_MISC\"], \"url\": \"http://lcamtuf.blogspot.com/2014/09/quick-notes-about-bash-bug-its-impact.html\"}, {\"name\": \"59907\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/59907\"}, {\"name\": \"58200\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/58200\"}, {\"name\": \"HPSBST03181\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\"], \"url\": \"http://marc.info/?l=bugtraq&m=141577241923505&w=2\"}, {\"name\": \"61643\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/61643\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"http://www.novell.com/support/kb/doc.php?id=7015721\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21687079\"}, {\"name\": \"61503\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/61503\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21686246\"}, {\"name\": \"RHSA-2014:1354\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"], \"url\": \"http://rhn.redhat.com/errata/RHSA-2014-1354.html\"}, {\"name\": \"40938\", \"tags\": [\"exploit\", \"x_refsource_EXPLOIT-DB\"], \"url\": \"https://www.exploit-db.com/exploits/40938/\"}, {\"name\": \"HPSBGN03117\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\"], \"url\": \"http://marc.info/?l=bugtraq&m=141216207813411&w=2\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"http://support.novell.com/security/cve/CVE-2014-6271.html\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915\"}, {\"name\": \"61547\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/61547\"}, {\"name\": \"HPSBHF03145\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\"], \"url\": \"http://marc.info/?l=bugtraq&m=141383465822787&w=2\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"http://www.qnap.com/i/en/support/con_show.php?cid=61\"}, {\"name\": \"HPSBST03148\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\"], \"url\": \"http://marc.info/?l=bugtraq&m=141694386919794&w=2\"}, {\"name\": \"61552\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/61552\"}, {\"name\": \"61780\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/61780\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"https://support.citrix.com/article/CTX200223\"}, {\"name\": \"DSA-3032\", \"tags\": [\"vendor-advisory\", \"x_refsource_DEBIAN\"], \"url\": \"http://www.debian.org/security/2014/dsa-3032\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21686447\"}, {\"name\": \"62228\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/62228\"}, {\"name\": \"HPSBGN03138\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\"], \"url\": \"http://marc.info/?l=bugtraq&m=141330468527613&w=2\"}, {\"name\": \"61855\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/61855\"}, {\"name\": \"HPSBHF03124\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\"], \"url\": \"http://marc.info/?l=bugtraq&m=141235957116749&w=2\"}, {\"name\": \"60044\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/60044\"}, {\"name\": \"61291\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/61291\"}, {\"name\": \"RHSA-2014:1294\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"], \"url\": \"http://rhn.redhat.com/errata/RHSA-2014-1294.html\"}, {\"name\": \"HPSBHF03125\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\"], \"url\": \"http://marc.info/?l=bugtraq&m=141345648114150&w=2\"}, {\"name\": \"59737\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/59737\"}, {\"name\": \"61287\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/61287\"}, {\"name\": \"HPSBHF03146\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\"], \"url\": \"http://marc.info/?l=bugtraq&m=141383353622268&w=2\"}, {\"name\": \"HPSBGN03233\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\"], \"url\": \"http://marc.info/?l=bugtraq&m=142118135300698&w=2\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=1141597\"}, {\"name\": \"SSRT101739\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\"], \"url\": \"http://marc.info/?l=bugtraq&m=142118135300698&w=2\"}, {\"name\": \"61711\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/61711\"}, {\"name\": \"HPSBOV03228\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\"], \"url\": \"http://marc.info/?l=bugtraq&m=142113462216480&w=2\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021361\"}, {\"name\": \"HPSBGN03141\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\"], \"url\": \"http://marc.info/?l=bugtraq&m=141383304022067&w=2\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"http://advisories.mageia.org/MGASA-2014-0388.html\"}, {\"name\": \"61128\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/61128\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"https://support.citrix.com/article/CTX200217\"}, {\"name\": \"61471\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/61471\"}, {\"name\": \"60055\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/60055\"}, {\"name\": \"20140926 GNU Bash Environmental Variable Command Injection Vulnerability\", \"tags\": [\"vendor-advisory\", \"x_refsource_CISCO\"], \"url\": \"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bash\"}, {\"name\": \"61550\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/61550\"}, {\"name\": \"61633\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/61633\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"http://linux.oracle.com/errata/ELSA-2014-1293.html\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21686494\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"https://kb.bluecoat.com/index?page=content&id=SA82\"}, {\"name\": \"61328\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/61328\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21685733\"}, {\"name\": \"42938\", \"tags\": [\"exploit\", \"x_refsource_EXPLOIT-DB\"], \"url\": \"https://www.exploit-db.com/exploits/42938/\"}, {\"name\": \"61129\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/61129\"}, {\"name\": \"61700\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/61700\"}, {\"name\": \"61603\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/61603\"}, {\"name\": \"61857\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/61857\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879\"}, {\"tags\": [\"x_refsource_MISC\"], \"url\": \"http://packetstormsecurity.com/files/161107/SonicWall-SSL-VPN-Shellshock-Remote-Code-Execution.html\"}, {\"tags\": [\"x_refsource_MISC\"], \"url\": \"https://www.arista.com/en/support/advisories-notices/security-advisories/1008-security-advisory-0006\"}], \"x_legacyV4Record\": {\"CVE_data_meta\": {\"ASSIGNER\": \"security@debian.org\", \"ID\": \"CVE-2014-6271\", \"STATE\": \"PUBLIC\"}, \"affects\": {\"vendor\": {\"vendor_data\": [{\"product\": {\"product_data\": [{\"product_name\": \"n/a\", \"version\": {\"version_data\": [{\"version_value\": \"n/a\"}]}}]}, \"vendor_name\": \"n/a\"}]}}, \"data_format\": \"MITRE\", \"data_type\": \"CVE\", \"data_version\": \"4.0\", \"description\": {\"description_data\": [{\"lang\": \"eng\", \"value\": \"GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka \\\"ShellShock.\\\"  NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.\"}]}, \"problemtype\": {\"problemtype_data\": [{\"description\": [{\"lang\": \"eng\", \"value\": \"n/a\"}]}]}, \"references\": {\"reference_data\": [{\"name\": \"37816\", \"refsource\": \"EXPLOIT-DB\", \"url\": \"https://www.exploit-db.com/exploits/37816/\"}, {\"name\": \"http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.html\", \"refsource\": \"MISC\", \"url\": \"http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.html\"}, {\"name\": \"SUSE-SU-2014:1223\", \"refsource\": \"SUSE\", \"url\": \"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00034.html\"}, {\"name\": \"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897\", \"refsource\": \"CONFIRM\", \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897\"}, {\"name\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21685749\", \"refsource\": \"CONFIRM\", \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21685749\"}, {\"name\": \"HPSBMU03165\", \"refsource\": \"HP\", \"url\": \"http://marc.info/?l=bugtraq&m=141577137423233&w=2\"}, {\"name\": \"SSRT101816\", \"refsource\": \"HP\", \"url\": \"http://marc.info/?l=bugtraq&m=142719845423222&w=2\"}, {\"name\": \"39918\", \"refsource\": \"EXPLOIT-DB\", \"url\": \"https://www.exploit-db.com/exploits/39918/\"}, {\"name\": \"HPSBHF03119\", \"refsource\": \"HP\", \"url\": \"http://marc.info/?l=bugtraq&m=141216668515282&w=2\"}, {\"name\": \"RHSA-2014:1295\", \"refsource\": \"REDHAT\", \"url\": \"http://rhn.redhat.com/errata/RHSA-2014-1295.html\"}, {\"name\": \"openSUSE-SU-2014:1226\", \"refsource\": \"SUSE\", \"url\": \"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00037.html\"}, {\"name\": \"https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/\", \"refsource\": \"CONFIRM\", \"url\": \"https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/\"}, {\"name\": \"https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk102673&src=securityAlerts\", \"refsource\": \"CONFIRM\", \"url\": \"https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk102673&src=securityAlerts\"}, {\"name\": \"HPSBST03131\", \"refsource\": \"HP\", \"url\": \"http://marc.info/?l=bugtraq&m=141383138121313&w=2\"}, {\"name\": \"SSRT101819\", \"refsource\": \"HP\", \"url\": \"http://marc.info/?l=bugtraq&m=142721162228379&w=2\"}, {\"name\": \"20141001 NEW VMSA-2014-0010 - VMware product updates address critical Bash security vulnerabilities\", \"refsource\": \"BUGTRAQ\", \"url\": \"http://www.securityfocus.com/archive/1/533593/100/0/threaded\"}, {\"name\": \"HPSBMU03245\", \"refsource\": \"HP\", \"url\": \"http://marc.info/?l=bugtraq&m=142358026505815&w=2\"}, {\"name\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21686084\", \"refsource\": \"CONFIRM\", \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21686084\"}, {\"name\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21686479\", \"refsource\": \"CONFIRM\", \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21686479\"}, {\"name\": \"HPSBST03196\", \"refsource\": \"HP\", \"url\": \"http://marc.info/?l=bugtraq&m=142719845423222&w=2\"}, {\"name\": \"61188\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/61188\"}, {\"name\": \"http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0\", \"refsource\": \"CONFIRM\", \"url\": \"http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0\"}, {\"name\": \"JVN#55667175\", \"refsource\": \"JVN\", \"url\": \"http://jvn.jp/en/jp/JVN55667175/index.html\"}, {\"name\": \"61676\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/61676\"}, {\"name\": \"40619\", \"refsource\": \"EXPLOIT-DB\", \"url\": \"https://www.exploit-db.com/exploits/40619/\"}, {\"name\": \"openSUSE-SU-2014:1254\", \"refsource\": \"SUSE\", \"url\": \"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.html\"}, {\"name\": \"60433\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/60433\"}, {\"name\": \"38849\", \"refsource\": \"EXPLOIT-DB\", \"url\": \"https://www.exploit-db.com/exploits/38849/\"}, {\"name\": \"HPSBMU03143\", \"refsource\": \"HP\", \"url\": \"http://marc.info/?l=bugtraq&m=141383026420882&w=2\"}, {\"name\": \"HPSBMU03182\", \"refsource\": \"HP\", \"url\": \"http://marc.info/?l=bugtraq&m=141585637922673&w=2\"}, {\"name\": \"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673\", \"refsource\": \"CONFIRM\", \"url\": \"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673\"}, {\"name\": \"SUSE-SU-2014:1260\", \"refsource\": \"SUSE\", \"url\": \"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00049.html\"}, {\"name\": \"HPSBST03155\", \"refsource\": \"HP\", \"url\": \"http://marc.info/?l=bugtraq&m=141576728022234&w=2\"}, {\"name\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21685541\", \"refsource\": \"CONFIRM\", \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21685541\"}, {\"name\": \"61715\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/61715\"}, {\"name\": \"http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html\", \"refsource\": \"CONFIRM\", \"url\": \"http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html\"}, {\"name\": \"61816\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/61816\"}, {\"name\": \"openSUSE-SU-2014:1310\", \"refsource\": \"SUSE\", \"url\": \"http://lists.opensuse.org/opensuse-updates/2014-10/msg00025.html\"}, {\"name\": \"61442\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/61442\"}, {\"name\": \"HPSBMU03246\", \"refsource\": \"HP\", \"url\": \"http://marc.info/?l=bugtraq&m=142358078406056&w=2\"}, {\"name\": \"HPSBST03195\", \"refsource\": \"HP\", \"url\": \"http://marc.info/?l=bugtraq&m=142805027510172&w=2\"}, {\"name\": \"61283\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/61283\"}, {\"name\": \"SSRT101711\", \"refsource\": \"HP\", \"url\": \"http://marc.info/?l=bugtraq&m=142113462216480&w=2\"}, {\"name\": \"USN-2362-1\", \"refsource\": \"UBUNTU\", \"url\": \"http://www.ubuntu.com/usn/USN-2362-1\"}, {\"name\": \"https://kc.mcafee.com/corporate/index?page=content&id=SB10085\", \"refsource\": \"CONFIRM\", \"url\": \"https://kc.mcafee.com/corporate/index?page=content&id=SB10085\"}, {\"name\": \"openSUSE-SU-2014:1308\", \"refsource\": \"SUSE\", \"url\": \"http://lists.opensuse.org/opensuse-updates/2014-10/msg00023.html\"}, {\"name\": \"61654\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/61654\"}, {\"name\": \"61542\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/61542\"}, {\"name\": \"http://www.novell.com/support/kb/doc.php?id=7015701\", \"refsource\": \"CONFIRM\", \"url\": \"http://www.novell.com/support/kb/doc.php?id=7015701\"}, {\"name\": \"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315\", \"refsource\": \"CONFIRM\", \"url\": \"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315\"}, {\"name\": \"62312\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/62312\"}, {\"name\": \"59272\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/59272\"}, {\"name\": \"HPSBST03122\", \"refsource\": \"HP\", \"url\": \"http://marc.info/?l=bugtraq&m=141319209015420&w=2\"}, {\"name\": \"https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html\", \"refsource\": \"CONFIRM\", \"url\": \"https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html\"}, {\"name\": \"HPSBMU03217\", \"refsource\": \"HP\", \"url\": \"http://marc.info/?l=bugtraq&m=141879528318582&w=2\"}, {\"name\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21685604\", \"refsource\": \"CONFIRM\", \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21685604\"}, {\"name\": \"SSRT101868\", \"refsource\": \"HP\", \"url\": \"http://marc.info/?l=bugtraq&m=142118135300698&w=2\"}, {\"name\": \"61703\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/61703\"}, {\"name\": \"http://support.apple.com/kb/HT6495\", \"refsource\": \"CONFIRM\", \"url\": \"http://support.apple.com/kb/HT6495\"}, {\"name\": \"VU#252743\", \"refsource\": \"CERT-VN\", \"url\": \"http://www.kb.cert.org/vuls/id/252743\"}, {\"name\": \"61065\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/61065\"}, {\"name\": \"SUSE-SU-2014:1213\", \"refsource\": \"SUSE\", \"url\": \"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00029.html\"}, {\"name\": \"HPSBST03129\", \"refsource\": \"HP\", \"url\": \"http://marc.info/?l=bugtraq&m=141383196021590&w=2\"}, {\"name\": \"HPSBMU03144\", \"refsource\": \"HP\", \"url\": \"http://marc.info/?l=bugtraq&m=141383081521087&w=2\"}, {\"name\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21686445\", \"refsource\": \"CONFIRM\", \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21686445\"}, {\"name\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21686131\", \"refsource\": \"CONFIRM\", \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21686131\"}, {\"name\": \"70103\", \"refsource\": \"BID\", \"url\": \"http://www.securityfocus.com/bid/70103\"}, {\"name\": \"JVNDB-2014-000126\", \"refsource\": \"JVNDB\", \"url\": \"http://jvndb.jvn.jp/jvndb/JVNDB-2014-000126\"}, {\"name\": \"SSRT101827\", \"refsource\": \"HP\", \"url\": \"http://marc.info/?l=bugtraq&m=141879528318582&w=2\"}, {\"name\": \"TA14-268A\", \"refsource\": \"CERT\", \"url\": \"http://www.us-cert.gov/ncas/alerts/TA14-268A\"}, {\"name\": \"SUSE-SU-2014:1212\", \"refsource\": \"SUSE\", \"url\": \"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00028.html\"}, {\"name\": \"61641\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/61641\"}, {\"name\": \"https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10648\", \"refsource\": \"CONFIRM\", \"url\": \"https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10648\"}, {\"name\": \"https://access.redhat.com/node/1200223\", \"refsource\": \"CONFIRM\", \"url\": \"https://access.redhat.com/node/1200223\"}, {\"name\": \"http://packetstormsecurity.com/files/137376/IPFire-Bash-Environment-Variable-Injection-Shellshock.html\", \"refsource\": \"MISC\", \"url\": \"http://packetstormsecurity.com/files/137376/IPFire-Bash-Environment-Variable-Injection-Shellshock.html\"}, {\"name\": \"SUSE-SU-2014:1287\", \"refsource\": \"SUSE\", \"url\": \"http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00004.html\"}, {\"name\": \"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898\", \"refsource\": \"CONFIRM\", \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898\"}, {\"name\": \"APPLE-SA-2014-10-16-1\", \"refsource\": \"APPLE\", \"url\": \"http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html\"}, {\"name\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21685914\", \"refsource\": \"CONFIRM\", \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21685914\"}, {\"name\": \"20141001 FW: NEW VMSA-2014-0010 - VMware product updates address critical Bash security vulnerabilities\", \"refsource\": \"FULLDISC\", \"url\": \"http://seclists.org/fulldisclosure/2014/Oct/0\"}, {\"name\": \"MDVSA-2015:164\", \"refsource\": \"MANDRIVA\", \"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2015:164\"}, {\"name\": \"RHSA-2014:1293\", \"refsource\": \"REDHAT\", \"url\": \"http://rhn.redhat.com/errata/RHSA-2014-1293.html\"}, {\"name\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04497075\", \"refsource\": \"CONFIRM\", \"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04497075\"}, {\"name\": \"openSUSE-SU-2014:1238\", \"refsource\": \"SUSE\", \"url\": \"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00040.html\"}, {\"name\": \"HPSBMU03220\", \"refsource\": \"HP\", \"url\": \"http://marc.info/?l=bugtraq&m=142721162228379&w=2\"}, {\"name\": \"60325\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/60325\"}, {\"name\": \"https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes\", \"refsource\": \"CONFIRM\", \"url\": \"https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes\"}, {\"name\": \"60024\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/60024\"}, {\"name\": \"http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html\", \"refsource\": \"MISC\", \"url\": \"http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html\"}, {\"name\": \"34879\", \"refsource\": \"EXPLOIT-DB\", \"url\": \"https://www.exploit-db.com/exploits/34879/\"}, {\"name\": \"https://access.redhat.com/articles/1200223\", \"refsource\": \"CONFIRM\", \"url\": \"https://access.redhat.com/articles/1200223\"}, {\"name\": \"62343\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/62343\"}, {\"name\": \"61565\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/61565\"}, {\"name\": \"https://www.suse.com/support/shellshock/\", \"refsource\": \"CONFIRM\", \"url\": \"https://www.suse.com/support/shellshock/\"}, {\"name\": \"HPSBST03157\", \"refsource\": \"HP\", \"url\": \"http://marc.info/?l=bugtraq&m=141450491804793&w=2\"}, {\"name\": \"61313\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/61313\"}, {\"name\": \"SSRT101742\", \"refsource\": \"HP\", \"url\": \"http://marc.info/?l=bugtraq&m=142358026505815&w=2\"}, {\"name\": \"61873\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/61873\"}, {\"name\": \"61485\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/61485\"}, {\"name\": \"60947\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/60947\"}, {\"name\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04518183\", \"refsource\": \"CONFIRM\", \"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04518183\"}, {\"name\": \"https://support.apple.com/kb/HT6535\", \"refsource\": \"CONFIRM\", \"url\": \"https://support.apple.com/kb/HT6535\"}, {\"name\": \"HPSBST03154\", \"refsource\": \"HP\", \"url\": \"http://marc.info/?l=bugtraq&m=141577297623641&w=2\"}, {\"name\": \"HPSBST03265\", \"refsource\": \"HP\", \"url\": \"http://marc.info/?l=bugtraq&m=142546741516006&w=2\"}, {\"name\": \"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021272\", \"refsource\": \"CONFIRM\", \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021272\"}, {\"name\": \"HPSBGN03142\", \"refsource\": \"HP\", \"url\": \"http://marc.info/?l=bugtraq&m=141383244821813&w=2\"}, {\"name\": \"61312\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/61312\"}, {\"name\": \"60193\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/60193\"}, {\"name\": \"http://www.vmware.com/security/advisories/VMSA-2014-0010.html\", \"refsource\": \"CONFIRM\", \"url\": \"http://www.vmware.com/security/advisories/VMSA-2014-0010.html\"}, {\"name\": \"http://linux.oracle.com/errata/ELSA-2014-1294.html\", \"refsource\": \"CONFIRM\", \"url\": \"http://linux.oracle.com/errata/ELSA-2014-1294.html\"}, {\"name\": \"60063\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/60063\"}, {\"name\": \"http://packetstormsecurity.com/files/128573/Apache-mod_cgi-Remote-Command-Execution.html\", \"refsource\": \"MISC\", \"url\": \"http://packetstormsecurity.com/files/128573/Apache-mod_cgi-Remote-Command-Execution.html\"}, {\"name\": \"60034\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/60034\"}, {\"name\": \"HPSBMU03133\", \"refsource\": \"HP\", \"url\": \"http://marc.info/?l=bugtraq&m=141330425327438&w=2\"}, {\"name\": \"http://lcamtuf.blogspot.com/2014/09/quick-notes-about-bash-bug-its-impact.html\", \"refsource\": \"MISC\", \"url\": \"http://lcamtuf.blogspot.com/2014/09/quick-notes-about-bash-bug-its-impact.html\"}, {\"name\": \"59907\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/59907\"}, {\"name\": \"58200\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/58200\"}, {\"name\": \"HPSBST03181\", \"refsource\": \"HP\", \"url\": \"http://marc.info/?l=bugtraq&m=141577241923505&w=2\"}, {\"name\": \"61643\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/61643\"}, {\"name\": \"http://www.novell.com/support/kb/doc.php?id=7015721\", \"refsource\": \"CONFIRM\", \"url\": \"http://www.novell.com/support/kb/doc.php?id=7015721\"}, {\"name\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21687079\", \"refsource\": \"CONFIRM\", \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21687079\"}, {\"name\": \"61503\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/61503\"}, {\"name\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21686246\", \"refsource\": \"CONFIRM\", \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21686246\"}, {\"name\": \"RHSA-2014:1354\", \"refsource\": \"REDHAT\", \"url\": \"http://rhn.redhat.com/errata/RHSA-2014-1354.html\"}, {\"name\": \"40938\", \"refsource\": \"EXPLOIT-DB\", \"url\": \"https://www.exploit-db.com/exploits/40938/\"}, {\"name\": \"HPSBGN03117\", \"refsource\": \"HP\", \"url\": \"http://marc.info/?l=bugtraq&m=141216207813411&w=2\"}, {\"name\": \"http://support.novell.com/security/cve/CVE-2014-6271.html\", \"refsource\": \"CONFIRM\", \"url\": \"http://support.novell.com/security/cve/CVE-2014-6271.html\"}, {\"name\": \"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915\", \"refsource\": \"CONFIRM\", \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915\"}, {\"name\": \"61547\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/61547\"}, {\"name\": \"HPSBHF03145\", \"refsource\": \"HP\", \"url\": \"http://marc.info/?l=bugtraq&m=141383465822787&w=2\"}, {\"name\": \"http://www.qnap.com/i/en/support/con_show.php?cid=61\", \"refsource\": \"CONFIRM\", \"url\": \"http://www.qnap.com/i/en/support/con_show.php?cid=61\"}, {\"name\": \"HPSBST03148\", \"refsource\": \"HP\", \"url\": \"http://marc.info/?l=bugtraq&m=141694386919794&w=2\"}, {\"name\": \"61552\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/61552\"}, {\"name\": \"61780\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/61780\"}, {\"name\": \"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279\", \"refsource\": \"CONFIRM\", \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279\"}, {\"name\": \"https://support.citrix.com/article/CTX200223\", \"refsource\": \"CONFIRM\", \"url\": \"https://support.citrix.com/article/CTX200223\"}, {\"name\": \"DSA-3032\", \"refsource\": \"DEBIAN\", \"url\": \"http://www.debian.org/security/2014/dsa-3032\"}, {\"name\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21686447\", \"refsource\": \"CONFIRM\", \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21686447\"}, {\"name\": \"62228\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/62228\"}, {\"name\": \"HPSBGN03138\", \"refsource\": \"HP\", \"url\": \"http://marc.info/?l=bugtraq&m=141330468527613&w=2\"}, {\"name\": \"61855\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/61855\"}, {\"name\": \"HPSBHF03124\", \"refsource\": \"HP\", \"url\": \"http://marc.info/?l=bugtraq&m=141235957116749&w=2\"}, {\"name\": \"60044\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/60044\"}, {\"name\": \"61291\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/61291\"}, {\"name\": \"RHSA-2014:1294\", \"refsource\": \"REDHAT\", \"url\": \"http://rhn.redhat.com/errata/RHSA-2014-1294.html\"}, {\"name\": \"HPSBHF03125\", \"refsource\": \"HP\", \"url\": \"http://marc.info/?l=bugtraq&m=141345648114150&w=2\"}, {\"name\": \"59737\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/59737\"}, {\"name\": \"61287\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/61287\"}, {\"name\": \"HPSBHF03146\", \"refsource\": \"HP\", \"url\": \"http://marc.info/?l=bugtraq&m=141383353622268&w=2\"}, {\"name\": \"HPSBGN03233\", \"refsource\": \"HP\", \"url\": \"http://marc.info/?l=bugtraq&m=142118135300698&w=2\"}, {\"name\": \"https://bugzilla.redhat.com/show_bug.cgi?id=1141597\", \"refsource\": \"CONFIRM\", \"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=1141597\"}, {\"name\": \"SSRT101739\", \"refsource\": \"HP\", \"url\": \"http://marc.info/?l=bugtraq&m=142118135300698&w=2\"}, {\"name\": \"61711\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/61711\"}, {\"name\": \"HPSBOV03228\", \"refsource\": \"HP\", \"url\": \"http://marc.info/?l=bugtraq&m=142113462216480&w=2\"}, {\"name\": \"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021361\", \"refsource\": \"CONFIRM\", \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021361\"}, {\"name\": \"HPSBGN03141\", \"refsource\": \"HP\", \"url\": \"http://marc.info/?l=bugtraq&m=141383304022067&w=2\"}, {\"name\": \"http://advisories.mageia.org/MGASA-2014-0388.html\", \"refsource\": \"CONFIRM\", \"url\": \"http://advisories.mageia.org/MGASA-2014-0388.html\"}, {\"name\": \"61128\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/61128\"}, {\"name\": \"https://support.citrix.com/article/CTX200217\", \"refsource\": \"CONFIRM\", \"url\": \"https://support.citrix.com/article/CTX200217\"}, {\"name\": \"61471\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/61471\"}, {\"name\": \"60055\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/60055\"}, {\"name\": \"20140926 GNU Bash Environmental Variable Command Injection Vulnerability\", \"refsource\": \"CISCO\", \"url\": \"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bash\"}, {\"name\": \"61550\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/61550\"}, {\"name\": \"61633\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/61633\"}, {\"name\": \"http://linux.oracle.com/errata/ELSA-2014-1293.html\", \"refsource\": \"CONFIRM\", \"url\": \"http://linux.oracle.com/errata/ELSA-2014-1293.html\"}, {\"name\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21686494\", \"refsource\": \"CONFIRM\", \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21686494\"}, {\"name\": \"https://kb.bluecoat.com/index?page=content&id=SA82\", \"refsource\": \"CONFIRM\", \"url\": \"https://kb.bluecoat.com/index?page=content&id=SA82\"}, {\"name\": \"61328\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/61328\"}, {\"name\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21685733\", \"refsource\": \"CONFIRM\", \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21685733\"}, {\"name\": \"42938\", \"refsource\": \"EXPLOIT-DB\", \"url\": \"https://www.exploit-db.com/exploits/42938/\"}, {\"name\": \"61129\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/61129\"}, {\"name\": \"61700\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/61700\"}, {\"name\": \"61603\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/61603\"}, {\"name\": \"61857\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/61857\"}, {\"name\": \"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879\", \"refsource\": \"CONFIRM\", \"url\": \"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879\"}, {\"name\": \"http://packetstormsecurity.com/files/161107/SonicWall-SSL-VPN-Shellshock-Remote-Code-Execution.html\", \"refsource\": \"MISC\", \"url\": \"http://packetstormsecurity.com/files/161107/SonicWall-SSL-VPN-Shellshock-Remote-Code-Execution.html\"}, {\"name\": \"https://www.arista.com/en/support/advisories-notices/security-advisories/1008-security-advisory-0006\", \"refsource\": \"MISC\", \"url\": \"https://www.arista.com/en/support/advisories-notices/security-advisories/1008-security-advisory-0006\"}]}}}}, \"cveMetadata\": {\"assignerOrgId\": \"79363d38-fa19-49d1-9214-5f28da3f3ac5\", \"assignerShortName\": \"debian\", \"cveId\": \"CVE-2014-6271\", \"datePublished\": \"2014-09-24T18:00:00.000Z\", \"dateReserved\": \"2014-09-09T00:00:00.000Z\", \"dateUpdated\": \"2025-10-22T00:05:36.342Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.1\"}"},{"alert":0,"cve":"CVE-2014-6271","id":10862,"kind":"epss","observed_at":1793982001,"payload":"{\"date\": \"2026-11-06\", \"epss\": 0.99999, \"percentile\": 0.99993}"},{"alert":0,"cve":"CVE-2014-6271","id":8608,"kind":"epss","observed_at":1793895600,"payload":"{\"date\": \"2026-11-05\", \"epss\": 0.99999, \"percentile\": 0.99993}"},{"alert":0,"cve":"CVE-2014-6271","id":6396,"kind":"epss","observed_at":1793809200,"payload":"{\"date\": \"2026-11-04\", \"epss\": 0.99999, \"percentile\": 0.99993}"},{"alert":0,"cve":"CVE-2014-6271","id":4173,"kind":"epss","observed_at":1793722800,"payload":"{\"date\": \"2026-11-03\", \"epss\": 0.99999, \"percentile\": 0.99993}"},{"alert":0,"cve":"CVE-2014-6271","id":1955,"kind":"epss","observed_at":1793665375,"payload":"{\"date\": \"2026-11-02\", \"epss\": 0.99999, \"percentile\": 0.99993}"},{"alert":1,"cve":"CVE-2014-6271","id":1422,"kind":"kev","observed_at":1793665375,"payload":"{\"cveID\": \"CVE-2014-6271\", \"cwes\": [\"CWE-78\"], \"dateAdded\": \"2022-01-28\", \"dueDate\": \"2022-07-28\", \"forensicTriage\": \"No\", \"knownRansomwareCampaignUse\": \"Unknown\", \"notes\": \"https://nvd.nist.gov/vuln/detail/CVE-2014-6271\", \"product\": \"Bourne-Again Shell (Bash)\", \"requiredAction\": \"Apply updates per vendor instructions.\", \"shortDescription\": \"GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.\", \"vendorProject\": \"GNU\", \"vulnerabilityName\": \"GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability\"}"}],"record":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"cna":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T12:10:13.276Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"37816","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"https://www.exploit-db.com/exploits/37816/"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.html"},{"name":"SUSE-SU-2014:1223","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00034.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21685749"},{"name":"HPSBMU03165","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=141577137423233&w=2"},{"name":"SSRT101816","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=142719845423222&w=2"},{"name":"39918","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"https://www.exploit-db.com/exploits/39918/"},{"name":"HPSBHF03119","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=141216668515282&w=2"},{"name":"RHSA-2014:1295","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://rhn.redhat.com/errata/RHSA-2014-1295.html"},{"name":"openSUSE-SU-2014:1226","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00037.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk102673&src=securityAlerts"},{"name":"HPSBST03131","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=141383138121313&w=2"},{"name":"SSRT101819","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=142721162228379&w=2"},{"name":"20141001 NEW VMSA-2014-0010 - VMware product updates address critical Bash security vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/533593/100/0/threaded"},{"name":"HPSBMU03245","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=142358026505815&w=2"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686084"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686479"},{"name":"HPSBST03196","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=142719845423222&w=2"},{"name":"61188","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/61188"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0"},{"name":"JVN#55667175","tags":["third-party-advisory","x_refsource_JVN","x_transferred"],"url":"http://jvn.jp/en/jp/JVN55667175/index.html"},{"name":"61676","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/61676"},{"name":"40619","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"https://www.exploit-db.com/exploits/40619/"},{"name":"openSUSE-SU-2014:1254","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.html"},{"name":"60433","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/60433"},{"name":"38849","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"https://www.exploit-db.com/exploits/38849/"},{"name":"HPSBMU03143","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=141383026420882&w=2"},{"name":"HPSBMU03182","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=141585637922673&w=2"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673"},{"name":"SUSE-SU-2014:1260","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00049.html"},{"name":"HPSBST03155","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=141576728022234&w=2"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21685541"},{"name":"61715","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/61715"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html"},{"name":"61816","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/61816"},{"name":"openSUSE-SU-2014:1310","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-updates/2014-10/msg00025.html"},{"name":"61442","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/61442"},{"name":"HPSBMU03246","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=142358078406056&w=2"},{"name":"HPSBST03195","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=142805027510172&w=2"},{"name":"61283","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/61283"},{"name":"SSRT101711","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=142113462216480&w=2"},{"name":"USN-2362-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"http://www.ubuntu.com/usn/USN-2362-1"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10085"},{"name":"openSUSE-SU-2014:1308","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-updates/2014-10/msg00023.html"},{"name":"61654","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/61654"},{"name":"61542","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/61542"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.novell.com/support/kb/doc.php?id=7015701"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315"},{"name":"62312","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/62312"},{"name":"59272","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/59272"},{"name":"HPSBST03122","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=141319209015420&w=2"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html"},{"name":"HPSBMU03217","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=141879528318582&w=2"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21685604"},{"name":"SSRT101868","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=142118135300698&w=2"},{"name":"61703","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/61703"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://support.apple.com/kb/HT6495"},{"name":"VU#252743","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred"],"url":"http://www.kb.cert.org/vuls/id/252743"},{"name":"61065","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/61065"},{"name":"SUSE-SU-2014:1213","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00029.html"},{"name":"HPSBST03129","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=141383196021590&w=2"},{"name":"HPSBMU03144","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=141383081521087&w=2"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686445"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686131"},{"name":"70103","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/70103"},{"name":"JVNDB-2014-000126","tags":["third-party-advisory","x_refsource_JVNDB","x_transferred"],"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2014-000126"},{"name":"SSRT101827","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=141879528318582&w=2"},{"name":"TA14-268A","tags":["third-party-advisory","x_refsource_CERT","x_transferred"],"url":"http://www.us-cert.gov/ncas/alerts/TA14-268A"},{"name":"SUSE-SU-2014:1212","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00028.html"},{"name":"61641","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/61641"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10648"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://access.redhat.com/node/1200223"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://packetstormsecurity.com/files/137376/IPFire-Bash-Environment-Variable-Injection-Shellshock.html"},{"name":"SUSE-SU-2014:1287","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00004.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898"},{"name":"APPLE-SA-2014-10-16-1","tags":["vendor-advisory","x_refsource_APPLE","x_transferred"],"url":"http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21685914"},{"name":"20141001 FW: NEW VMSA-2014-0010 - VMware product updates address critical Bash security vulnerabilities","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"],"url":"http://seclists.org/fulldisclosure/2014/Oct/0"},{"name":"MDVSA-2015:164","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"],"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:164"},{"name":"RHSA-2014:1293","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://rhn.redhat.com/errata/RHSA-2014-1293.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04497075"},{"name":"openSUSE-SU-2014:1238","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00040.html"},{"name":"HPSBMU03220","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=142721162228379&w=2"},{"name":"60325","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/60325"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes"},{"name":"60024","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/60024"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html"},{"name":"34879","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"https://www.exploit-db.com/exploits/34879/"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://access.redhat.com/articles/1200223"},{"name":"62343","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/62343"},{"name":"61565","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/61565"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://www.suse.com/support/shellshock/"},{"name":"HPSBST03157","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=141450491804793&w=2"},{"name":"61313","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/61313"},{"name":"SSRT101742","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=142358026505815&w=2"},{"name":"61873","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/61873"},{"name":"61485","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/61485"},{"name":"60947","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/60947"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04518183"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://support.apple.com/kb/HT6535"},{"name":"HPSBST03154","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=141577297623641&w=2"},{"name":"HPSBST03265","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=142546741516006&w=2"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021272"},{"name":"HPSBGN03142","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=141383244821813&w=2"},{"name":"61312","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/61312"},{"name":"60193","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/60193"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.vmware.com/security/advisories/VMSA-2014-0010.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://linux.oracle.com/errata/ELSA-2014-1294.html"},{"name":"60063","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/60063"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://packetstormsecurity.com/files/128573/Apache-mod_cgi-Remote-Command-Execution.html"},{"name":"60034","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/60034"},{"name":"HPSBMU03133","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=141330425327438&w=2"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://lcamtuf.blogspot.com/2014/09/quick-notes-about-bash-bug-its-impact.html"},{"name":"59907","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/59907"},{"name":"58200","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/58200"},{"name":"HPSBST03181","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=141577241923505&w=2"},{"name":"61643","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/61643"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.novell.com/support/kb/doc.php?id=7015721"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21687079"},{"name":"61503","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/61503"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686246"},{"name":"RHSA-2014:1354","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://rhn.redhat.com/errata/RHSA-2014-1354.html"},{"name":"40938","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"https://www.exploit-db.com/exploits/40938/"},{"name":"HPSBGN03117","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=141216207813411&w=2"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://support.novell.com/security/cve/CVE-2014-6271.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915"},{"name":"61547","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/61547"},{"name":"HPSBHF03145","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=141383465822787&w=2"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.qnap.com/i/en/support/con_show.php?cid=61"},{"name":"HPSBST03148","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=141694386919794&w=2"},{"name":"61552","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/61552"},{"name":"61780","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/61780"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://support.citrix.com/article/CTX200223"},{"name":"DSA-3032","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"],"url":"http://www.debian.org/security/2014/dsa-3032"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686447"},{"name":"62228","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/62228"},{"name":"HPSBGN03138","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=141330468527613&w=2"},{"name":"61855","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/61855"},{"name":"HPSBHF03124","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=141235957116749&w=2"},{"name":"60044","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/60044"},{"name":"61291","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/61291"},{"name":"RHSA-2014:1294","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://rhn.redhat.com/errata/RHSA-2014-1294.html"},{"name":"HPSBHF03125","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=141345648114150&w=2"},{"name":"59737","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/59737"},{"name":"61287","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/61287"},{"name":"HPSBHF03146","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=141383353622268&w=2"},{"name":"HPSBGN03233","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=142118135300698&w=2"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1141597"},{"name":"SSRT101739","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=142118135300698&w=2"},{"name":"61711","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/61711"},{"name":"HPSBOV03228","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=142113462216480&w=2"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021361"},{"name":"HPSBGN03141","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=141383304022067&w=2"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://advisories.mageia.org/MGASA-2014-0388.html"},{"name":"61128","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/61128"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://support.citrix.com/article/CTX200217"},{"name":"61471","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/61471"},{"name":"60055","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/60055"},{"name":"20140926 GNU Bash Environmental Variable Command Injection Vulnerability","tags":["vendor-advisory","x_refsource_CISCO","x_transferred"],"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bash"},{"name":"61550","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/61550"},{"name":"61633","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/61633"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://linux.oracle.com/errata/ELSA-2014-1293.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686494"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://kb.bluecoat.com/index?page=content&id=SA82"},{"name":"61328","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/61328"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21685733"},{"name":"42938","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"https://www.exploit-db.com/exploits/42938/"},{"name":"61129","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/61129"},{"name":"61700","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/61700"},{"name":"61603","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/61603"},{"name":"61857","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/61857"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://packetstormsecurity.com/files/161107/SonicWall-SSL-VPN-Shellshock-Remote-Code-Execution.html"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/1008-security-advisory-0006"}],"title":"CVE Program Container"},{"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}},{"other":{"content":{"id":"CVE-2014-6271","options":[{"Exploitation":"active"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2025-02-07T13:45:49.549420Z","version":"2.0.3"},"type":"ssvc"}},{"other":{"content":{"dateAdded":"2022-01-28","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-6271"},"type":"kev"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-78","description":"CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2025-10-22T00:05:36.342Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-6271"}],"timeline":[{"lang":"en","time":"2022-01-28T00:00:00.000Z","value":"CVE-2014-6271 added to CISA KEV"}],"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2014-09-24T00:00:00.000Z","descriptions":[{"lang":"en","value":"GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka \"ShellShock.\"  NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2021-11-05T16:37:05.000Z","orgId":"79363d38-fa19-49d1-9214-5f28da3f3ac5","shortName":"debian"},"references":[{"name":"37816","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"https://www.exploit-db.com/exploits/37816/"},{"tags":["x_refsource_MISC"],"url":"http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.html"},{"name":"SUSE-SU-2014:1223","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00034.html"},{"tags":["x_refsource_CONFIRM"],"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897"},{"tags":["x_refsource_CONFIRM"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21685749"},{"name":"HPSBMU03165","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=141577137423233&w=2"},{"name":"SSRT101816","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=142719845423222&w=2"},{"name":"39918","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"https://www.exploit-db.com/exploits/39918/"},{"name":"HPSBHF03119","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=141216668515282&w=2"},{"name":"RHSA-2014:1295","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://rhn.redhat.com/errata/RHSA-2014-1295.html"},{"name":"openSUSE-SU-2014:1226","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00037.html"},{"tags":["x_refsource_CONFIRM"],"url":"https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/"},{"tags":["x_refsource_CONFIRM"],"url":"https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk102673&src=securityAlerts"},{"name":"HPSBST03131","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=141383138121313&w=2"},{"name":"SSRT101819","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=142721162228379&w=2"},{"name":"20141001 NEW VMSA-2014-0010 - VMware product updates address critical Bash security vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/533593/100/0/threaded"},{"name":"HPSBMU03245","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=142358026505815&w=2"},{"tags":["x_refsource_CONFIRM"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686084"},{"tags":["x_refsource_CONFIRM"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686479"},{"name":"HPSBST03196","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=142719845423222&w=2"},{"name":"61188","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/61188"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0"},{"name":"JVN#55667175","tags":["third-party-advisory","x_refsource_JVN"],"url":"http://jvn.jp/en/jp/JVN55667175/index.html"},{"name":"61676","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/61676"},{"name":"40619","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"https://www.exploit-db.com/exploits/40619/"},{"name":"openSUSE-SU-2014:1254","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.html"},{"name":"60433","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/60433"},{"name":"38849","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"https://www.exploit-db.com/exploits/38849/"},{"name":"HPSBMU03143","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=141383026420882&w=2"},{"name":"HPSBMU03182","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=141585637922673&w=2"},{"tags":["x_refsource_CONFIRM"],"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673"},{"name":"SUSE-SU-2014:1260","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00049.html"},{"name":"HPSBST03155","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=141576728022234&w=2"},{"tags":["x_refsource_CONFIRM"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21685541"},{"name":"61715","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/61715"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html"},{"name":"61816","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/61816"},{"name":"openSUSE-SU-2014:1310","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-updates/2014-10/msg00025.html"},{"name":"61442","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/61442"},{"name":"HPSBMU03246","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=142358078406056&w=2"},{"name":"HPSBST03195","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=142805027510172&w=2"},{"name":"61283","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/61283"},{"name":"SSRT101711","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=142113462216480&w=2"},{"name":"USN-2362-1","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"http://www.ubuntu.com/usn/USN-2362-1"},{"tags":["x_refsource_CONFIRM"],"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10085"},{"name":"openSUSE-SU-2014:1308","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-updates/2014-10/msg00023.html"},{"name":"61654","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/61654"},{"name":"61542","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/61542"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.novell.com/support/kb/doc.php?id=7015701"},{"tags":["x_refsource_CONFIRM"],"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315"},{"name":"62312","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/62312"},{"name":"59272","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/59272"},{"name":"HPSBST03122","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=141319209015420&w=2"},{"tags":["x_refsource_CONFIRM"],"url":"https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html"},{"name":"HPSBMU03217","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=141879528318582&w=2"},{"tags":["x_refsource_CONFIRM"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21685604"},{"name":"SSRT101868","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=142118135300698&w=2"},{"name":"61703","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/61703"},{"tags":["x_refsource_CONFIRM"],"url":"http://support.apple.com/kb/HT6495"},{"name":"VU#252743","tags":["third-party-advisory","x_refsource_CERT-VN"],"url":"http://www.kb.cert.org/vuls/id/252743"},{"name":"61065","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/61065"},{"name":"SUSE-SU-2014:1213","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00029.html"},{"name":"HPSBST03129","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=141383196021590&w=2"},{"name":"HPSBMU03144","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=141383081521087&w=2"},{"tags":["x_refsource_CONFIRM"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686445"},{"tags":["x_refsource_CONFIRM"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686131"},{"name":"70103","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/70103"},{"name":"JVNDB-2014-000126","tags":["third-party-advisory","x_refsource_JVNDB"],"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2014-000126"},{"name":"SSRT101827","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=141879528318582&w=2"},{"name":"TA14-268A","tags":["third-party-advisory","x_refsource_CERT"],"url":"http://www.us-cert.gov/ncas/alerts/TA14-268A"},{"name":"SUSE-SU-2014:1212","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00028.html"},{"name":"61641","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/61641"},{"tags":["x_refsource_CONFIRM"],"url":"https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10648"},{"tags":["x_refsource_CONFIRM"],"url":"https://access.redhat.com/node/1200223"},{"tags":["x_refsource_MISC"],"url":"http://packetstormsecurity.com/files/137376/IPFire-Bash-Environment-Variable-Injection-Shellshock.html"},{"name":"SUSE-SU-2014:1287","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00004.html"},{"tags":["x_refsource_CONFIRM"],"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898"},{"name":"APPLE-SA-2014-10-16-1","tags":["vendor-advisory","x_refsource_APPLE"],"url":"http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html"},{"tags":["x_refsource_CONFIRM"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21685914"},{"name":"20141001 FW: NEW VMSA-2014-0010 - VMware product updates address critical Bash security vulnerabilities","tags":["mailing-list","x_refsource_FULLDISC"],"url":"http://seclists.org/fulldisclosure/2014/Oct/0"},{"name":"MDVSA-2015:164","tags":["vendor-advisory","x_refsource_MANDRIVA"],"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:164"},{"name":"RHSA-2014:1293","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://rhn.redhat.com/errata/RHSA-2014-1293.html"},{"tags":["x_refsource_CONFIRM"],"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04497075"},{"name":"openSUSE-SU-2014:1238","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00040.html"},{"name":"HPSBMU03220","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=142721162228379&w=2"},{"name":"60325","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/60325"},{"tags":["x_refsource_CONFIRM"],"url":"https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes"},{"name":"60024","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/60024"},{"tags":["x_refsource_MISC"],"url":"http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html"},{"name":"34879","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"https://www.exploit-db.com/exploits/34879/"},{"tags":["x_refsource_CONFIRM"],"url":"https://access.redhat.com/articles/1200223"},{"name":"62343","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/62343"},{"name":"61565","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/61565"},{"tags":["x_refsource_CONFIRM"],"url":"https://www.suse.com/support/shellshock/"},{"name":"HPSBST03157","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=141450491804793&w=2"},{"name":"61313","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/61313"},{"name":"SSRT101742","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=142358026505815&w=2"},{"name":"61873","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/61873"},{"name":"61485","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/61485"},{"name":"60947","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/60947"},{"tags":["x_refsource_CONFIRM"],"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04518183"},{"tags":["x_refsource_CONFIRM"],"url":"https://support.apple.com/kb/HT6535"},{"name":"HPSBST03154","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=141577297623641&w=2"},{"name":"HPSBST03265","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=142546741516006&w=2"},{"tags":["x_refsource_CONFIRM"],"url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021272"},{"name":"HPSBGN03142","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=141383244821813&w=2"},{"name":"61312","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/61312"},{"name":"60193","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/60193"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.vmware.com/security/advisories/VMSA-2014-0010.html"},{"tags":["x_refsource_CONFIRM"],"url":"http://linux.oracle.com/errata/ELSA-2014-1294.html"},{"name":"60063","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/60063"},{"tags":["x_refsource_MISC"],"url":"http://packetstormsecurity.com/files/128573/Apache-mod_cgi-Remote-Command-Execution.html"},{"name":"60034","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/60034"},{"name":"HPSBMU03133","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=141330425327438&w=2"},{"tags":["x_refsource_MISC"],"url":"http://lcamtuf.blogspot.com/2014/09/quick-notes-about-bash-bug-its-impact.html"},{"name":"59907","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/59907"},{"name":"58200","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/58200"},{"name":"HPSBST03181","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=141577241923505&w=2"},{"name":"61643","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/61643"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.novell.com/support/kb/doc.php?id=7015721"},{"tags":["x_refsource_CONFIRM"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21687079"},{"name":"61503","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/61503"},{"tags":["x_refsource_CONFIRM"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686246"},{"name":"RHSA-2014:1354","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://rhn.redhat.com/errata/RHSA-2014-1354.html"},{"name":"40938","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"https://www.exploit-db.com/exploits/40938/"},{"name":"HPSBGN03117","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=141216207813411&w=2"},{"tags":["x_refsource_CONFIRM"],"url":"http://support.novell.com/security/cve/CVE-2014-6271.html"},{"tags":["x_refsource_CONFIRM"],"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915"},{"name":"61547","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/61547"},{"name":"HPSBHF03145","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=141383465822787&w=2"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.qnap.com/i/en/support/con_show.php?cid=61"},{"name":"HPSBST03148","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=141694386919794&w=2"},{"name":"61552","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/61552"},{"name":"61780","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/61780"},{"tags":["x_refsource_CONFIRM"],"url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279"},{"tags":["x_refsource_CONFIRM"],"url":"https://support.citrix.com/article/CTX200223"},{"name":"DSA-3032","tags":["vendor-advisory","x_refsource_DEBIAN"],"url":"http://www.debian.org/security/2014/dsa-3032"},{"tags":["x_refsource_CONFIRM"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686447"},{"name":"62228","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/62228"},{"name":"HPSBGN03138","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=141330468527613&w=2"},{"name":"61855","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/61855"},{"name":"HPSBHF03124","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=141235957116749&w=2"},{"name":"60044","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/60044"},{"name":"61291","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/61291"},{"name":"RHSA-2014:1294","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://rhn.redhat.com/errata/RHSA-2014-1294.html"},{"name":"HPSBHF03125","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=141345648114150&w=2"},{"name":"59737","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/59737"},{"name":"61287","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/61287"},{"name":"HPSBHF03146","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=141383353622268&w=2"},{"name":"HPSBGN03233","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=142118135300698&w=2"},{"tags":["x_refsource_CONFIRM"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1141597"},{"name":"SSRT101739","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=142118135300698&w=2"},{"name":"61711","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/61711"},{"name":"HPSBOV03228","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=142113462216480&w=2"},{"tags":["x_refsource_CONFIRM"],"url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021361"},{"name":"HPSBGN03141","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=141383304022067&w=2"},{"tags":["x_refsource_CONFIRM"],"url":"http://advisories.mageia.org/MGASA-2014-0388.html"},{"name":"61128","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/61128"},{"tags":["x_refsource_CONFIRM"],"url":"https://support.citrix.com/article/CTX200217"},{"name":"61471","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/61471"},{"name":"60055","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/60055"},{"name":"20140926 GNU Bash Environmental Variable Command Injection Vulnerability","tags":["vendor-advisory","x_refsource_CISCO"],"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bash"},{"name":"61550","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/61550"},{"name":"61633","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/61633"},{"tags":["x_refsource_CONFIRM"],"url":"http://linux.oracle.com/errata/ELSA-2014-1293.html"},{"tags":["x_refsource_CONFIRM"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686494"},{"tags":["x_refsource_CONFIRM"],"url":"https://kb.bluecoat.com/index?page=content&id=SA82"},{"name":"61328","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/61328"},{"tags":["x_refsource_CONFIRM"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21685733"},{"name":"42938","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"https://www.exploit-db.com/exploits/42938/"},{"name":"61129","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/61129"},{"name":"61700","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/61700"},{"name":"61603","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/61603"},{"name":"61857","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/61857"},{"tags":["x_refsource_CONFIRM"],"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879"},{"tags":["x_refsource_MISC"],"url":"http://packetstormsecurity.com/files/161107/SonicWall-SSL-VPN-Shellshock-Remote-Code-Execution.html"},{"tags":["x_refsource_MISC"],"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/1008-security-advisory-0006"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"security@debian.org","ID":"CVE-2014-6271","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka \"ShellShock.\"  NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"37816","refsource":"EXPLOIT-DB","url":"https://www.exploit-db.com/exploits/37816/"},{"name":"http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.html","refsource":"MISC","url":"http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.html"},{"name":"SUSE-SU-2014:1223","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00034.html"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=swg21685749","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=swg21685749"},{"name":"HPSBMU03165","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=141577137423233&w=2"},{"name":"SSRT101816","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=142719845423222&w=2"},{"name":"39918","refsource":"EXPLOIT-DB","url":"https://www.exploit-db.com/exploits/39918/"},{"name":"HPSBHF03119","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=141216668515282&w=2"},{"name":"RHSA-2014:1295","refsource":"REDHAT","url":"http://rhn.redhat.com/errata/RHSA-2014-1295.html"},{"name":"openSUSE-SU-2014:1226","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00037.html"},{"name":"https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/","refsource":"CONFIRM","url":"https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/"},{"name":"https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk102673&src=securityAlerts","refsource":"CONFIRM","url":"https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk102673&src=securityAlerts"},{"name":"HPSBST03131","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=141383138121313&w=2"},{"name":"SSRT101819","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=142721162228379&w=2"},{"name":"20141001 NEW VMSA-2014-0010 - VMware product updates address critical Bash security vulnerabilities","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/533593/100/0/threaded"},{"name":"HPSBMU03245","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=142358026505815&w=2"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=swg21686084","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686084"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=swg21686479","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686479"},{"name":"HPSBST03196","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=142719845423222&w=2"},{"name":"61188","refsource":"SECUNIA","url":"http://secunia.com/advisories/61188"},{"name":"http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0","refsource":"CONFIRM","url":"http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0"},{"name":"JVN#55667175","refsource":"JVN","url":"http://jvn.jp/en/jp/JVN55667175/index.html"},{"name":"61676","refsource":"SECUNIA","url":"http://secunia.com/advisories/61676"},{"name":"40619","refsource":"EXPLOIT-DB","url":"https://www.exploit-db.com/exploits/40619/"},{"name":"openSUSE-SU-2014:1254","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.html"},{"name":"60433","refsource":"SECUNIA","url":"http://secunia.com/advisories/60433"},{"name":"38849","refsource":"EXPLOIT-DB","url":"https://www.exploit-db.com/exploits/38849/"},{"name":"HPSBMU03143","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=141383026420882&w=2"},{"name":"HPSBMU03182","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=141585637922673&w=2"},{"name":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673","refsource":"CONFIRM","url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673"},{"name":"SUSE-SU-2014:1260","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00049.html"},{"name":"HPSBST03155","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=141576728022234&w=2"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=swg21685541","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=swg21685541"},{"name":"61715","refsource":"SECUNIA","url":"http://secunia.com/advisories/61715"},{"name":"http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html","refsource":"CONFIRM","url":"http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html"},{"name":"61816","refsource":"SECUNIA","url":"http://secunia.com/advisories/61816"},{"name":"openSUSE-SU-2014:1310","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-updates/2014-10/msg00025.html"},{"name":"61442","refsource":"SECUNIA","url":"http://secunia.com/advisories/61442"},{"name":"HPSBMU03246","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=142358078406056&w=2"},{"name":"HPSBST03195","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=142805027510172&w=2"},{"name":"61283","refsource":"SECUNIA","url":"http://secunia.com/advisories/61283"},{"name":"SSRT101711","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=142113462216480&w=2"},{"name":"USN-2362-1","refsource":"UBUNTU","url":"http://www.ubuntu.com/usn/USN-2362-1"},{"name":"https://kc.mcafee.com/corporate/index?page=content&id=SB10085","refsource":"CONFIRM","url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10085"},{"name":"openSUSE-SU-2014:1308","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-updates/2014-10/msg00023.html"},{"name":"61654","refsource":"SECUNIA","url":"http://secunia.com/advisories/61654"},{"name":"61542","refsource":"SECUNIA","url":"http://secunia.com/advisories/61542"},{"name":"http://www.novell.com/support/kb/doc.php?id=7015701","refsource":"CONFIRM","url":"http://www.novell.com/support/kb/doc.php?id=7015701"},{"name":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315","refsource":"CONFIRM","url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315"},{"name":"62312","refsource":"SECUNIA","url":"http://secunia.com/advisories/62312"},{"name":"59272","refsource":"SECUNIA","url":"http://secunia.com/advisories/59272"},{"name":"HPSBST03122","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=141319209015420&w=2"},{"name":"https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html","refsource":"CONFIRM","url":"https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html"},{"name":"HPSBMU03217","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=141879528318582&w=2"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=swg21685604","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=swg21685604"},{"name":"SSRT101868","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=142118135300698&w=2"},{"name":"61703","refsource":"SECUNIA","url":"http://secunia.com/advisories/61703"},{"name":"http://support.apple.com/kb/HT6495","refsource":"CONFIRM","url":"http://support.apple.com/kb/HT6495"},{"name":"VU#252743","refsource":"CERT-VN","url":"http://www.kb.cert.org/vuls/id/252743"},{"name":"61065","refsource":"SECUNIA","url":"http://secunia.com/advisories/61065"},{"name":"SUSE-SU-2014:1213","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00029.html"},{"name":"HPSBST03129","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=141383196021590&w=2"},{"name":"HPSBMU03144","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=141383081521087&w=2"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=swg21686445","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686445"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=swg21686131","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686131"},{"name":"70103","refsource":"BID","url":"http://www.securityfocus.com/bid/70103"},{"name":"JVNDB-2014-000126","refsource":"JVNDB","url":"http://jvndb.jvn.jp/jvndb/JVNDB-2014-000126"},{"name":"SSRT101827","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=141879528318582&w=2"},{"name":"TA14-268A","refsource":"CERT","url":"http://www.us-cert.gov/ncas/alerts/TA14-268A"},{"name":"SUSE-SU-2014:1212","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00028.html"},{"name":"61641","refsource":"SECUNIA","url":"http://secunia.com/advisories/61641"},{"name":"https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10648","refsource":"CONFIRM","url":"https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10648"},{"name":"https://access.redhat.com/node/1200223","refsource":"CONFIRM","url":"https://access.redhat.com/node/1200223"},{"name":"http://packetstormsecurity.com/files/137376/IPFire-Bash-Environment-Variable-Injection-Shellshock.html","refsource":"MISC","url":"http://packetstormsecurity.com/files/137376/IPFire-Bash-Environment-Variable-Injection-Shellshock.html"},{"name":"SUSE-SU-2014:1287","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00004.html"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898"},{"name":"APPLE-SA-2014-10-16-1","refsource":"APPLE","url":"http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=swg21685914","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=swg21685914"},{"name":"20141001 FW: NEW VMSA-2014-0010 - VMware product updates address critical Bash security vulnerabilities","refsource":"FULLDISC","url":"http://seclists.org/fulldisclosure/2014/Oct/0"},{"name":"MDVSA-2015:164","refsource":"MANDRIVA","url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:164"},{"name":"RHSA-2014:1293","refsource":"REDHAT","url":"http://rhn.redhat.com/errata/RHSA-2014-1293.html"},{"name":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04497075","refsource":"CONFIRM","url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04497075"},{"name":"openSUSE-SU-2014:1238","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00040.html"},{"name":"HPSBMU03220","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=142721162228379&w=2"},{"name":"60325","refsource":"SECUNIA","url":"http://secunia.com/advisories/60325"},{"name":"https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes","refsource":"CONFIRM","url":"https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes"},{"name":"60024","refsource":"SECUNIA","url":"http://secunia.com/advisories/60024"},{"name":"http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html","refsource":"MISC","url":"http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html"},{"name":"34879","refsource":"EXPLOIT-DB","url":"https://www.exploit-db.com/exploits/34879/"},{"name":"https://access.redhat.com/articles/1200223","refsource":"CONFIRM","url":"https://access.redhat.com/articles/1200223"},{"name":"62343","refsource":"SECUNIA","url":"http://secunia.com/advisories/62343"},{"name":"61565","refsource":"SECUNIA","url":"http://secunia.com/advisories/61565"},{"name":"https://www.suse.com/support/shellshock/","refsource":"CONFIRM","url":"https://www.suse.com/support/shellshock/"},{"name":"HPSBST03157","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=141450491804793&w=2"},{"name":"61313","refsource":"SECUNIA","url":"http://secunia.com/advisories/61313"},{"name":"SSRT101742","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=142358026505815&w=2"},{"name":"61873","refsource":"SECUNIA","url":"http://secunia.com/advisories/61873"},{"name":"61485","refsource":"SECUNIA","url":"http://secunia.com/advisories/61485"},{"name":"60947","refsource":"SECUNIA","url":"http://secunia.com/advisories/60947"},{"name":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04518183","refsource":"CONFIRM","url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04518183"},{"name":"https://support.apple.com/kb/HT6535","refsource":"CONFIRM","url":"https://support.apple.com/kb/HT6535"},{"name":"HPSBST03154","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=141577297623641&w=2"},{"name":"HPSBST03265","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=142546741516006&w=2"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021272","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021272"},{"name":"HPSBGN03142","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=141383244821813&w=2"},{"name":"61312","refsource":"SECUNIA","url":"http://secunia.com/advisories/61312"},{"name":"60193","refsource":"SECUNIA","url":"http://secunia.com/advisories/60193"},{"name":"http://www.vmware.com/security/advisories/VMSA-2014-0010.html","refsource":"CONFIRM","url":"http://www.vmware.com/security/advisories/VMSA-2014-0010.html"},{"name":"http://linux.oracle.com/errata/ELSA-2014-1294.html","refsource":"CONFIRM","url":"http://linux.oracle.com/errata/ELSA-2014-1294.html"},{"name":"60063","refsource":"SECUNIA","url":"http://secunia.com/advisories/60063"},{"name":"http://packetstormsecurity.com/files/128573/Apache-mod_cgi-Remote-Command-Execution.html","refsource":"MISC","url":"http://packetstormsecurity.com/files/128573/Apache-mod_cgi-Remote-Command-Execution.html"},{"name":"60034","refsource":"SECUNIA","url":"http://secunia.com/advisories/60034"},{"name":"HPSBMU03133","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=141330425327438&w=2"},{"name":"http://lcamtuf.blogspot.com/2014/09/quick-notes-about-bash-bug-its-impact.html","refsource":"MISC","url":"http://lcamtuf.blogspot.com/2014/09/quick-notes-about-bash-bug-its-impact.html"},{"name":"59907","refsource":"SECUNIA","url":"http://secunia.com/advisories/59907"},{"name":"58200","refsource":"SECUNIA","url":"http://secunia.com/advisories/58200"},{"name":"HPSBST03181","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=141577241923505&w=2"},{"name":"61643","refsource":"SECUNIA","url":"http://secunia.com/advisories/61643"},{"name":"http://www.novell.com/support/kb/doc.php?id=7015721","refsource":"CONFIRM","url":"http://www.novell.com/support/kb/doc.php?id=7015721"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=swg21687079","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=swg21687079"},{"name":"61503","refsource":"SECUNIA","url":"http://secunia.com/advisories/61503"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=swg21686246","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686246"},{"name":"RHSA-2014:1354","refsource":"REDHAT","url":"http://rhn.redhat.com/errata/RHSA-2014-1354.html"},{"name":"40938","refsource":"EXPLOIT-DB","url":"https://www.exploit-db.com/exploits/40938/"},{"name":"HPSBGN03117","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=141216207813411&w=2"},{"name":"http://support.novell.com/security/cve/CVE-2014-6271.html","refsource":"CONFIRM","url":"http://support.novell.com/security/cve/CVE-2014-6271.html"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915"},{"name":"61547","refsource":"SECUNIA","url":"http://secunia.com/advisories/61547"},{"name":"HPSBHF03145","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=141383465822787&w=2"},{"name":"http://www.qnap.com/i/en/support/con_show.php?cid=61","refsource":"CONFIRM","url":"http://www.qnap.com/i/en/support/con_show.php?cid=61"},{"name":"HPSBST03148","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=141694386919794&w=2"},{"name":"61552","refsource":"SECUNIA","url":"http://secunia.com/advisories/61552"},{"name":"61780","refsource":"SECUNIA","url":"http://secunia.com/advisories/61780"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279"},{"name":"https://support.citrix.com/article/CTX200223","refsource":"CONFIRM","url":"https://support.citrix.com/article/CTX200223"},{"name":"DSA-3032","refsource":"DEBIAN","url":"http://www.debian.org/security/2014/dsa-3032"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=swg21686447","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686447"},{"name":"62228","refsource":"SECUNIA","url":"http://secunia.com/advisories/62228"},{"name":"HPSBGN03138","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=141330468527613&w=2"},{"name":"61855","refsource":"SECUNIA","url":"http://secunia.com/advisories/61855"},{"name":"HPSBHF03124","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=141235957116749&w=2"},{"name":"60044","refsource":"SECUNIA","url":"http://secunia.com/advisories/60044"},{"name":"61291","refsource":"SECUNIA","url":"http://secunia.com/advisories/61291"},{"name":"RHSA-2014:1294","refsource":"REDHAT","url":"http://rhn.redhat.com/errata/RHSA-2014-1294.html"},{"name":"HPSBHF03125","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=141345648114150&w=2"},{"name":"59737","refsource":"SECUNIA","url":"http://secunia.com/advisories/59737"},{"name":"61287","refsource":"SECUNIA","url":"http://secunia.com/advisories/61287"},{"name":"HPSBHF03146","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=141383353622268&w=2"},{"name":"HPSBGN03233","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=142118135300698&w=2"},{"name":"https://bugzilla.redhat.com/show_bug.cgi?id=1141597","refsource":"CONFIRM","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1141597"},{"name":"SSRT101739","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=142118135300698&w=2"},{"name":"61711","refsource":"SECUNIA","url":"http://secunia.com/advisories/61711"},{"name":"HPSBOV03228","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=142113462216480&w=2"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021361","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021361"},{"name":"HPSBGN03141","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=141383304022067&w=2"},{"name":"http://advisories.mageia.org/MGASA-2014-0388.html","refsource":"CONFIRM","url":"http://advisories.mageia.org/MGASA-2014-0388.html"},{"name":"61128","refsource":"SECUNIA","url":"http://secunia.com/advisories/61128"},{"name":"https://support.citrix.com/article/CTX200217","refsource":"CONFIRM","url":"https://support.citrix.com/article/CTX200217"},{"name":"61471","refsource":"SECUNIA","url":"http://secunia.com/advisories/61471"},{"name":"60055","refsource":"SECUNIA","url":"http://secunia.com/advisories/60055"},{"name":"20140926 GNU Bash Environmental Variable Command Injection Vulnerability","refsource":"CISCO","url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bash"},{"name":"61550","refsource":"SECUNIA","url":"http://secunia.com/advisories/61550"},{"name":"61633","refsource":"SECUNIA","url":"http://secunia.com/advisories/61633"},{"name":"http://linux.oracle.com/errata/ELSA-2014-1293.html","refsource":"CONFIRM","url":"http://linux.oracle.com/errata/ELSA-2014-1293.html"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=swg21686494","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686494"},{"name":"https://kb.bluecoat.com/index?page=content&id=SA82","refsource":"CONFIRM","url":"https://kb.bluecoat.com/index?page=content&id=SA82"},{"name":"61328","refsource":"SECUNIA","url":"http://secunia.com/advisories/61328"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=swg21685733","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=swg21685733"},{"name":"42938","refsource":"EXPLOIT-DB","url":"https://www.exploit-db.com/exploits/42938/"},{"name":"61129","refsource":"SECUNIA","url":"http://secunia.com/advisories/61129"},{"name":"61700","refsource":"SECUNIA","url":"http://secunia.com/advisories/61700"},{"name":"61603","refsource":"SECUNIA","url":"http://secunia.com/advisories/61603"},{"name":"61857","refsource":"SECUNIA","url":"http://secunia.com/advisories/61857"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879"},{"name":"http://packetstormsecurity.com/files/161107/SonicWall-SSL-VPN-Shellshock-Remote-Code-Execution.html","refsource":"MISC","url":"http://packetstormsecurity.com/files/161107/SonicWall-SSL-VPN-Shellshock-Remote-Code-Execution.html"},{"name":"https://www.arista.com/en/support/advisories-notices/security-advisories/1008-security-advisory-0006","refsource":"MISC","url":"https://www.arista.com/en/support/advisories-notices/security-advisories/1008-security-advisory-0006"}]}}}},"cveMetadata":{"assignerOrgId":"79363d38-fa19-49d1-9214-5f28da3f3ac5","assignerShortName":"debian","cveId":"CVE-2014-6271","datePublished":"2014-09-24T18:00:00.000Z","dateReserved":"2014-09-09T00:00:00.000Z","dateUpdated":"2025-10-22T00:05:36.342Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"cna_checked":1794046801,"cve":"CVE-2014-6271","description":"GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka \"ShellShock.\"  NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.","epss":{"date":"2026-11-12","epss":0.99999,"percentile":0.99993},"epss_checked":1794522003,"first_seen":1793665375,"kev":{"cveID":"CVE-2014-6271","cwes":["CWE-78"],"dateAdded":"2022-01-28","dueDate":"2022-07-28","forensicTriage":"No","knownRansomwareCampaignUse":"Unknown","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-6271","product":"Bourne-Again Shell (Bash)","requiredAction":"Apply updates per vendor instructions.","shortDescription":"GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.","vendorProject":"GNU","vulnerabilityName":"GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability"},"kev_checked":1794522003,"products":"n/a n/a","references":["https://www.exploit-db.com/exploits/37816/","http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.html","http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00034.html","http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897","http://www-01.ibm.com/support/docview.wss?uid=swg21685749","http://marc.info/?l=bugtraq&m=141577137423233&w=2","http://marc.info/?l=bugtraq&m=142719845423222&w=2","https://www.exploit-db.com/exploits/39918/","http://marc.info/?l=bugtraq&m=141216668515282&w=2","http://rhn.redhat.com/errata/RHSA-2014-1295.html","http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00037.html","https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/","https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk102673&src=securityAlerts","http://marc.info/?l=bugtraq&m=141383138121313&w=2","http://marc.info/?l=bugtraq&m=142721162228379&w=2","http://www.securityfocus.com/archive/1/533593/100/0/threaded","http://marc.info/?l=bugtraq&m=142358026505815&w=2","http://www-01.ibm.com/support/docview.wss?uid=swg21686084","http://www-01.ibm.com/support/docview.wss?uid=swg21686479","http://secunia.com/advisories/61188","http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0","http://jvn.jp/en/jp/JVN55667175/index.html","http://secunia.com/advisories/61676","https://www.exploit-db.com/exploits/40619/","http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.html","http://secunia.com/advisories/60433","https://www.exploit-db.com/exploits/38849/","http://marc.info/?l=bugtraq&m=141383026420882&w=2","http://marc.info/?l=bugtraq&m=141585637922673&w=2","http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673","http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00049.html","http://marc.info/?l=bugtraq&m=141576728022234&w=2","http://www-01.ibm.com/support/docview.wss?uid=swg21685541","http://secunia.com/advisories/61715","http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html","http://secunia.com/advisories/61816","http://lists.opensuse.org/opensuse-updates/2014-10/msg00025.html","http://secunia.com/advisories/61442","http://marc.info/?l=bugtraq&m=142358078406056&w=2","http://marc.info/?l=bugtraq&m=142805027510172&w=2","http://secunia.com/advisories/61283","http://marc.info/?l=bugtraq&m=142113462216480&w=2","http://www.ubuntu.com/usn/USN-2362-1","https://kc.mcafee.com/corporate/index?page=content&id=SB10085","http://lists.opensuse.org/opensuse-updates/2014-10/msg00023.html","http://secunia.com/advisories/61654","http://secunia.com/advisories/61542","http://www.novell.com/support/kb/doc.php?id=7015701","http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315","http://secunia.com/advisories/62312","http://secunia.com/advisories/59272","http://marc.info/?l=bugtraq&m=141319209015420&w=2","https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html","http://marc.info/?l=bugtraq&m=141879528318582&w=2","http://www-01.ibm.com/support/docview.wss?uid=swg21685604","http://marc.info/?l=bugtraq&m=142118135300698&w=2","http://secunia.com/advisories/61703","http://support.apple.com/kb/HT6495","http://www.kb.cert.org/vuls/id/252743","http://secunia.com/advisories/61065","http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00029.html","http://marc.info/?l=bugtraq&m=141383196021590&w=2","http://marc.info/?l=bugtraq&m=141383081521087&w=2","http://www-01.ibm.com/support/docview.wss?uid=swg21686445","http://www-01.ibm.com/support/docview.wss?uid=swg21686131","http://www.securityfocus.com/bid/70103","http://jvndb.jvn.jp/jvndb/JVNDB-2014-000126","http://www.us-cert.gov/ncas/alerts/TA14-268A","http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00028.html","http://secunia.com/advisories/61641","https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10648","https://access.redhat.com/node/1200223","http://packetstormsecurity.com/files/137376/IPFire-Bash-Environment-Variable-Injection-Shellshock.html","http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00004.html","http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898","http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html","http://www-01.ibm.com/support/docview.wss?uid=swg21685914","http://seclists.org/fulldisclosure/2014/Oct/0","http://www.mandriva.com/security/advisories?name=MDVSA-2015:164","http://rhn.redhat.com/errata/RHSA-2014-1293.html","https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04497075","http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00040.html","http://secunia.com/advisories/60325","https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes","http://secunia.com/advisories/60024","http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html","https://www.exploit-db.com/exploits/34879/","https://access.redhat.com/articles/1200223","http://secunia.com/advisories/62343","http://secunia.com/advisories/61565","https://www.suse.com/support/shellshock/","http://marc.info/?l=bugtraq&m=141450491804793&w=2","http://secunia.com/advisories/61313","http://secunia.com/advisories/61873","http://secunia.com/advisories/61485","http://secunia.com/advisories/60947","https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04518183","https://support.apple.com/kb/HT6535","http://marc.info/?l=bugtraq&m=141577297623641&w=2","http://marc.info/?l=bugtraq&m=142546741516006&w=2","http://www-01.ibm.com/support/docview.wss?uid=isg3T1021272","http://marc.info/?l=bugtraq&m=141383244821813&w=2","http://secunia.com/advisories/61312","http://secunia.com/advisories/60193","http://www.vmware.com/security/advisories/VMSA-2014-0010.html","http://linux.oracle.com/errata/ELSA-2014-1294.html","http://secunia.com/advisories/60063","http://packetstormsecurity.com/files/128573/Apache-mod_cgi-Remote-Command-Execution.html","http://secunia.com/advisories/60034","http://marc.info/?l=bugtraq&m=141330425327438&w=2","http://lcamtuf.blogspot.com/2014/09/quick-notes-about-bash-bug-its-impact.html","http://secunia.com/advisories/59907","http://secunia.com/advisories/58200","http://marc.info/?l=bugtraq&m=141577241923505&w=2","http://secunia.com/advisories/61643","http://www.novell.com/support/kb/doc.php?id=7015721","http://www-01.ibm.com/support/docview.wss?uid=swg21687079","http://secunia.com/advisories/61503","http://www-01.ibm.com/support/docview.wss?uid=swg21686246","http://rhn.redhat.com/errata/RHSA-2014-1354.html","https://www.exploit-db.com/exploits/40938/","http://marc.info/?l=bugtraq&m=141216207813411&w=2","http://support.novell.com/security/cve/CVE-2014-6271.html","http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915","http://secunia.com/advisories/61547","http://marc.info/?l=bugtraq&m=141383465822787&w=2","http://www.qnap.com/i/en/support/con_show.php?cid=61","http://marc.info/?l=bugtraq&m=141694386919794&w=2","http://secunia.com/advisories/61552","http://secunia.com/advisories/61780","http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279","https://support.citrix.com/article/CTX200223","http://www.debian.org/security/2014/dsa-3032","http://www-01.ibm.com/support/docview.wss?uid=swg21686447","http://secunia.com/advisories/62228","http://marc.info/?l=bugtraq&m=141330468527613&w=2","http://secunia.com/advisories/61855","http://marc.info/?l=bugtraq&m=141235957116749&w=2","http://secunia.com/advisories/60044","http://secunia.com/advisories/61291","http://rhn.redhat.com/errata/RHSA-2014-1294.html","http://marc.info/?l=bugtraq&m=141345648114150&w=2","http://secunia.com/advisories/59737","http://secunia.com/advisories/61287","http://marc.info/?l=bugtraq&m=141383353622268&w=2","https://bugzilla.redhat.com/show_bug.cgi?id=1141597","http://secunia.com/advisories/61711","http://www-01.ibm.com/support/docview.wss?uid=isg3T1021361","http://marc.info/?l=bugtraq&m=141383304022067&w=2","http://advisories.mageia.org/MGASA-2014-0388.html","http://secunia.com/advisories/61128","https://support.citrix.com/article/CTX200217","http://secunia.com/advisories/61471","http://secunia.com/advisories/60055","http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bash","http://secunia.com/advisories/61550","http://secunia.com/advisories/61633","http://linux.oracle.com/errata/ELSA-2014-1293.html","http://www-01.ibm.com/support/docview.wss?uid=swg21686494","https://kb.bluecoat.com/index?page=content&id=SA82","http://secunia.com/advisories/61328","http://www-01.ibm.com/support/docview.wss?uid=swg21685733","https://www.exploit-db.com/exploits/42938/","http://secunia.com/advisories/61129","http://secunia.com/advisories/61700","http://secunia.com/advisories/61603","http://secunia.com/advisories/61857","http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879","http://packetstormsecurity.com/files/161107/SonicWall-SSL-VPN-Shellshock-Remote-Code-Execution.html","https://www.arista.com/en/support/advisories-notices/security-advisories/1008-security-advisory-0006","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-6271"],"score":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","provider":"CISA-ADP","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"solutions":"","state":"PUBLISHED","title":"GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability","updated_at":1794500401,"workarounds":""},"sources":[]}