CVE-2014-6271

9.8

CRITICAL

GNU Bourne-Again Shell (Bash) Arbitrary Code Execu - [Actively Exploited]

Description

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka "ShellShock." NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.

INFO

Published Date :

Sept. 24, 2014, 6:48 p.m.

Last Modified :

July 24, 2024, 4:47 p.m.

Source :

[email protected]

Remotely Exploitable :

Yes !

Impact Score :

5.9

Exploitability Score :

3.9

CISA Notification

CISA KEV (Known Exploited Vulnerabilities)

For the benefit of the cybersecurity community and network defenders—and to help every organization better manage vulnerabilities and keep pace with threat activity—CISA maintains the authoritative source of vulnerabilities that have been exploited in the wild.

Due Date: Jul 28, 2022

Alert Date: Jan 28, 2022 | 998 days ago

Description :

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.

Required Action :

Apply updates per vendor instructions.

Public PoC/Exploit Available at Github

CVE-2014-6271 has a 577 public PoC/Exploit available at Github. Go to the Public Exploits tab to see the list.

Affected Products

The following products are affected by CVE-2014-6271 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID	Vendor	Product
1	Ibm	qradar_security_information_and_event_manager
2	Ibm	storwize_v7000_firmware
3	Ibm	storwize_v5000_firmware
4	Ibm	san_volume_controller_firmware
5	Ibm	pureapplication_system
6	Ibm	storwize_v3700_firmware
7	Ibm	storwize_v3500_firmware
8	Ibm	security_access_manager_for_web_8.0_firmware
9	Ibm	storwize_v7000
10	Ibm	flex_system_v7000
11	Ibm	storwize_v3700
12	Ibm	storwize_v3500
13	Ibm	san_volume_controller
14	Ibm	storwize_v5000
15	Ibm	security_access_manager_for_web_7.0_firmware
16	Ibm	security_access_manager_for_mobile_8.0_firmware
17	Ibm	qradar_risk_manager
18	Ibm	qradar_vulnerability_manager
19	Ibm	workload_deployer
20	Ibm	smartcloud_provisioning
21	Ibm	infosphere_guardium_database_activity_monitoring
22	Ibm	smartcloud_entry_appliance
23	Ibm	software_defined_network_for_virtual_environments
24	Ibm	starter_kit_for_cloud
25	Ibm	flex_system_v7000_firmware
26	Ibm	stn6500_firmware
27	Ibm	stn6500
28	Ibm	stn6800_firmware
29	Ibm	stn6800
30	Ibm	stn7800_firmware
31	Ibm	stn7800
1	F5	big-ip_access_policy_manager
2	F5	big-ip_advanced_firewall_manager
3	F5	big-ip_analytics
4	F5	big-ip_application_acceleration_manager
5	F5	big-ip_application_security_manager
6	F5	big-ip_global_traffic_manager
7	F5	big-ip_link_controller
8	F5	big-ip_local_traffic_manager
9	F5	big-ip_policy_enforcement_manager
10	F5	big-ip_edge_gateway
11	F5	big-ip_webaccelerator
12	F5	enterprise_manager
13	F5	big-ip_protocol_security_module
14	F5	traffix_signaling_delivery_controller
15	F5	big-ip_wan_optimization_manager
16	F5	big-iq_cloud
17	F5	big-iq_device
18	F5	big-iq_security
19	F5	arx_firmware
20	F5	arx
1	Redhat	enterprise_linux
2	Redhat	enterprise_linux_desktop
3	Redhat	enterprise_linux_server
4	Redhat	enterprise_linux_workstation
5	Redhat	enterprise_linux_server_aus
6	Redhat	enterprise_linux_server_tus
7	Redhat	enterprise_linux_eus
8	Redhat	virtualization
9	Redhat	enterprise_linux_for_power_big_endian_eus
10	Redhat	enterprise_linux_for_ibm_z_systems
11	Redhat	enterprise_linux_for_power_big_endian
12	Redhat	enterprise_linux_for_scientific_computing
13	Redhat	enterprise_linux_server_from_rhui
14	Redhat	gluster_storage_server_for_on-premise
1	Suse	linux_enterprise_server
2	Suse	linux_enterprise_desktop
3	Suse	linux_enterprise_software_development_kit
4	Suse	studio_onsite
1	Vmware	esx
2	Vmware	vcenter_server_appliance
1	Novell	open_enterprise_server
2	Novell	zenworks_configuration_management
1	Citrix	netscaler_sdx_firmware
2	Citrix	netscaler_sdx
1	Canonical	ubuntu_linux
1	Gnu	bash
1	Debian	debian_linux
1	Qnap	qts
1	Apple	mac_os_x
1	Oracle	linux
1	Opensuse	opensuse
1	Arista	eos
1	Checkpoint	security_gateway
1	Mageia	mageia

: Total Affected Vendor : 17 | Products : 85

References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2014-6271.

URL	Resource
http://advisories.mageia.org/MGASA-2014-0388.html	Third Party Advisory
http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html	Broken Link Third Party Advisory
http://jvn.jp/en/jp/JVN55667175/index.html	Vendor Advisory
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000126	Third Party Advisory VDB Entry Vendor Advisory
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673	Third Party Advisory
http://lcamtuf.blogspot.com/2014/09/quick-notes-about-bash-bug-its-impact.html	Exploit Issue Tracking Third Party Advisory
http://linux.oracle.com/errata/ELSA-2014-1293.html	Third Party Advisory
http://linux.oracle.com/errata/ELSA-2014-1294.html	Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00028.html	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00029.html	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00034.html	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00037.html	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00040.html	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.html	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00049.html	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00004.html	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2014-10/msg00023.html	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2014-10/msg00025.html	Mailing List Third Party Advisory
http://marc.info/?l=bugtraq&m=141216207813411&w=2	Mailing List Third Party Advisory
http://marc.info/?l=bugtraq&m=141216668515282&w=2	Mailing List Third Party Advisory
http://marc.info/?l=bugtraq&m=141235957116749&w=2	Mailing List Third Party Advisory
http://marc.info/?l=bugtraq&m=141319209015420&w=2	Mailing List Third Party Advisory
http://marc.info/?l=bugtraq&m=141330425327438&w=2	Mailing List Third Party Advisory
http://marc.info/?l=bugtraq&m=141330468527613&w=2	Mailing List Third Party Advisory
http://marc.info/?l=bugtraq&m=141345648114150&w=2	Mailing List Third Party Advisory
http://marc.info/?l=bugtraq&m=141383026420882&w=2	Mailing List Third Party Advisory
http://marc.info/?l=bugtraq&m=141383081521087&w=2	Mailing List Third Party Advisory
http://marc.info/?l=bugtraq&m=141383138121313&w=2	Mailing List Third Party Advisory
http://marc.info/?l=bugtraq&m=141383196021590&w=2	Mailing List Third Party Advisory
http://marc.info/?l=bugtraq&m=141383244821813&w=2	Mailing List Third Party Advisory
http://marc.info/?l=bugtraq&m=141383304022067&w=2	Mailing List Third Party Advisory
http://marc.info/?l=bugtraq&m=141383353622268&w=2	Mailing List Third Party Advisory
http://marc.info/?l=bugtraq&m=141383465822787&w=2	Mailing List Third Party Advisory
http://marc.info/?l=bugtraq&m=141450491804793&w=2	Mailing List Third Party Advisory
http://marc.info/?l=bugtraq&m=141576728022234&w=2	Mailing List Third Party Advisory
http://marc.info/?l=bugtraq&m=141577137423233&w=2	Mailing List Third Party Advisory
http://marc.info/?l=bugtraq&m=141577241923505&w=2	Mailing List Third Party Advisory
http://marc.info/?l=bugtraq&m=141577297623641&w=2	Mailing List Third Party Advisory
http://marc.info/?l=bugtraq&m=141585637922673&w=2	Mailing List Third Party Advisory
http://marc.info/?l=bugtraq&m=141694386919794&w=2	Mailing List Third Party Advisory
http://marc.info/?l=bugtraq&m=141879528318582&w=2	Mailing List Third Party Advisory
http://marc.info/?l=bugtraq&m=142113462216480&w=2	Mailing List Third Party Advisory
http://marc.info/?l=bugtraq&m=142118135300698&w=2	Mailing List Third Party Advisory
http://marc.info/?l=bugtraq&m=142358026505815&w=2	Mailing List Third Party Advisory
http://marc.info/?l=bugtraq&m=142358078406056&w=2	Mailing List Third Party Advisory
http://marc.info/?l=bugtraq&m=142546741516006&w=2	Mailing List Third Party Advisory
http://marc.info/?l=bugtraq&m=142719845423222&w=2	Mailing List Third Party Advisory
http://marc.info/?l=bugtraq&m=142721162228379&w=2	Mailing List Third Party Advisory
http://marc.info/?l=bugtraq&m=142805027510172&w=2	Mailing List Third Party Advisory
http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.html	Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html	Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/128573/Apache-mod_cgi-Remote-Command-Execution.html	Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/137376/IPFire-Bash-Environment-Variable-Injection-Shellshock.html	Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/161107/SonicWall-SSL-VPN-Shellshock-Remote-Code-Execution.html	Third Party Advisory VDB Entry
http://rhn.redhat.com/errata/RHSA-2014-1293.html	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-1294.html	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-1295.html	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-1354.html	Third Party Advisory
http://seclists.org/fulldisclosure/2014/Oct/0	Mailing List Third Party Advisory
http://secunia.com/advisories/58200	Broken Link Third Party Advisory
http://secunia.com/advisories/59272	Broken Link Third Party Advisory
http://secunia.com/advisories/59737	Broken Link Third Party Advisory
http://secunia.com/advisories/59907	Broken Link Third Party Advisory
http://secunia.com/advisories/60024	Broken Link Third Party Advisory
http://secunia.com/advisories/60034	Broken Link Third Party Advisory
http://secunia.com/advisories/60044	Broken Link Third Party Advisory
http://secunia.com/advisories/60055	Broken Link Third Party Advisory
http://secunia.com/advisories/60063	Broken Link Third Party Advisory
http://secunia.com/advisories/60193	Broken Link Third Party Advisory
http://secunia.com/advisories/60325	Broken Link Third Party Advisory
http://secunia.com/advisories/60433	Broken Link Third Party Advisory
http://secunia.com/advisories/60947	Broken Link Third Party Advisory
http://secunia.com/advisories/61065	Broken Link Third Party Advisory
http://secunia.com/advisories/61128	Broken Link Third Party Advisory
http://secunia.com/advisories/61129	Broken Link Third Party Advisory
http://secunia.com/advisories/61188	Broken Link Third Party Advisory
http://secunia.com/advisories/61283	Broken Link Third Party Advisory
http://secunia.com/advisories/61287	Broken Link Third Party Advisory
http://secunia.com/advisories/61291	Broken Link Third Party Advisory
http://secunia.com/advisories/61312	Broken Link Third Party Advisory
http://secunia.com/advisories/61313	Broken Link Third Party Advisory
http://secunia.com/advisories/61328	Broken Link Third Party Advisory
http://secunia.com/advisories/61442	Broken Link Third Party Advisory
http://secunia.com/advisories/61471	Broken Link Third Party Advisory
http://secunia.com/advisories/61485	Broken Link Third Party Advisory
http://secunia.com/advisories/61503	Broken Link Third Party Advisory
http://secunia.com/advisories/61542	Broken Link Third Party Advisory
http://secunia.com/advisories/61547	Broken Link Third Party Advisory
http://secunia.com/advisories/61550	Broken Link Third Party Advisory
http://secunia.com/advisories/61552	Broken Link Third Party Advisory
http://secunia.com/advisories/61565	Broken Link Third Party Advisory
http://secunia.com/advisories/61603	Broken Link Third Party Advisory
http://secunia.com/advisories/61633	Broken Link Third Party Advisory
http://secunia.com/advisories/61641	Broken Link Third Party Advisory
http://secunia.com/advisories/61643	Broken Link Third Party Advisory
http://secunia.com/advisories/61654	Broken Link Third Party Advisory
http://secunia.com/advisories/61676	Broken Link Third Party Advisory
http://secunia.com/advisories/61700	Broken Link Third Party Advisory
http://secunia.com/advisories/61703	Broken Link Third Party Advisory
http://secunia.com/advisories/61711	Broken Link Third Party Advisory
http://secunia.com/advisories/61715	Broken Link Third Party Advisory
http://secunia.com/advisories/61780	Broken Link Third Party Advisory
http://secunia.com/advisories/61816	Broken Link Third Party Advisory
http://secunia.com/advisories/61855	Broken Link Third Party Advisory
http://secunia.com/advisories/61857	Broken Link Third Party Advisory
http://secunia.com/advisories/61873	Broken Link Third Party Advisory
http://secunia.com/advisories/62228	Broken Link Third Party Advisory
http://secunia.com/advisories/62312	Broken Link Third Party Advisory
http://secunia.com/advisories/62343	Broken Link Third Party Advisory
http://support.apple.com/kb/HT6495	Third Party Advisory
http://support.novell.com/security/cve/CVE-2014-6271.html	Third Party Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bash	Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=isg3T1021272	Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279	Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=isg3T1021361	Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879	Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897	Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898	Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915	Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21685541	Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21685604	Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21685733	Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21685749	Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21685914	Broken Link Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21686084	Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21686131	Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21686246	Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21686445	Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21686447	Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21686479	Broken Link Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21686494	Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21687079	Third Party Advisory
http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315	Broken Link Third Party Advisory
http://www.debian.org/security/2014/dsa-3032	Mailing List Third Party Advisory
http://www.kb.cert.org/vuls/id/252743	Third Party Advisory US Government Resource
http://www.mandriva.com/security/advisories?name=MDVSA-2015:164	Broken Link Third Party Advisory
http://www.novell.com/support/kb/doc.php?id=7015701	Third Party Advisory
http://www.novell.com/support/kb/doc.php?id=7015721	Third Party Advisory
http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html	Third Party Advisory
http://www.qnap.com/i/en/support/con_show.php?cid=61	Third Party Advisory
http://www.securityfocus.com/archive/1/533593/100/0/threaded	Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/70103	Broken Link Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/USN-2362-1	Third Party Advisory
http://www.us-cert.gov/ncas/alerts/TA14-268A	Third Party Advisory US Government Resource
http://www.vmware.com/security/advisories/VMSA-2014-0010.html	Third Party Advisory
http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0	Broken Link Third Party Advisory
https://access.redhat.com/articles/1200223	Exploit Third Party Advisory
https://access.redhat.com/node/1200223	Exploit Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1141597	Issue Tracking Patch
https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes	Broken Link Third Party Advisory
https://kb.bluecoat.com/index?page=content&id=SA82	Broken Link Third Party Advisory
https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10648	Third Party Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10085	Broken Link Third Party Advisory
https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/	Exploit Third Party Advisory
https://support.apple.com/kb/HT6535	Third Party Advisory
https://support.citrix.com/article/CTX200217	Third Party Advisory
https://support.citrix.com/article/CTX200223	Permissions Required
https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html	Third Party Advisory
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04497075	Third Party Advisory
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04518183	Broken Link Third Party Advisory
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk102673&src=securityAlerts	Third Party Advisory
https://www.arista.com/en/support/advisories-notices/security-advisories/1008-security-advisory-0006	Third Party Advisory
https://www.exploit-db.com/exploits/34879/	Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/37816/	Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/38849/	Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/39918/	Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/40619/	Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/40938/	Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/42938/	Exploit Third Party Advisory VDB Entry
https://www.suse.com/support/shellshock/	Third Party Advisory

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Faizan-Khanx/OSCP

This repository is designed to provide a comprehensive collection of study materials, notes, and resources for the Offensive Security Certified Professional (OSCP) exam. It covers all key topics from basic to advanced, helping aspiring penetration testers to prepare efficiently for the exam.

cybersecurity hacking oscp oscp-guide oscp-journey oscp-prep

Updated: 2 weeks, 1 day ago

1 stars 0 fork 0 watcher

Born at : Oct. 4, 2024, 4:43 p.m. This repo has been linked 75 different CVEs too.

EnriqueSanchezdelVillar/NotesHck

None

Python C Shell PHP PowerShell ASP.NET

Updated: 2 weeks, 5 days ago

0 stars 0 fork 0 watcher

Born at : Oct. 1, 2024, 2:21 p.m. This repo has been linked 66 different CVEs too.

rgzi/eJPTv2-Notes

None

Updated: 3 weeks, 1 day ago

1 stars 0 fork 0 watcher

Born at : Sept. 29, 2024, 9:43 p.m. This repo has been linked 3 different CVEs too.

J1ezds/Vulnerability-Wiki-page

这是一个每天同步Vulnerability-Wiki中docs-base中内容的项目

HTML

Updated: 1 month ago

0 stars 0 fork 0 watcher

Born at : Sept. 20, 2024, 3:27 a.m. This repo has been linked 203 different CVEs too.

RedisMadani/cyber-vault

A curated directory of essential cybersecurity resources and tools.

Updated: 1 month, 2 weeks ago

0 stars 0 fork 0 watcher

Born at : Sept. 6, 2024, 5:26 a.m. This repo has been linked 6 different CVEs too.

TheRealCiscoo/Shellshock

Explotación de la vulnerabilidad Shellshock (CVE 2014-6271)

bash cve linux shellshock

Updated: 1 month, 2 weeks ago

0 stars 0 fork 0 watcher

Born at : Sept. 5, 2024, 7:28 a.m. This repo has been linked 1 different CVEs too.

Dan-Duran/cybersecurity-tools

A curated collection of amazing software, libraries, documents, books, resources, and other cool security-related content.

Updated: 1 month, 2 weeks ago

0 stars 0 fork 0 watcher

Born at : Aug. 29, 2024, 8:55 p.m. This repo has been linked 2 different CVEs too.

sajerestan1/Incident-handling-with-Splunk-Reconnaissance-Phase

None

Updated: 1 month, 4 weeks ago

0 stars 0 fork 0 watcher

Born at : Aug. 24, 2024, 12:19 a.m. This repo has been linked 1 different CVEs too.

gunlawsguy2/awesome-security

None

Updated: 2 months ago

2 stars 0 fork 0 watcher

Born at : Aug. 17, 2024, 3:35 a.m. This repo has been linked 2 different CVEs too.

yveeranki5566/LogData-Analysis

None

Updated: 2 months, 2 weeks ago

0 stars 0 fork 0 watcher

Born at : Aug. 4, 2024, 10:15 p.m. This repo has been linked 3 different CVEs too.

t0ffe/CybSec_Course_Project_II

This is my CSB Course Project II on vulnerabilities in Metasploitable3

Updated: 2 months, 3 weeks ago

1 stars 0 fork 0 watcher

Born at : July 15, 2024, 9:17 p.m. This repo has been linked 3 different CVEs too.

cyberguru02/Splunk-Boss-of-the-SOC

None

Updated: 3 months, 1 week ago

0 stars 0 fork 0 watcher

Born at : July 14, 2024, 6:42 a.m. This repo has been linked 1 different CVEs too.

TheRealCiscoo/Shellshock-Exploit

Exploit para abusar de la vulnerabilidad Shellshock (CVE-2014-6271).

bash shellshock cve exploit linux

Python

Updated: 1 month, 2 weeks ago

1 stars 0 fork 0 watcher

Born at : July 14, 2024, 6:19 a.m. This repo has been linked 1 different CVEs too.

JalenDoy/IncidentHandlingWithSplunk

None

Updated: 3 months, 1 week ago

0 stars 0 fork 0 watcher

Born at : July 8, 2024, 11:12 p.m. This repo has been linked 1 different CVEs too.

jli149/Incident-handling-with-Splunk

Learn to use Splunk for incident handling through interactive scenarios.

Updated: 3 months ago

0 stars 0 fork 0 watcher

Born at : July 8, 2024, 10:43 p.m. This repo has been linked 1 different CVEs too.

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2014-6271 vulnerability anywhere in the article.

The following table lists the changes that have been made to the CVE-2014-6271 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

Modified Analysis by [email protected]

Jul. 24, 2024

Action	Type	Old Value	New Value
Changed	Reference Type	http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html Third Party Advisory	http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html Broken Link, Third Party Advisory
Changed	Reference Type	http://lcamtuf.blogspot.com/2014/09/quick-notes-about-bash-bug-its-impact.html Third Party Advisory	http://lcamtuf.blogspot.com/2014/09/quick-notes-about-bash-bug-its-impact.html Exploit, Issue Tracking, Third Party Advisory
Changed	Reference Type	http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00028.html Third Party Advisory	http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00028.html Mailing List, Third Party Advisory
Changed	Reference Type	http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00029.html Third Party Advisory	http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00029.html Mailing List, Third Party Advisory
Changed	Reference Type	http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00034.html Third Party Advisory	http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00034.html Mailing List, Third Party Advisory
Changed	Reference Type	http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00037.html Third Party Advisory	http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00037.html Mailing List, Third Party Advisory
Changed	Reference Type	http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00040.html Third Party Advisory	http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00040.html Mailing List, Third Party Advisory
Changed	Reference Type	http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.html Third Party Advisory	http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.html Mailing List, Third Party Advisory
Changed	Reference Type	http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00049.html Third Party Advisory	http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00049.html Mailing List, Third Party Advisory
Changed	Reference Type	http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00004.html Third Party Advisory	http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00004.html Mailing List, Third Party Advisory
Changed	Reference Type	http://lists.opensuse.org/opensuse-updates/2014-10/msg00023.html Third Party Advisory	http://lists.opensuse.org/opensuse-updates/2014-10/msg00023.html Mailing List, Third Party Advisory
Changed	Reference Type	http://lists.opensuse.org/opensuse-updates/2014-10/msg00025.html Third Party Advisory	http://lists.opensuse.org/opensuse-updates/2014-10/msg00025.html Mailing List, Third Party Advisory
Changed	Reference Type	http://marc.info/?l=bugtraq&m=141216207813411&w=2 Third Party Advisory	http://marc.info/?l=bugtraq&m=141216207813411&w=2 Mailing List, Third Party Advisory
Changed	Reference Type	http://marc.info/?l=bugtraq&m=141216668515282&w=2 Third Party Advisory	http://marc.info/?l=bugtraq&m=141216668515282&w=2 Mailing List, Third Party Advisory
Changed	Reference Type	http://marc.info/?l=bugtraq&m=141235957116749&w=2 Third Party Advisory	http://marc.info/?l=bugtraq&m=141235957116749&w=2 Mailing List, Third Party Advisory
Changed	Reference Type	http://marc.info/?l=bugtraq&m=141319209015420&w=2 Third Party Advisory	http://marc.info/?l=bugtraq&m=141319209015420&w=2 Mailing List, Third Party Advisory
Changed	Reference Type	http://marc.info/?l=bugtraq&m=141330425327438&w=2 Third Party Advisory	http://marc.info/?l=bugtraq&m=141330425327438&w=2 Mailing List, Third Party Advisory
Changed	Reference Type	http://marc.info/?l=bugtraq&m=141330468527613&w=2 Third Party Advisory	http://marc.info/?l=bugtraq&m=141330468527613&w=2 Mailing List, Third Party Advisory
Changed	Reference Type	http://marc.info/?l=bugtraq&m=141345648114150&w=2 Third Party Advisory	http://marc.info/?l=bugtraq&m=141345648114150&w=2 Mailing List, Third Party Advisory
Changed	Reference Type	http://marc.info/?l=bugtraq&m=141383026420882&w=2 Third Party Advisory	http://marc.info/?l=bugtraq&m=141383026420882&w=2 Mailing List, Third Party Advisory
Changed	Reference Type	http://marc.info/?l=bugtraq&m=141383081521087&w=2 Third Party Advisory	http://marc.info/?l=bugtraq&m=141383081521087&w=2 Mailing List, Third Party Advisory
Changed	Reference Type	http://marc.info/?l=bugtraq&m=141383138121313&w=2 Third Party Advisory	http://marc.info/?l=bugtraq&m=141383138121313&w=2 Mailing List, Third Party Advisory
Changed	Reference Type	http://marc.info/?l=bugtraq&m=141383196021590&w=2 Third Party Advisory	http://marc.info/?l=bugtraq&m=141383196021590&w=2 Mailing List, Third Party Advisory
Changed	Reference Type	http://marc.info/?l=bugtraq&m=141383244821813&w=2 Third Party Advisory	http://marc.info/?l=bugtraq&m=141383244821813&w=2 Mailing List, Third Party Advisory
Changed	Reference Type	http://marc.info/?l=bugtraq&m=141383304022067&w=2 Third Party Advisory	http://marc.info/?l=bugtraq&m=141383304022067&w=2 Mailing List, Third Party Advisory
Changed	Reference Type	http://marc.info/?l=bugtraq&m=141383353622268&w=2 Third Party Advisory	http://marc.info/?l=bugtraq&m=141383353622268&w=2 Mailing List, Third Party Advisory
Changed	Reference Type	http://marc.info/?l=bugtraq&m=141383465822787&w=2 Third Party Advisory	http://marc.info/?l=bugtraq&m=141383465822787&w=2 Mailing List, Third Party Advisory
Changed	Reference Type	http://marc.info/?l=bugtraq&m=141450491804793&w=2 Third Party Advisory	http://marc.info/?l=bugtraq&m=141450491804793&w=2 Mailing List, Third Party Advisory
Changed	Reference Type	http://marc.info/?l=bugtraq&m=141576728022234&w=2 Third Party Advisory	http://marc.info/?l=bugtraq&m=141576728022234&w=2 Mailing List, Third Party Advisory
Changed	Reference Type	http://marc.info/?l=bugtraq&m=141577137423233&w=2 Third Party Advisory	http://marc.info/?l=bugtraq&m=141577137423233&w=2 Mailing List, Third Party Advisory
Changed	Reference Type	http://marc.info/?l=bugtraq&m=141577241923505&w=2 Third Party Advisory	http://marc.info/?l=bugtraq&m=141577241923505&w=2 Mailing List, Third Party Advisory
Changed	Reference Type	http://marc.info/?l=bugtraq&m=141577297623641&w=2 Third Party Advisory	http://marc.info/?l=bugtraq&m=141577297623641&w=2 Mailing List, Third Party Advisory
Changed	Reference Type	http://marc.info/?l=bugtraq&m=141585637922673&w=2 Third Party Advisory	http://marc.info/?l=bugtraq&m=141585637922673&w=2 Mailing List, Third Party Advisory
Changed	Reference Type	http://marc.info/?l=bugtraq&m=141694386919794&w=2 Third Party Advisory	http://marc.info/?l=bugtraq&m=141694386919794&w=2 Mailing List, Third Party Advisory
Changed	Reference Type	http://marc.info/?l=bugtraq&m=141879528318582&w=2 Third Party Advisory	http://marc.info/?l=bugtraq&m=141879528318582&w=2 Mailing List, Third Party Advisory
Changed	Reference Type	http://marc.info/?l=bugtraq&m=142113462216480&w=2 Third Party Advisory	http://marc.info/?l=bugtraq&m=142113462216480&w=2 Mailing List, Third Party Advisory
Changed	Reference Type	http://marc.info/?l=bugtraq&m=142118135300698&w=2 Third Party Advisory	http://marc.info/?l=bugtraq&m=142118135300698&w=2 Mailing List, Third Party Advisory
Changed	Reference Type	http://marc.info/?l=bugtraq&m=142358026505815&w=2 Third Party Advisory	http://marc.info/?l=bugtraq&m=142358026505815&w=2 Mailing List, Third Party Advisory
Changed	Reference Type	http://marc.info/?l=bugtraq&m=142358078406056&w=2 Third Party Advisory	http://marc.info/?l=bugtraq&m=142358078406056&w=2 Mailing List, Third Party Advisory
Changed	Reference Type	http://marc.info/?l=bugtraq&m=142546741516006&w=2 Third Party Advisory	http://marc.info/?l=bugtraq&m=142546741516006&w=2 Mailing List, Third Party Advisory
Changed	Reference Type	http://marc.info/?l=bugtraq&m=142719845423222&w=2 Third Party Advisory	http://marc.info/?l=bugtraq&m=142719845423222&w=2 Mailing List, Third Party Advisory
Changed	Reference Type	http://marc.info/?l=bugtraq&m=142721162228379&w=2 Third Party Advisory	http://marc.info/?l=bugtraq&m=142721162228379&w=2 Mailing List, Third Party Advisory
Changed	Reference Type	http://marc.info/?l=bugtraq&m=142805027510172&w=2 Third Party Advisory	http://marc.info/?l=bugtraq&m=142805027510172&w=2 Mailing List, Third Party Advisory
Changed	Reference Type	http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.html Third Party Advisory, VDB Entry	http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.html Exploit, Third Party Advisory, VDB Entry
Changed	Reference Type	http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html Third Party Advisory, VDB Entry	http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html Exploit, Third Party Advisory, VDB Entry
Changed	Reference Type	http://packetstormsecurity.com/files/128573/Apache-mod_cgi-Remote-Command-Execution.html Third Party Advisory, VDB Entry	http://packetstormsecurity.com/files/128573/Apache-mod_cgi-Remote-Command-Execution.html Exploit, Third Party Advisory, VDB Entry
Changed	Reference Type	http://secunia.com/advisories/58200 Third Party Advisory	http://secunia.com/advisories/58200 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/59272 Third Party Advisory	http://secunia.com/advisories/59272 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/59737 Third Party Advisory	http://secunia.com/advisories/59737 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/59907 Third Party Advisory	http://secunia.com/advisories/59907 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/60024 Third Party Advisory	http://secunia.com/advisories/60024 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/60034 Third Party Advisory	http://secunia.com/advisories/60034 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/60044 Third Party Advisory	http://secunia.com/advisories/60044 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/60055 Third Party Advisory	http://secunia.com/advisories/60055 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/60063 Third Party Advisory	http://secunia.com/advisories/60063 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/60193 Third Party Advisory	http://secunia.com/advisories/60193 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/60325 Third Party Advisory	http://secunia.com/advisories/60325 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/60433 Third Party Advisory	http://secunia.com/advisories/60433 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/60947 Third Party Advisory	http://secunia.com/advisories/60947 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/61065 Third Party Advisory	http://secunia.com/advisories/61065 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/61128 Third Party Advisory	http://secunia.com/advisories/61128 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/61129 Third Party Advisory	http://secunia.com/advisories/61129 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/61188 Third Party Advisory	http://secunia.com/advisories/61188 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/61283 Third Party Advisory	http://secunia.com/advisories/61283 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/61287 Third Party Advisory	http://secunia.com/advisories/61287 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/61291 Third Party Advisory	http://secunia.com/advisories/61291 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/61312 Third Party Advisory	http://secunia.com/advisories/61312 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/61313 Third Party Advisory	http://secunia.com/advisories/61313 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/61328 Third Party Advisory	http://secunia.com/advisories/61328 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/61442 Third Party Advisory	http://secunia.com/advisories/61442 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/61471 Third Party Advisory	http://secunia.com/advisories/61471 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/61485 Third Party Advisory	http://secunia.com/advisories/61485 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/61503 Third Party Advisory	http://secunia.com/advisories/61503 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/61542 Third Party Advisory	http://secunia.com/advisories/61542 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/61547 Third Party Advisory	http://secunia.com/advisories/61547 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/61550 Third Party Advisory	http://secunia.com/advisories/61550 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/61552 Third Party Advisory	http://secunia.com/advisories/61552 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/61565 Third Party Advisory	http://secunia.com/advisories/61565 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/61603 Third Party Advisory	http://secunia.com/advisories/61603 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/61633 Third Party Advisory	http://secunia.com/advisories/61633 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/61641 Third Party Advisory	http://secunia.com/advisories/61641 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/61643 Third Party Advisory	http://secunia.com/advisories/61643 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/61654 Third Party Advisory	http://secunia.com/advisories/61654 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/61676 Third Party Advisory	http://secunia.com/advisories/61676 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/61700 Third Party Advisory	http://secunia.com/advisories/61700 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/61703 Third Party Advisory	http://secunia.com/advisories/61703 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/61711 Third Party Advisory	http://secunia.com/advisories/61711 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/61715 Third Party Advisory	http://secunia.com/advisories/61715 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/61780 Third Party Advisory	http://secunia.com/advisories/61780 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/61816 Third Party Advisory	http://secunia.com/advisories/61816 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/61855 Third Party Advisory	http://secunia.com/advisories/61855 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/61857 Third Party Advisory	http://secunia.com/advisories/61857 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/61873 Third Party Advisory	http://secunia.com/advisories/61873 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/62228 Third Party Advisory	http://secunia.com/advisories/62228 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/62312 Third Party Advisory	http://secunia.com/advisories/62312 Broken Link, Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/62343 Third Party Advisory	http://secunia.com/advisories/62343 Broken Link, Third Party Advisory
Changed	Reference Type	http://www.debian.org/security/2014/dsa-3032 Third Party Advisory	http://www.debian.org/security/2014/dsa-3032 Mailing List, Third Party Advisory
Changed	Reference Type	http://www.mandriva.com/security/advisories?name=MDVSA-2015:164 Third Party Advisory	http://www.mandriva.com/security/advisories?name=MDVSA-2015:164 Broken Link, Third Party Advisory
Changed	Reference Type	http://www.securityfocus.com/archive/1/533593/100/0/threaded Third Party Advisory, VDB Entry	http://www.securityfocus.com/archive/1/533593/100/0/threaded Broken Link, Third Party Advisory, VDB Entry
Changed	Reference Type	http://www.securityfocus.com/bid/70103 Third Party Advisory, VDB Entry	http://www.securityfocus.com/bid/70103 Broken Link, Third Party Advisory, VDB Entry
Changed	Reference Type	http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0 Third Party Advisory	http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0 Broken Link, Third Party Advisory
Changed	Reference Type	http://www-01.ibm.com/support/docview.wss?uid=swg21685914 Third Party Advisory	http://www-01.ibm.com/support/docview.wss?uid=swg21685914 Broken Link, Third Party Advisory
Changed	Reference Type	http://www-01.ibm.com/support/docview.wss?uid=swg21686479 Third Party Advisory	http://www-01.ibm.com/support/docview.wss?uid=swg21686479 Broken Link, Third Party Advisory
Changed	Reference Type	http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315 Third Party Advisory	http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315 Broken Link, Third Party Advisory
Changed	Reference Type	https://access.redhat.com/articles/1200223 Third Party Advisory	https://access.redhat.com/articles/1200223 Exploit, Third Party Advisory
Changed	Reference Type	https://access.redhat.com/node/1200223 Third Party Advisory	https://access.redhat.com/node/1200223 Exploit, Third Party Advisory
Changed	Reference Type	https://bugzilla.redhat.com/show_bug.cgi?id=1141597 Issue Tracking, Patch, Third Party Advisory	https://bugzilla.redhat.com/show_bug.cgi?id=1141597 Issue Tracking, Patch
Changed	Reference Type	https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes Third Party Advisory	https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes Broken Link, Third Party Advisory
Changed	Reference Type	https://kb.bluecoat.com/index?page=content&id=SA82 Third Party Advisory	https://kb.bluecoat.com/index?page=content&id=SA82 Broken Link, Third Party Advisory
Changed	Reference Type	https://kc.mcafee.com/corporate/index?page=content&id=SB10085 Third Party Advisory	https://kc.mcafee.com/corporate/index?page=content&id=SB10085 Broken Link, Third Party Advisory
Changed	Reference Type	https://support.citrix.com/article/CTX200223 Third Party Advisory	https://support.citrix.com/article/CTX200223 Permissions Required
Changed	Reference Type	https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04518183 Third Party Advisory	https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04518183 Broken Link, Third Party Advisory
Changed	Reference Type	https://www.arista.com/en/support/advisories-notices/security-advisories/1008-security-advisory-0006 No Types Assigned	https://www.arista.com/en/support/advisories-notices/security-advisories/1008-security-advisory-0006 Third Party Advisory
Changed	Reference Type	https://www.exploit-db.com/exploits/34879/ Third Party Advisory, VDB Entry	https://www.exploit-db.com/exploits/34879/ Exploit, Third Party Advisory, VDB Entry
Changed	Reference Type	https://www.exploit-db.com/exploits/37816/ Third Party Advisory, VDB Entry	https://www.exploit-db.com/exploits/37816/ Exploit, Third Party Advisory, VDB Entry
Changed	Reference Type	https://www.exploit-db.com/exploits/38849/ Third Party Advisory, VDB Entry	https://www.exploit-db.com/exploits/38849/ Exploit, Third Party Advisory, VDB Entry
Changed	Reference Type	https://www.exploit-db.com/exploits/40619/ Third Party Advisory, VDB Entry	https://www.exploit-db.com/exploits/40619/ Exploit, Third Party Advisory, VDB Entry
Changed	Reference Type	https://www.exploit-db.com/exploits/40938/ Third Party Advisory, VDB Entry	https://www.exploit-db.com/exploits/40938/ Exploit, Third Party Advisory, VDB Entry
Changed	Reference Type	https://www.exploit-db.com/exploits/42938/ Third Party Advisory, VDB Entry	https://www.exploit-db.com/exploits/42938/ Exploit, Third Party Advisory, VDB Entry
Removed	CPE Configuration	OR cpe:2.3:a:gnu:bash:1.14.0::::::: cpe:2.3:a:gnu:bash:1.14.1::::::: cpe:2.3:a:gnu:bash:1.14.2::::::: cpe:2.3:a:gnu:bash:1.14.3::::::: cpe:2.3:a:gnu:bash:1.14.4::::::: cpe:2.3:a:gnu:bash:1.14.5::::::: cpe:2.3:a:gnu:bash:1.14.6::::::: cpe:2.3:a:gnu:bash:1.14.7::::::: cpe:2.3:a:gnu:bash:2.0::::::: cpe:2.3:a:gnu:bash:2.01::::::: cpe:2.3:a:gnu:bash:2.01.1::::::: cpe:2.3:a:gnu:bash:2.02::::::: cpe:2.3:a:gnu:bash:2.02.1::::::: cpe:2.3:a:gnu:bash:2.03::::::: cpe:2.3:a:gnu:bash:2.04::::::: cpe:2.3:a:gnu:bash:2.05::::::: cpe:2.3:a:gnu:bash:2.05:a::::::* cpe:2.3:a:gnu:bash:2.05:b::::::* cpe:2.3:a:gnu:bash:3.0::::::: cpe:2.3:a:gnu:bash:3.0.16::::::: cpe:2.3:a:gnu:bash:3.1::::::: cpe:2.3:a:gnu:bash:3.2::::::: cpe:2.3:a:gnu:bash:3.2.48::::::: cpe:2.3:a:gnu:bash:4.0::::::: cpe:2.3:a:gnu:bash:4.0:rc1::::::* cpe:2.3:a:gnu:bash:4.1::::::: cpe:2.3:a:gnu:bash:4.2::::::: cpe:2.3:a:gnu:bash:4.3:::::::
Added	CPE Configuration		OR cpe:2.3:a:gnu:bash::::::::* versions up to (including) 4.3
Added	CPE Configuration		OR cpe:2.3:o:arista:eos::::::::* versions from (including) 4.9.0 up to (excluding) 4.9.12 cpe:2.3:o:arista:eos::::::::* versions from (including) 4.10.0 up to (excluding) 4.10.9 cpe:2.3:o:arista:eos::::::::* versions from (including) 4.11.0 up to (excluding) 4.11.11 cpe:2.3:o:arista:eos::::::::* versions from (including) 4.12.0 up to (excluding) 4.12.9 cpe:2.3:o:arista:eos::::::::* versions from (including) 4.13.0 up to (excluding) 4.13.9 cpe:2.3:o:arista:eos::::::::* versions from (including) 4.14.0 up to (excluding) 4.14.4f
Added	CPE Configuration		OR cpe:2.3:o:oracle:linux:4::::::: cpe:2.3:o:oracle:linux:5:-::::::* cpe:2.3:o:oracle:linux:6:-::::::*
Added	CPE Configuration		OR cpe:2.3:o:qnap:qts::::::::* versions up to (excluding) 4.1.1 cpe:2.3:o:qnap:qts:4.1.1:-::::::* cpe:2.3:o:qnap:qts:4.1.1:build_0927::::::*
Added	CPE Configuration		OR cpe:2.3:o:mageia:mageia:3.0::::::: cpe:2.3:o:mageia:mageia:4.0:::::::
Added	CPE Configuration		OR cpe:2.3:a:redhat:gluster_storage_server_for_on-premise:2.1::::::: cpe:2.3:a:redhat:virtualization:3.4::::::: cpe:2.3:o:redhat:enterprise_linux:4.0::::::: cpe:2.3:o:redhat:enterprise_linux:5.0::::::: cpe:2.3:o:redhat:enterprise_linux:6.0::::::: cpe:2.3:o:redhat:enterprise_linux:7.0::::::: cpe:2.3:o:redhat:enterprise_linux_desktop:5.0::::::: cpe:2.3:o:redhat:enterprise_linux_desktop:6.0::::::: cpe:2.3:o:redhat:enterprise_linux_desktop:7.0::::::: cpe:2.3:o:redhat:enterprise_linux_eus:5.9::::::: cpe:2.3:o:redhat:enterprise_linux_eus:6.4::::::: cpe:2.3:o:redhat:enterprise_linux_eus:6.5::::::: cpe:2.3:o:redhat:enterprise_linux_eus:7.3::::::: cpe:2.3:o:redhat:enterprise_linux_eus:7.4::::::: cpe:2.3:o:redhat:enterprise_linux_eus:7.5::::::: cpe:2.3:o:redhat:enterprise_linux_eus:7.6::::::: cpe:2.3:o:redhat:enterprise_linux_eus:7.7::::::: cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:5.9_s390x::::::: cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:6.4_s390x::::::: cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:6.5_s390x::::::: cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:7.3_s390x::::::: cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:7.4_s390x::::::: cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:7.5_s390x::::::: cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:7.6_s390x::::::: cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:7.7_s390x::::::: cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:5.0_ppc::::::: cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:5.9_ppc::::::: cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:6.0_ppc64::::::: cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:6.4_ppc64::::::: cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:7.0_ppc64::::::: cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:6.5_ppc64::::::: cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.3_ppc64::::::: cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.4_ppc64::::::: cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.5_ppc64::::::: cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.6_ppc64::::::: cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.7_ppc64::::::: cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:6.0::::::: cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:7.0::::::: cpe:2.3:o:redhat:enterprise_linux_server:5.0::::::: cpe:2.3:o:redhat:enterprise_linux_server:6.0::::::: cpe:2.3:o:redhat:enterprise_linux_server:7.0::::::: cpe:2.3:o:redhat:enterprise_linux_server_aus:5.6::::::: cpe:2.3:o:redhat:enterprise_linux_server_aus:5.9::::::: cpe:2.3:o:redhat:enterprise_linux_server_aus:6.2::::::: cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4::::::: cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5::::::: cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3::::::: cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4::::::: cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6::::::: cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7::::::: cpe:2.3:o:redhat:enterprise_linux_server_from_rhui:5.0::::::: cpe:2.3:o:redhat:enterprise_linux_server_from_rhui:6.0::::::: cpe:2.3:o:redhat:enterprise_linux_server_from_rhui:7.0::::::: cpe:2.3:o:redhat:enterprise_linux_server_tus:6.5::::::: cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3::::::: cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6::::::: cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7::::::: cpe:2.3:o:redhat:enterprise_linux_workstation:5.0::::::: cpe:2.3:o:redhat:enterprise_linux_workstation:6.0::::::: cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:::::::
Added	CPE Configuration		OR cpe:2.3:a:suse:studio_onsite:1.3::::::: cpe:2.3:o:opensuse:opensuse:12.3::::::: cpe:2.3:o:opensuse:opensuse:13.1::::::: cpe:2.3:o:opensuse:opensuse:13.2::::::: cpe:2.3:o:suse:linux_enterprise_desktop:11:sp3::::::* cpe:2.3:o:suse:linux_enterprise_desktop:12:-::::::* cpe:2.3:o:suse:linux_enterprise_server:10:sp3:::ltss::: cpe:2.3:o:suse:linux_enterprise_server:10:sp4:::ltss::: cpe:2.3:o:suse:linux_enterprise_server:11:sp1:::ltss:-::* cpe:2.3:o:suse:linux_enterprise_server:11:sp2:::ltss::: cpe:2.3:o:suse:linux_enterprise_server:11:sp3::::-:: cpe:2.3:o:suse:linux_enterprise_server:11:sp3::::vmware:: cpe:2.3:o:suse:linux_enterprise_server:12:-::::::* cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp3::::::* cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:-::::::*
Added	CPE Configuration		OR cpe:2.3:o:debian:debian_linux:7.0:::::::
Added	CPE Configuration		OR cpe:2.3:a:ibm:infosphere_guardium_database_activity_monitoring:8.2::::::: cpe:2.3:a:ibm:infosphere_guardium_database_activity_monitoring:9.0::::::: cpe:2.3:a:ibm:infosphere_guardium_database_activity_monitoring:9.1::::::: cpe:2.3:a:ibm:pureapplication_system::::::::* versions from (including) 1.0.0.0 up to (including) 1.0.0.4 cpe:2.3:a:ibm:pureapplication_system::::::::* versions from (including) 1.1.0.0 up to (including) 1.1.0.4 cpe:2.3:a:ibm:pureapplication_system:2.0.0.0::::::: cpe:2.3:a:ibm:qradar_risk_manager:7.1.0::::::: cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.1.0::::::: cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.1.0:mr1::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.1.0:mr2::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.1.1:-::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.1.1:p1::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.1.1:p2::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.1.1:p3::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.1.2:-::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.1.2:p1::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.1.2:p10::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.1.2:p11::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.1.2:p12::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.1.2:p13::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.1.2:p2::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.1.2:p3::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.1.2:p4::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.1.2:p5::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.1.2:p6::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.1.2:p7::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.1.2:p8::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.1.2:p9::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2::::::: cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.0:-::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.0:p1::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.0:p2::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.0:p3::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.1:-::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.1:p1::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.1:p2::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.1:p3::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.2:-::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.2:p1::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.2:p2::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.2:p3::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.2:p4::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.3:-::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.3:p1::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.3:p2::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.3:p3::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.3:p4::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.4:-::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.4:p1::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.4:p2::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.4:p3::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.4:p4::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.4:p5::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.4:p6::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.5:-::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.5:p1::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.5:p2::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.5:p3::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.5:p4::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.5:p5::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.5:p6::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.6:-::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.6:p1::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.6:p2::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.6:p3::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.6:p4::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.6:p5::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.6:p6::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.6:p7::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.7:-::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.7:p1::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.7:p2::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.7:p3::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.7:p4::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:-::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p1::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p10::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p11::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p12::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p13::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p14::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p15::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p16::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p2::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p3::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p4::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p5::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p6::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p7::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p8::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p9::::::* cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8.15::::::: cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.9::::::: cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.0::::::: cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.1::::::: cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.2::::::: cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.3::::::: cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.4::::::: cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.6:p1::::::* cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.6:p2::::::* cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.6:p3::::::* cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.6:p4::::::* cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.6:p5::::::* cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.6:p6::::::* cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.6:p7::::::* cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.8:-::::::* cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.8:p1::::::* cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.8:p10::::::* cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.8:p11::::::* cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.8:p12::::::* cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.8:p13::::::* cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.8:p14::::::* cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.8:p15::::::* cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.8:p16::::::* cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.8:p17::::::* cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.8:p2::::::* cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.8:p3::::::* cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.8:p4::::::* cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.8:p5::::::* cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.8:p6::::::* cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.8:p7::::::* cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.8:p8::::::* cpe:2.3:a:ibm:qradar_vulnerability_manager:7.2.8:p9::::::* cpe:2.3:a:ibm:smartcloud_entry_appliance:2.3.0::::::: cpe:2.3:a:ibm:smartcloud_entry_appliance:2.4.0::::::: cpe:2.3:a:ibm:smartcloud_entry_appliance:3.1.0::::::: cpe:2.3:a:ibm:smartcloud_entry_appliance:3.2.0::::::: cpe:2.3:a:ibm:smartcloud_provisioning:2.1.0::::::: cpe:2.3:a:ibm:software_defined_network_for_virtual_environments:::::kvm::: versions up to (excluding) 1.2.1 cpe:2.3:a:ibm:software_defined_network_for_virtual_environments:::::openflow::: versions up to (excluding) 1.2.1 cpe:2.3:a:ibm:software_defined_network_for_virtual_environments:::::vmware::: versions up to (excluding) 1.2.1 cpe:2.3:a:ibm:starter_kit_for_cloud:2.2.0::::::: cpe:2.3:a:ibm:workload_deployer::::::::* versions from (including) 3.1.0 up to (including) 3.1.0.7 cpe:2.3:o:ibm:security_access_manager_for_mobile_8.0_firmware:8.0.0.1::::::: cpe:2.3:o:ibm:security_access_manager_for_mobile_8.0_firmware:8.0.0.2::::::: cpe:2.3:o:ibm:security_access_manager_for_mobile_8.0_firmware:8.0.0.3::::::: cpe:2.3:o:ibm:security_access_manager_for_mobile_8.0_firmware:8.0.0.5::::::: cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.1::::::: cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.2::::::: cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.3::::::: cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.4::::::: cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.5::::::: cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.6::::::: cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.7::::::: cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.8::::::: cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:8.0.0.2::::::: cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:8.0.0.3::::::: cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:8.0.0.5:::::::
Added	CPE Configuration		AND OR cpe:2.3:o:ibm:storwize_v7000_firmware::::::::* versions from (including) 1.1.0.0 up to (excluding) 1.4.3.5 cpe:2.3:o:ibm:storwize_v7000_firmware::::::::* versions from (including) 1.5.0.0 up to (excluding) 1.5.0.4 cpe:2.3:o:ibm:storwize_v7000_firmware::::::::* versions from (including) 7.2.0.0 up to (excluding) 7.2.0.9 cpe:2.3:o:ibm:storwize_v7000_firmware::::::::* versions from (including) 7.3.0.0 up to (excluding) 7.3.0.7 OR cpe:2.3:h:ibm:storwize_v7000:-:::::::*
Added	CPE Configuration		AND OR cpe:2.3:o:ibm:storwize_v5000_firmware::::::::* versions from (including) 1.1.0.0 up to (excluding) 7.1.0.11 cpe:2.3:o:ibm:storwize_v5000_firmware::::::::* versions from (including) 7.2.0.0 up to (excluding) 7.2.0.9 cpe:2.3:o:ibm:storwize_v5000_firmware::::::::* versions from (including) 7.3.0.0 up to (excluding) 7.3.0.7 OR cpe:2.3:h:ibm:storwize_v5000:-:::::::*
Added	CPE Configuration		AND OR cpe:2.3:o:ibm:storwize_v3700_firmware::::::::* versions from (including) 1.1.0.0 up to (excluding) 7.1.0.11 cpe:2.3:o:ibm:storwize_v3700_firmware::::::::* versions from (including) 7.2.0.0 up to (excluding) 7.2.0.9 cpe:2.3:o:ibm:storwize_v3700_firmware::::::::* versions from (including) 7.3.0.0 up to (excluding) 7.3.0.7 OR cpe:2.3:h:ibm:storwize_v3700:-:::::::*
Added	CPE Configuration		AND OR cpe:2.3:o:ibm:storwize_v3500_firmware::::::::* versions from (including) 1.1.0.0 up to (excluding) 7.1.0.11 cpe:2.3:o:ibm:storwize_v3500_firmware::::::::* versions from (including) 7.2.0.0 up to (excluding) 7.2.0.9 cpe:2.3:o:ibm:storwize_v3500_firmware::::::::* versions from (including) 7.3.0.0 up to (excluding) 7.3.0.7 OR cpe:2.3:h:ibm:storwize_v3500:-:::::::*
Added	CPE Configuration		AND OR cpe:2.3:o:ibm:flex_system_v7000_firmware::::::::* versions from (including) 1.1.0.0 up to (excluding) 7.1.0.11 cpe:2.3:o:ibm:flex_system_v7000_firmware::::::::* versions from (including) 7.2.0.0 up to (excluding) 7.2.0.9 cpe:2.3:o:ibm:flex_system_v7000_firmware::::::::* versions from (including) 7.3.0.0 up to (excluding) 7.3.0.7 OR cpe:2.3:h:ibm:flex_system_v7000:-:::::::*
Added	CPE Configuration		AND OR cpe:2.3:o:ibm:san_volume_controller_firmware::::::::* versions from (including) 1.1.0.0 up to (excluding) 7.1.0.11 cpe:2.3:o:ibm:san_volume_controller_firmware::::::::* versions from (including) 7.2.0.0 up to (excluding) 7.2.0.9 cpe:2.3:o:ibm:san_volume_controller_firmware::::::::* versions from (including) 7.3.0.0 up to (excluding) 7.3.0.7 OR cpe:2.3:h:ibm:san_volume_controller:-:::::::*
Added	CPE Configuration		AND OR cpe:2.3:o:ibm:stn6500_firmware::::::::* versions from (including) 3.8.0.0 up to (excluding) 3.8.0.07 cpe:2.3:o:ibm:stn6500_firmware::::::::* versions from (including) 3.9.1.0 up to (excluding) 3.9.1.08 cpe:2.3:o:ibm:stn6500_firmware::::::::* versions from (including) 4.1.2.0 up to (excluding) 4.1.2.06 OR cpe:2.3:h:ibm:stn6500:-:::::::*
Added	CPE Configuration		AND OR cpe:2.3:o:ibm:stn6800_firmware::::::::* versions from (including) 3.8.0.0 up to (excluding) 3.8.0.07 cpe:2.3:o:ibm:stn6800_firmware::::::::* versions from (including) 3.9.1.0 up to (excluding) 3.9.1.08 cpe:2.3:o:ibm:stn6800_firmware::::::::* versions from (including) 4.1.2.0 up to (excluding) 4.1.2.06 OR cpe:2.3:h:ibm:stn6800:-:::::::*
Added	CPE Configuration		AND OR cpe:2.3:o:ibm:stn7800_firmware::::::::* versions from (including) 3.8.0.0 up to (excluding) 3.8.0.07 cpe:2.3:o:ibm:stn7800_firmware::::::::* versions from (including) 3.9.1.0 up to (excluding) 3.9.1.08 cpe:2.3:o:ibm:stn7800_firmware::::::::* versions from (including) 4.1.2.0 up to (excluding) 4.1.2.06 OR cpe:2.3:h:ibm:stn7800:-:::::::*
Added	CPE Configuration		OR cpe:2.3:o:canonical:ubuntu_linux:10.04::::-:::* cpe:2.3:o:canonical:ubuntu_linux:12.04::::-:::* cpe:2.3:o:canonical:ubuntu_linux:14.04::::esm:::*
Added	CPE Configuration		OR cpe:2.3:a:novell:zenworks_configuration_management:10.3::::::: cpe:2.3:a:novell:zenworks_configuration_management:11::::::: cpe:2.3:a:novell:zenworks_configuration_management:11.1::::::: cpe:2.3:a:novell:zenworks_configuration_management:11.2::::::: cpe:2.3:a:novell:zenworks_configuration_management:11.3.0::::::: cpe:2.3:o:novell:open_enterprise_server:2.0:sp3::::linux_kernel:: cpe:2.3:o:novell:open_enterprise_server:11.0:sp2::::linux_kernel::
Added	CPE Configuration		OR cpe:2.3:a:checkpoint:security_gateway::::::::* versions up to (excluding) r77.30
Added	CPE Configuration		OR cpe:2.3:a:f5:big-ip_access_policy_manager::::::::* versions from (including) 10.1.0 up to (including) 10.2.4 cpe:2.3:a:f5:big-ip_access_policy_manager::::::::* versions from (including) 11.0.0 up to (including) 11.5.1 cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.0::::::: cpe:2.3:a:f5:big-ip_advanced_firewall_manager::::::::* versions from (including) 11.3.0 up to (including) 11.5.1 cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.0::::::: cpe:2.3:a:f5:big-ip_analytics::::::::* versions from (including) 11.0.0 up to (including) 11.5.1 cpe:2.3:a:f5:big-ip_analytics:11.6.0::::::: cpe:2.3:a:f5:big-ip_application_acceleration_manager::::::::* versions from (including) 11.4.0 up to (including) 11.5.1 cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.0::::::: cpe:2.3:a:f5:big-ip_application_security_manager::::::::* versions from (including) 10.0.0 up to (including) 10.2.4 cpe:2.3:a:f5:big-ip_application_security_manager::::::::* versions from (including) 11.0.0 up to (including) 11.5.1 cpe:2.3:a:f5:big-ip_application_security_manager:11.6.0::::::: cpe:2.3:a:f5:big-ip_edge_gateway::::::::* versions from (including) 10.1.0 up to (including) 10.2.4 cpe:2.3:a:f5:big-ip_edge_gateway::::::::* versions from (including) 11.0.0 up to (including) 11.3.0 cpe:2.3:a:f5:big-ip_global_traffic_manager::::::::* versions from (including) 10.0.0 up to (including) 10.2.4 cpe:2.3:a:f5:big-ip_global_traffic_manager::::::::* versions from (including) 11.0.0 up to (including) 11.5.1 cpe:2.3:a:f5:big-ip_global_traffic_manager:11.6.0::::::: cpe:2.3:a:f5:big-ip_link_controller::::::::* versions from (including) 10.0.0 up to (including) 10.2.4 cpe:2.3:a:f5:big-ip_link_controller::::::::* versions from (including) 11.0.0 up to (including) 11.5.1 cpe:2.3:a:f5:big-ip_link_controller:11.6.0::::::: cpe:2.3:a:f5:big-ip_local_traffic_manager::::::::* versions from (including) 10.0.0 up to (including) 10.2.4 cpe:2.3:a:f5:big-ip_local_traffic_manager::::::::* versions from (including) 11.0.0 up to (including) 11.5.1 cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.0::::::: cpe:2.3:a:f5:big-ip_policy_enforcement_manager::::::::* versions from (including) 11.3.0 up to (including) 11.5.1 cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.0::::::: cpe:2.3:a:f5:big-ip_protocol_security_module::::::::* versions from (including) 10.0.0 up to (including) 10.2.4 cpe:2.3:a:f5:big-ip_protocol_security_module::::::::* versions from (including) 11.0.0 up to (including) 11.4.1 cpe:2.3:a:f5:big-ip_wan_optimization_manager::::::::* versions from (including) 10.0.0 up to (including) 10.2.4 cpe:2.3:a:f5:big-ip_wan_optimization_manager::::::::* versions from (including) 11.0.0 up to (including) 11.3.0 cpe:2.3:a:f5:big-ip_webaccelerator::::::::* versions from (including) 10.0.0 up to (including) 10.2.4 cpe:2.3:a:f5:big-ip_webaccelerator::::::::* versions from (including) 11.0.0 up to (including) 11.3.0 cpe:2.3:a:f5:big-iq_cloud::::::::* versions from (including) 4.0.0 up to (including) 4.4.0 cpe:2.3:a:f5:big-iq_device::::::::* versions from (including) 4.2.0 up to (including) 4.4.0 cpe:2.3:a:f5:big-iq_security::::::::* versions from (including) 4.0.0 up to (including) 4.4.0 cpe:2.3:a:f5:enterprise_manager::::::::* versions from (including) 2.1.0 up to (including) 2.3.0 cpe:2.3:a:f5:enterprise_manager::::::::* versions from (including) 3.0.0 up to (including) 3.1.1 cpe:2.3:a:f5:traffix_signaling_delivery_controller:3.3.2::::::: cpe:2.3:a:f5:traffix_signaling_delivery_controller:3.4.1::::::: cpe:2.3:a:f5:traffix_signaling_delivery_controller:3.5.1::::::: cpe:2.3:a:f5:traffix_signaling_delivery_controller::::::::* versions from (including) 4.0.0 up to (including) 4.0.5 cpe:2.3:a:f5:traffix_signaling_delivery_controller:4.1.0:::::::
Added	CPE Configuration		AND OR cpe:2.3:o:f5:arx_firmware::::::::* versions from (including) 6.0.0 up to (including) 6.4.0 OR cpe:2.3:h:f5:arx:-:::::::*
Added	CPE Configuration		AND OR cpe:2.3:o:citrix:netscaler_sdx_firmware::::::::* versions up to (excluding) 9.3.67.5r1 cpe:2.3:o:citrix:netscaler_sdx_firmware::::::::* versions from (including) 10 up to (excluding) 10.1.129.11r1 cpe:2.3:o:citrix:netscaler_sdx_firmware::::::::* versions from (including) 10.5 up to (excluding) 10.5.52.11r1 OR cpe:2.3:h:citrix:netscaler_sdx:-:::::::*
Added	CPE Configuration		OR cpe:2.3:o:apple:mac_os_x::::::::* versions from (including) 10.0.0 up to (excluding) 10.10.0
Added	CPE Configuration		OR cpe:2.3:a:vmware:vcenter_server_appliance:5.0::::::: cpe:2.3:a:vmware:vcenter_server_appliance:5.0:update_1::::::* cpe:2.3:a:vmware:vcenter_server_appliance:5.0:update_2::::::* cpe:2.3:a:vmware:vcenter_server_appliance:5.1::::::: cpe:2.3:a:vmware:vcenter_server_appliance:5.1:update_1::::::* cpe:2.3:a:vmware:vcenter_server_appliance:5.1:update_2::::::* cpe:2.3:a:vmware:vcenter_server_appliance:5.5:-::::::* cpe:2.3:a:vmware:vcenter_server_appliance:5.5:update_1::::::* cpe:2.3:o:vmware:esx:4.0::::::: cpe:2.3:o:vmware:esx:4.1:::::::

CVE Modified by [email protected]

May. 14, 2024

Action Type Old Value New Value
CVE Modified by [email protected]

Nov. 17, 2021

Action Type Old Value New Value

Added Reference https://www.arista.com/en/support/advisories-notices/security-advisories/1008-security-advisory-0006 [No Types Assigned]
CVE Modified by [email protected]

Nov. 10, 2021

Action Type Old Value New Value

Removed Reference https://www.arista.com/en/support/advisories-notices/security-advisories/1008-security-advisory-0006 [No Types Assigned]
CVE Modified by [email protected]

Nov. 05, 2021

Action Type Old Value New Value

Added Reference https://www.arista.com/en/support/advisories-notices/security-advisories/1008-security-advisory-0006 [No Types Assigned]

Action	Type	Old Value	New Value
Added	Reference		https://www.arista.com/en/support/advisories-notices/security-advisories/1008-security-advisory-0006 [No Types Assigned]

Action	Type	Old Value	New Value
Removed	Reference	https://www.arista.com/en/support/advisories-notices/security-advisories/1008-security-advisory-0006 [No Types Assigned]

Action	Type	Old Value	New Value
Added	Reference		https://www.arista.com/en/support/advisories-notices/security-advisories/1008-security-advisory-0006 [No Types Assigned]

Modified Analysis by [email protected]

Feb. 01, 2021

Action	Type	Old Value	New Value
Changed	Reference Type	http://packetstormsecurity.com/files/161107/SonicWall-SSL-VPN-Shellshock-Remote-Code-Execution.html No Types Assigned	http://packetstormsecurity.com/files/161107/SonicWall-SSL-VPN-Shellshock-Remote-Code-Execution.html Third Party Advisory, VDB Entry

CVE Modified by [email protected]

Jan. 26, 2021

Action Type Old Value New Value

Added Reference http://packetstormsecurity.com/files/161107/SonicWall-SSL-VPN-Shellshock-Remote-Code-Execution.html [No Types Assigned]

Action	Type	Old Value	New Value
Added	Reference		http://packetstormsecurity.com/files/161107/SonicWall-SSL-VPN-Shellshock-Remote-Code-Execution.html [No Types Assigned]

Modified Analysis by [email protected]

Sep. 27, 2019

CVE Modified by [email protected]

Nov. 30, 2018

Action Type Old Value New Value

Added Reference https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes [No Types Assigned]

Action	Type	Old Value	New Value
Added	Reference		https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes [No Types Assigned]

CVE Modified by [email protected]

Oct. 09, 2018

Action	Type	Old Value	New Value
Removed	Reference	http://www.securityfocus.com/archive/1/archive/1/533593/100/0/threaded [No Types Assigned]
Added	Reference		http://www.securityfocus.com/archive/1/533593/100/0/threaded [No Types Assigned]

CVE Modified by [email protected]

Aug. 09, 2018

Action	Type	Old Value	New Value
Added	Reference		https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04518183 [No Types Assigned]
Added	Reference		https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04497075 [No Types Assigned]

CVE Modified by [email protected]

Oct. 05, 2017

Action	Type	Old Value	New Value
Added	Reference		https://www.exploit-db.com/exploits/42938/ [No Types Assigned]
Added	Reference		https://www.exploit-db.com/exploits/34879/ [No Types Assigned]

CVE Modified by [email protected]

Sep. 17, 2017

Action Type Old Value New Value

Added Reference https://www.exploit-db.com/exploits/37816/ [No Types Assigned]
CVE Modified by [email protected]

Sep. 13, 2017

Action Type Old Value New Value

Added Reference https://www.exploit-db.com/exploits/38849/ [No Types Assigned]

Action	Type	Old Value	New Value
Added	Reference		https://www.exploit-db.com/exploits/37816/ [No Types Assigned]

Action	Type	Old Value	New Value
Added	Reference		https://www.exploit-db.com/exploits/38849/ [No Types Assigned]

CVE Modified by [email protected]

Sep. 03, 2017

Action	Type	Old Value	New Value
Added	Reference		https://www.exploit-db.com/exploits/40938/ [No Types Assigned]
Added	Reference		https://www.exploit-db.com/exploits/40619/ [No Types Assigned]

CVE Modified by [email protected]

Jan. 07, 2017

Action	Type	New Value
Added	Reference	https://access.redhat.com/node/1200223 [No Types Assigned]
Added	Reference	http://secunia.com/advisories/61547 [No Types Assigned]
Added	Reference	http://secunia.com/advisories/61542 [No Types Assigned]
Added	Reference	http://secunia.com/advisories/59272 [No Types Assigned]
Added	Reference	http://linux.oracle.com/errata/ELSA-2014-1294.html [No Types Assigned]
Added	Reference	http://linux.oracle.com/errata/ELSA-2014-1293.html [No Types Assigned]

CVE Modified by [email protected]

Jan. 03, 2017

Action	Type	Old Value	New Value
Added	Reference		https://kc.mcafee.com/corporate/index?page=content&id=SB10085 [No Types Assigned]
Added	Reference		http://secunia.com/advisories/62228 [No Types Assigned]

CVE Modified by [email protected]

Dec. 08, 2016

Action Type Old Value New Value

Added Reference http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673 [No Types Assigned]
CVE Modified by [email protected]

Nov. 28, 2016

Action Type Old Value New Value

Added Reference http://www.securityfocus.com/bid/70103 [No Types Assigned]

Action	Type	Old Value	New Value
Added	Reference		http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673 [No Types Assigned]

Action	Type	Old Value	New Value
Added	Reference		http://www.securityfocus.com/bid/70103 [No Types Assigned]

Modified Analysis by [email protected]

Jun. 28, 2016

Action	Type	Old Value	New Value
Changed	Reference Type	https://www.exploit-db.com/exploits/39918/ No Types Assigned	https://www.exploit-db.com/exploits/39918/ Exploit
Changed	Reference Type	http://jvn.jp/en/jp/JVN55667175/index.html No Types Assigned	http://jvn.jp/en/jp/JVN55667175/index.html Advisory
Changed	Reference Type	http://jvndb.jvn.jp/jvndb/JVNDB-2014-000126 No Types Assigned	http://jvndb.jvn.jp/jvndb/JVNDB-2014-000126 Advisory
Changed	Reference Type	http://packetstormsecurity.com/files/137376/IPFire-Bash-Environment-Variable-Injection-Shellshock.html No Types Assigned	http://packetstormsecurity.com/files/137376/IPFire-Bash-Environment-Variable-Injection-Shellshock.html Exploit

CVE Modified by [email protected]

Jun. 21, 2016

Action Type Old Value New Value

Added Reference http://packetstormsecurity.com/files/137376/IPFire-Bash-Environment-Variable-Injection-Shellshock.html

Action	Type	Old Value	New Value
Added	Reference		http://packetstormsecurity.com/files/137376/IPFire-Bash-Environment-Variable-Injection-Shellshock.html

CVE Translated by [email protected]

Jun. 17, 2016

Action	Type	Old Value	New Value
Removed	Translation	GNU Bash hasta 4.3 procesa cadenas finales después de la definición de funciones en los valores de variables de entorno, lo que permite a atacantes remotos ejecutar código arbitrario a través de un entorno manipulado, tal y como se ha demostrado por vectores que involucran la característica ForceCommand en sshd OpenSSH, los módulos mod_cgi y mod_cgid en el Apache HTTP Server, scripts ejecutados por clientes DHCP no especificados, y otras situaciones en la cual establecer el entorno ocurre a través de un límite privilegiado de la ejecución de Bash.
Added	Translation		GNU Bash hasta la versión 4.3 procesa cadenas finales después de las definiciones de funciones en los valores de variables de entorno, lo que permite a atacantes remotos ejecutar código arbitrario a través de un entorno manipulado, tal como se ha demostrado por vectores que involucran la característica ForceCommand en sshd OpenSSH, los módulos mod_cgi y mod_cgid en el Apache HTTP Server, scripts ejecutados por clientes DHCP no especificados, y otras situaciones en las cuales el ajuste de entorno ocurre a través de un límite privilegiado de la ejecución de Bash, también conocido como "ShellShock." NOTA: la reparación original para este problema era incorrecta; CVE-2014-7169 ha sido asignada para cubrir la vulnerabilidad que todavía está presente después de la solución incorrecta.

CVE Modified by [email protected]

Jun. 17, 2016

Action Type Old Value New Value

Added Reference https://www.exploit-db.com/exploits/39918/

Action	Type	Old Value	New Value
Added	Reference		https://www.exploit-db.com/exploits/39918/

CVE Modified by [email protected]

May. 12, 2015

Action	Type	New Value
Added	Reference	http://advisories.mageia.org/MGASA-2014-0388.html
Added	Reference	http://www.mandriva.com/security/advisories?name=MDVSA-2015:164
Added	Reference	https://access.redhat.com/articles/1200223

CVE Modified by [email protected]

Apr. 10, 2015

Action Type Old Value New Value

Added Reference http://marc.info/?l=bugtraq&m=142805027510172&w=2
CVE Modified by [email protected]

Mar. 31, 2015

Action Type Old Value New Value

Added Reference http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0
CVE Modified by [email protected]

Mar. 27, 2015

Action Type Old Value New Value

Added Reference http://marc.info/?l=bugtraq&m=142721162228379&w=2

Added Reference http://marc.info/?l=bugtraq&m=142719845423222&w=2
CVE Modified by [email protected]

Mar. 18, 2015

Action Type Old Value New Value

Added Reference http://marc.info/?l=bugtraq&m=142118135300698&w=2

Action	Type	Old Value	New Value
Added	Reference		http://marc.info/?l=bugtraq&m=142805027510172&w=2

Action	Type	Old Value	New Value
Added	Reference		http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0

Action	Type	Old Value	New Value
Added	Reference		http://marc.info/?l=bugtraq&m=142721162228379&w=2
Added	Reference		http://marc.info/?l=bugtraq&m=142719845423222&w=2

Action	Type	Old Value	New Value
Added	Reference		http://marc.info/?l=bugtraq&m=142118135300698&w=2

CVE Modified by [email protected]

Mar. 12, 2015

Action	Type	New Value
Added	Reference	http://marc.info/?l=bugtraq&m=142358026505815&w=2
Added	Reference	http://marc.info/?l=bugtraq&m=142358078406056&w=2
Added	Reference	http://marc.info/?l=bugtraq&m=142113462216480&w=2
Added	Reference	http://marc.info/?l=bugtraq&m=141879528318582&w=2
Added	Reference	http://marc.info/?l=bugtraq&m=142546741516006&w=2

CVE Modified by [email protected]

Dec. 24, 2014

Action Type Old Value New Value

Added Reference http://secunia.com/advisories/62343

Added Reference http://secunia.com/advisories/62312
CVE Modified by [email protected]

Dec. 03, 2014

Action Type Old Value New Value

Added Reference http://marc.info/?l=bugtraq&m=141694386919794&w=2

Action	Type	Old Value	New Value
Added	Reference		http://secunia.com/advisories/62343
Added	Reference		http://secunia.com/advisories/62312

Action	Type	Old Value	New Value
Added	Reference		http://marc.info/?l=bugtraq&m=141694386919794&w=2

CVE Modified by [email protected]

Nov. 20, 2014

Action	Type	New Value
Added	Reference	http://marc.info/?l=bugtraq&m=141577241923505&w=2
Added	Reference	http://marc.info/?l=bugtraq&m=141576728022234&w=2
Added	Reference	http://marc.info/?l=bugtraq&m=141577297623641&w=2
Added	Reference	http://marc.info/?l=bugtraq&m=141577137423233&w=2
Added	Reference	http://marc.info/?l=bugtraq&m=141585637922673&w=2

CVE Modified by [email protected]

Nov. 14, 2014

Action	Type	New Value
Added	Reference	http://www-01.ibm.com/support/docview.wss?uid=swg21686447
Added	Reference	http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00037.html
Added	Reference	http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00029.html
Added	Reference	http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00028.html
Added	Reference	http://rhn.redhat.com/errata/RHSA-2014-1354.html
Added	Reference	http://marc.info/?l=bugtraq&m=141383465822787&w=2
Added	Reference	http://secunia.com/advisories/61873

Initial Analysis by [email protected]

Sep. 24, 2014

Action Type Old Value New Value

EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2014-6271 is associated with the following CWEs:

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2014-6271 weaknesses.

CAPEC-6: Argument Injection Argument Injection CAPEC-15: Command Delimiters Command Delimiters CAPEC-43: Exploiting Multiple Input Interpretation Layers Exploiting Multiple Input Interpretation Layers CAPEC-88: OS Command Injection OS Command Injection CAPEC-108: Command Line Execution through SQL Injection Command Line Execution through SQL Injection

CVE-2014-6271

GNU Bourne-Again Shell (Bash) Arbitrary Code Execu - [Actively Exploited]

Description

INFO

Sept. 24, 2014, 6:48 p.m.

July 24, 2024, 4:47 p.m.

Yes !

5.9

3.9

CISA KEV (Known Exploited Vulnerabilities)

Public PoC/Exploit Available at Github

Affected Products

References to Advisories, Solutions, and Tools

Modified Analysis by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

Modified Analysis by [email protected]

CVE Modified by [email protected]

Modified Analysis by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

Modified Analysis by [email protected]

CVE Modified by [email protected]

CVE Translated by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

Initial Analysis by [email protected]

CWE - Common Weakness Enumeration

Common Attack Pattern Enumeration and Classification (CAPEC)

Exploit Prediction

97.37 }} 0.00%

0.99925

CVSS31 - Vulnerability Scoring System

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient