Every CVE Search/ Get API key

CVE-2014-6271

GNU Bash through 4.3 processes trailing strings after function definitions in the values of...

9.8 CriticalIn KEVPublic exploitFix available

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka "ShellShock." NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

100.0%Up 3.8 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 9.8

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka "ShellShock." NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.

Record
CVE-2014-6271
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-78
Updated
2026-11-02
CVE List 9.8

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka "ShellShock." NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.

Record
CVE-2014-6271
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-78
Updated
2026-11-02
EUVDEUVD-2014-6157 9.8

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka "ShellShock." NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.

Record
EUVD-2014-6157
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-6hfc-grwp-2p9c 9.8

GNU Bash through 4.3 processes trailing strings after function definitions in the values of...

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka "ShellShock." NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.

Record
GHSA-6hfc-grwp-2p9c
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-78
Updated
2026-11-02
CISA KEV No score

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.

Record
CVE-2014-6271
Weakness
CWE-78
Updated
2026-11-02
OSV 9.8

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka "ShellShock." NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.

Record
CVE-2014-6271
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 7 moreShow less
OSVDEBIAN-CVE-2014-6271 9.8

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka "ShellShock." NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.

Record
DEBIAN-CVE-2014-6271
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2014-6271 9.8

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka "ShellShock." NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.

Record
UBUNTU-CVE-2014-6271
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVMGASA-2014-0388 No score

Updated bash packages fix CVE-2014-6271

Updated bash packages fix security vulnerability:

A flaw was found in the way Bash evaluated certain specially crafted environment variables. An attacker could use this flaw to override or bypass environment restrictions to execute shell commands. Certain services and applications allow remote unauthenticated attackers to provide environment variables, allowing them to exploit this issue (CVE-2014-6271).

Bash has been updated version 4.2 patch level 37 to patch level 48 to fix this issue, as well as several other bugs. See the upstream patches for details on the other bugs.

This vulnerability can be exposed and exploited through several other pieces of software and should be considered highly critical. Please refer to the RedHat Knowledge Base article and blog post for more information.

All users and sysadmins are advised to update their bash package immediately.

Record
MGASA-2014-0388
Updated
2026-11-02
OSVopenSUSE-SU-2024:10106-1 No score

bash-4.4-92.1 on GA media

These are all security issues fixed in the bash-4.4-92.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10106-1
Updated
2026-11-02
OSVSUSE-SU-2017:2699-1 No score

Security update for SLES 12 Docker image

The SUSE Linux Enterprise Server 12 container image has been updated to include security and stability fixes.

The following issues related to building of the container images have been fixed:

  • Included krb5 package to avoid the inclusion of krb5-mini which gets selected as a dependency by the Build Service solver. (bsc#1056193)
  • Do not install recommended packages when building container images. (bsc#975726)

A number of security issues that have been already fixed by updates released for SUSE Linux Enterprise Server 12 are now included in the base image. A package/CVE cross-reference is available below.

pam:

  • CVE-2015-3238

libtasn1:

  • CVE-2015-3622
  • CVE-2016-4008

libidn:

  • CVE-2015-2059
  • CVE-2015-8948
  • CVE-2016-6261
  • CVE-2016-6262
  • CVE-2016-6263

zlib:

  • CVE-2016-9840
  • CVE-2016-9841
  • CVE-2016-9842
  • CVE-2016-9843

curl:

  • CVE-2016-5419
  • CVE-2016-5420
  • CVE-2016-5421
  • CVE-2016-7141
  • CVE-2016-7167
  • CVE-2016-8615
  • CVE-2016-8616
  • CVE-2016-8617
  • CVE-2016-8618
  • CVE-2016-8619
  • CVE-2016-8620
  • CVE-2016-8621
  • CVE-2016-8622
  • CVE-2016-8623
  • CVE-2016-8624
  • CVE-2016-9586
  • CVE-2017-1000100
  • CVE-2017-1000101
  • CVE-2017-7407

openssl:

  • CVE-2016-2105
  • CVE-2016-2106
  • CVE-2016-2107
  • CVE-2016-2108
  • CVE-2016-2109
  • CVE-2016-2177
  • CVE-2016-2178
  • CVE-2016-2179
  • CVE-2016-2180
  • CVE-2016-2181
  • CVE-2016-2182
  • CVE-2016-2183
  • CVE-2016-6302
  • CVE-2016-6303
  • CVE-2016-6304
  • CVE-2016-6306

libxml2:

  • CVE-2014-0191
  • CVE-2015-8806
  • CVE-2016-1762
  • CVE-2016-1833
  • CVE-2016-1834
  • CVE-2016-1835
  • CVE-2016-1837
  • CVE-2016-1838
  • CVE-2016-1839
  • CVE-2016-1840
  • CVE-2016-2073
  • CVE-2016-3627
  • CVE-2016-3705
  • CVE-2016-4447
  • CVE-2016-4448
  • CVE-2016-4449
  • CVE-2016-4483
  • CVE-2016-4658
  • CVE-2016-9318
  • CVE-2016-9597
  • CVE-2017-9047
  • CVE-2017-9048
  • CVE-2017-9049
  • CVE-2017-9050

util-linux:

  • CVE-2015-5218
  • CVE-2016-5011
  • CVE-2017-2616

cracklib:

  • CVE-2016-6318

systemd:

  • CVE-2014-9770
  • CVE-2015-8842
  • CVE-2016-7796

pcre:

  • CVE-2014-8964
  • CVE-2015-2325
  • CVE-2015-2327
  • CVE-2015-2328
  • CVE-2015-3210
  • CVE-2015-3217
  • CVE-2015-5073
  • CVE-2015-8380
  • CVE-2015-8381
  • CVE-2015-8382
  • CVE-2015-8383
  • CVE-2015-8384
  • CVE-2015-8385
  • CVE-2015-8386
  • CVE-2015-8387
  • CVE-2015-8388
  • CVE-2015-8389
  • CVE-2015-8390
  • CVE-2015-8391
  • CVE-2015-8392
  • CVE-2015-8393
  • CVE-2015-8394
  • CVE-2015-8395
  • CVE-2016-1283
  • CVE-2016-3191

appamor:

  • CVE-2017-6507

bash:

  • CVE-2014-6277
  • CVE-2014-6278
  • CVE-2016-0634
  • CVE-2016-7543

cpio:

  • CVE-2016-2037

glibc:

  • CVE-2016-1234
  • CVE-2016-3075
  • CVE-2016-3706
  • CVE-2016-4429
  • CVE-2017-1000366

perl:

  • CVE-2015-8853
  • CVE-2016-1238
  • CVE-2016-2381
  • CVE-2016-6185

libssh2_org:

  • CVE-2016-0787

expat:

  • CVE-2012-6702
  • CVE-2015-1283
  • CVE-2016-0718
  • CVE-2016-5300
  • CVE-2016-9063
  • CVE-2017-9233

ncurses:

  • CVE-2017-10684
  • CVE-2017-10685
  • CVE-2017-11112
  • CVE-2017-11113

libksba:

  • CVE-2016-4574
  • CVE-2016-4579

libgcrypt:

  • CVE-2015-7511
  • CVE-2016-6313
  • CVE-2017-7526

dbus-1:

  • CVE-2014-7824
  • CVE-2015-0245

Finally, the following packages received non-security fixes:

  • augeas
  • bzip2
  • ca-certificates-mozilla
  • coreutils
  • cryptsetup
  • cyrus-sasl
  • dirmngr
  • e2fsprogs
  • findutils
  • gpg2
  • insserv-compat
  • kmod
  • libcap
  • libsolv
  • libzypp
  • openldap2
  • p11-kit
  • permissions
  • procps
  • rpm
  • sed
  • shadow
  • zypper
Record
SUSE-SU-2017:2699-1
Updated
2026-11-02
OSVSUSE-SU-2017:2700-1 No score

Security update for SLES 12-SP1 Docker image

The SUSE Linux Enterprise Server 12 SP1 container image has been updated to include security and stability fixes.

The following issues related to building of the container images have been fixed:

  • Included krb5 package to avoid the inclusion of krb5-mini which gets selected as a dependency by the Build Service solver. (bsc#1056193)
  • Do not install recommended packages when building container images. (bsc#975726)

A number of security issues that have been already fixed by updates released for SUSE Linux Enterprise Server 12 SP1 are now included in the base image. A package/CVE cross-reference is available below.

pam:

  • CVE-2015-3238

libtasn1:

  • CVE-2015-3622
  • CVE-2016-4008

expat:

expat:

  • CVE-2012-6702
  • CVE-2015-1283
  • CVE-2016-0718
  • CVE-2016-5300
  • CVE-2016-9063
  • CVE-2017-9233

libidn:

  • CVE-2015-2059
  • CVE-2015-8948
  • CVE-2016-6261
  • CVE-2016-6262
  • CVE-2016-6263

zlib:

  • CVE-2016-9840
  • CVE-2016-9841
  • CVE-2016-9842
  • CVE-2016-9843

curl:

  • CVE-2016-5419
  • CVE-2016-5420
  • CVE-2016-5421
  • CVE-2016-7141
  • CVE-2016-7167
  • CVE-2016-8615
  • CVE-2016-8616
  • CVE-2016-8617
  • CVE-2016-8618
  • CVE-2016-8619
  • CVE-2016-8620
  • CVE-2016-8621
  • CVE-2016-8622
  • CVE-2016-8623
  • CVE-2016-8624
  • CVE-2016-9586
  • CVE-2017-1000100
  • CVE-2017-1000101
  • CVE-2017-7407

openssl:

  • CVE-2016-2105
  • CVE-2016-2106
  • CVE-2016-2107
  • CVE-2016-2108
  • CVE-2016-2109
  • CVE-2016-2177
  • CVE-2016-2178
  • CVE-2016-2179
  • CVE-2016-2180
  • CVE-2016-2181
  • CVE-2016-2182
  • CVE-2016-2183
  • CVE-2016-6302
  • CVE-2016-6303
  • CVE-2016-6304
  • CVE-2016-6306
  • CVE-2016-7056
  • CVE-2016-8610
  • CVE-2017-3731

cracklib:

  • CVE-2016-6318

pcre:

  • CVE-2014-8964
  • CVE-2015-2325
  • CVE-2015-2327
  • CVE-2015-2328
  • CVE-2015-3210
  • CVE-2015-3217
  • CVE-2015-5073
  • CVE-2015-8380
  • CVE-2015-8381
  • CVE-2015-8382
  • CVE-2015-8383
  • CVE-2015-8384
  • CVE-2015-8385
  • CVE-2015-8386
  • CVE-2015-8387
  • CVE-2015-8388
  • CVE-2015-8389
  • CVE-2015-8390
  • CVE-2015-8391
  • CVE-2015-8392
  • CVE-2015-8393
  • CVE-2015-8394
  • CVE-2015-8395
  • CVE-2016-1283
  • CVE-2016-3191

appamor:

  • CVE-2017-6507

bash:

  • CVE-2014-6277
  • CVE-2014-6278
  • CVE-2016-0634
  • CVE-2016-7543

cpio:

  • CVE-2016-2037

glibc:

  • CVE-2016-1234
  • CVE-2016-3075
  • CVE-2016-3706
  • CVE-2016-4429
  • CVE-2017-1000366

perl:

  • CVE-2015-8853
  • CVE-2016-1238
  • CVE-2016-2381
  • CVE-2016-6185

libssh2_org:

  • CVE-2016-0787

util-linux:

  • CVE-2016-5011
  • CVE-2017-2616

ncurses:

  • CVE-2017-10684
  • CVE-2017-10685
  • CVE-2017-11112
  • CVE-2017-11113

libksba:

  • CVE-2016-4574
  • CVE-2016-4579

libxml2:

  • CVE-2014-0191
  • CVE-2015-8806
  • CVE-2016-1762
  • CVE-2016-1833
  • CVE-2016-1834
  • CVE-2016-1835
  • CVE-2016-1837
  • CVE-2016-1838
  • CVE-2016-1839
  • CVE-2016-1840
  • CVE-2016-2073
  • CVE-2016-3627
  • CVE-2016-3705
  • CVE-2016-4447
  • CVE-2016-4448
  • CVE-2016-4449
  • CVE-2016-4483
  • CVE-2016-4658
  • CVE-2016-9318
  • CVE-2016-9597
  • CVE-2017-9047
  • CVE-2017-9048
  • CVE-2017-9049
  • CVE-2017-9050

libgcrypt:

  • CVE-2015-7511
  • CVE-2016-6313
  • CVE-2017-7526

update-alternatives:

  • CVE-2015-0860

systemd:

  • CVE-2014-9770
  • CVE-2015-8842
  • CVE-2016-7796

dbus-1:

  • CVE-2014-7824
  • CVE-2015-0245

Finally, the following packages received non-security fixes:

  • augeas
  • bzip2
  • ca-certificates-mozilla
  • coreutils
  • cryptsetup
  • cyrus-sasl
  • dirmngr
  • e2fsprogs
  • findutils
  • gpg2
  • insserv-compat
  • kmod
  • libcap
  • libsolv
  • libzypp
  • lua51
  • lvm2
  • netcfg
  • p11-kit
  • permissions
  • procps
  • rpm
  • sed
  • sg3_utils
  • shadow
  • zypper
Record
SUSE-SU-2017:2700-1
Updated
2026-11-02
OSVUSN-2362-1 No score

bash vulnerability

Stephane Chazelas discovered that Bash incorrectly handled trailing code in function definitions. An attacker could use this issue to bypass environment restrictions, such as SSH forced command environments.

Record
USN-2362-1
Updated
2026-11-02

Affected products

Show 63 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
bash
Debian:12
 before 4.3-9.1
4.3-9.1
bash
Debian:13
 before 4.3-9.1
4.3-9.1
bash
Debian:14
 before 4.3-9.1
4.3-9.1
bash
Debian:6.0
 before 4.1-3+deb6u1, plus listed versions
4.1-3
4.1-3+deb6u1
bash
Debian:7
 before 4.2+dfsg-0.1+deb7u1, plus listed versions
4.2+dfsg-0.1
4.2+dfsg-0.1+deb7u1
bash
Mageia:3
 before 4.2-48.1.mga3
4.2-48.1.mga3
bash
Mageia:4
 before 4.2-48.1.mga4
4.2-48.1.mga4
bash
Red Hat:enterprise_linux:5::client
 before 0:3.2-33.el5.1
0:3.2-33.el5.1
bash-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:3.2-33.el5.1
0:3.2-33.el5.1
bash
Red Hat:enterprise_linux:5::server
 before 0:3.2-33.el5.1
0:3.2-33.el5.1
Show 50 moreShow less
Affected packages
PackageAffectedFixed
bash-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:3.2-33.el5.1
0:3.2-33.el5.1
bash
Red Hat:enterprise_linux:6::client
 before 0:4.1.2-15.el6_5.1
0:4.1.2-15.el6_5.1
bash-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:4.1.2-15.el6_5.1
0:4.1.2-15.el6_5.1
bash-doc
Red Hat:enterprise_linux:6::client
 before 0:4.1.2-15.el6_5.1
0:4.1.2-15.el6_5.1
bash
Red Hat:enterprise_linux:6::computenode
 before 0:4.1.2-15.el6_5.1
0:4.1.2-15.el6_5.1
bash-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:4.1.2-15.el6_5.1
0:4.1.2-15.el6_5.1
bash-doc
Red Hat:enterprise_linux:6::computenode
 before 0:4.1.2-15.el6_5.1
0:4.1.2-15.el6_5.1
bash
Red Hat:enterprise_linux:6::server
 before 0:4.1.2-15.el6_5.1
0:4.1.2-15.el6_5.1
bash-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:4.1.2-15.el6_5.1
0:4.1.2-15.el6_5.1
bash-doc
Red Hat:enterprise_linux:6::server
 before 0:4.1.2-15.el6_5.1
0:4.1.2-15.el6_5.1
bash
Red Hat:enterprise_linux:6::workstation
 before 0:4.1.2-15.el6_5.1
0:4.1.2-15.el6_5.1
bash-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:4.1.2-15.el6_5.1
0:4.1.2-15.el6_5.1
bash-doc
Red Hat:enterprise_linux:6::workstation
 before 0:4.1.2-15.el6_5.1
0:4.1.2-15.el6_5.1
bash
Red Hat:enterprise_linux:7::client
 before 0:4.2.45-5.el7_0.2
0:4.2.45-5.el7_0.2
bash-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:4.2.45-5.el7_0.2
0:4.2.45-5.el7_0.2
bash-doc
Red Hat:enterprise_linux:7::client
 before 0:4.2.45-5.el7_0.2
0:4.2.45-5.el7_0.2
bash
Red Hat:enterprise_linux:7::computenode
 before 0:4.2.45-5.el7_0.2
0:4.2.45-5.el7_0.2
bash-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:4.2.45-5.el7_0.2
0:4.2.45-5.el7_0.2
bash-doc
Red Hat:enterprise_linux:7::computenode
 before 0:4.2.45-5.el7_0.2
0:4.2.45-5.el7_0.2
bash
Red Hat:enterprise_linux:7::server
 before 0:4.2.45-5.el7_0.2
0:4.2.45-5.el7_0.2
bash-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:4.2.45-5.el7_0.2
0:4.2.45-5.el7_0.2
bash-doc
Red Hat:enterprise_linux:7::server
 before 0:4.2.45-5.el7_0.2
0:4.2.45-5.el7_0.2
bash
Red Hat:enterprise_linux:7::workstation
 before 0:4.2.45-5.el7_0.2
0:4.2.45-5.el7_0.2
bash-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:4.2.45-5.el7_0.2
0:4.2.45-5.el7_0.2
bash-doc
Red Hat:enterprise_linux:7::workstation
 before 0:4.2.45-5.el7_0.2
0:4.2.45-5.el7_0.2
bash
Red Hat:rhel_els:4::as
 before 0:3.0-27.el4.2
0:3.0-27.el4.2
bash-debuginfo
Red Hat:rhel_els:4::as
 before 0:3.0-27.el4.2
0:3.0-27.el4.2
bash
Red Hat:rhel_els:4::es
 before 0:3.0-27.el4.2
0:3.0-27.el4.2
bash-debuginfo
Red Hat:rhel_els:4::es
 before 0:3.0-27.el4.2
0:3.0-27.el4.2
bash
Red Hat:rhel_mission_critical:5.6
 before 0:3.2-24.el5_6.1
0:3.2-24.el5_6.1
bash-debuginfo
Red Hat:rhel_mission_critical:5.6
 before 0:3.2-24.el5_6.1
0:3.2-24.el5_6.1
bash
Red Hat:rhel_eus:5.9
 before 0:3.2-32.el5_9.2
0:3.2-32.el5_9.2
bash-debuginfo
Red Hat:rhel_eus:5.9
 before 0:3.2-32.el5_9.2
0:3.2-32.el5_9.2
bash
Red Hat:rhel_eus:6.4::computenode
 before 0:4.1.2-15.el6_4.1
0:4.1.2-15.el6_4.1
bash-debuginfo
Red Hat:rhel_eus:6.4::computenode
 before 0:4.1.2-15.el6_4.1
0:4.1.2-15.el6_4.1
bash-doc
Red Hat:rhel_eus:6.4::computenode
 before 0:4.1.2-15.el6_4.1
0:4.1.2-15.el6_4.1
bash
Red Hat:rhel_mission_critical:6.2::server
 before 0:4.1.2-9.el6_2.1
0:4.1.2-9.el6_2.1
bash-debuginfo
Red Hat:rhel_mission_critical:6.2::server
 before 0:4.1.2-9.el6_2.1
0:4.1.2-9.el6_2.1
bash
Red Hat:rhel_eus:6.4::server
 before 0:4.1.2-15.el6_4.1
0:4.1.2-15.el6_4.1
bash-debuginfo
Red Hat:rhel_eus:6.4::server
 before 0:4.1.2-15.el6_4.1
0:4.1.2-15.el6_4.1
bash-doc
Red Hat:rhel_mission_critical:6.2::server
 before 0:4.1.2-9.el6_2.1
0:4.1.2-9.el6_2.1
bash-doc
Red Hat:rhel_eus:6.4::server
 before 0:4.1.2-15.el6_4.1
0:4.1.2-15.el6_4.1
bash
Red Hat:rhel_sjis:5
 before 0:3.2-33.el5_11.1.sjis.1
0:3.2-33.el5_11.1.sjis.1
bash-debuginfo
Red Hat:rhel_sjis:5
 before 0:3.2-33.el5_11.1.sjis.1
0:3.2-33.el5_11.1.sjis.1
bash
Red Hat:rhel_sjis:6
 before 0:4.1.2-15.el6_5.1.sjis.1
0:4.1.2-15.el6_5.1.sjis.1
bash-debuginfo
Red Hat:rhel_sjis:6
 before 0:4.1.2-15.el6_5.1.sjis.1
0:4.1.2-15.el6_5.1.sjis.1
bash-doc
Red Hat:rhel_sjis:6
 before 0:4.1.2-15.el6_5.1.sjis.1
0:4.1.2-15.el6_5.1.sjis.1
rhev-hypervisor6
Red Hat:rhev_manager:3
 before 0:6.5-20140930.1.el6ev
0:6.5-20140930.1.el6ev
bash
Ubuntu:14.04:LTS
 before 4.3-7ubuntu1.1, plus listed versions
4.2-5ubuntu34.3-1ubuntu24.3-2ubuntu14.3-3ubuntu14.3-4ubuntu14.3-4ubuntu24.3-6ubuntu14.3-7ubuntu1
4.3-7ubuntu1.1
bash
openSUSE:Tumbleweed
 before 7.0-92.1
7.0-92.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubdlitz/bash-cve-2014-6271-fixes2014-09-24
MetasploitPure-FTPd External Authentication Bash Environment Variable Code Injection (Shellshock)2014-09-24
MetasploitApache mod_cgi Bash Environment Variable Code Injection (Shellshock)2014-09-24
MetasploitCUPS Filter Bash Environment Variable Code Injection (Shellshock)2014-09-24
MetasploitOS X VMWare Fusion Privilege Escalation via Bash Environment Code Injection (Shellshock)2014-09-24
MetasploitDhclient Bash Environment Variable Injection (Shellshock)2014-09-24
MetasploitQmail SMTP Bash Environment Variable Injection (Shellshock)2014-09-24
PoC in GitHubnpm/ansible-bashpocalypse2014-09-24
PoC in GitHubryancnelson/patched-bash-4.32014-09-24
PoC in GitHubAnklebiter87/Cgi-bin_bash_Reverse2014-09-25
Show 47 moreShow less
Public exploits
SourceLinkDate
Exploit-DBGNU Bash - 'Shellshock' Environment Variable Command Injection2014-09-25
Exploit-DBBash - 'Shellshock' Environment Variables Command Injection2014-09-25
Exploit-DBGNU Bash - Environment Variable Command Injection (Metasploit)2014-09-25
PoC in GitHubRainMak3r/Rainstorm2014-09-25
PoC in GitHubariarijp/vagrant-shellshock2014-09-25
PoC in GitHubgabemarshall/shocknaww2014-09-25
PoC in GitHubilismal/Nessus_CVE-2014-6271_check2014-09-25
PoC in GitHubjblaine/cookbook-bash-CVE-2014-62712014-09-25
PoC in GitHubjustzx2011/bash-up2014-09-25
PoC in GitHubmattclegg/CVE-2014-62712014-09-25
PoC in GitHubrrreeeyyy/cve-2014-6271-spec2014-09-25
PoC in GitHubscottjpack/shellshock_scanner2014-09-25
PoC in GitHubthemson/shellshock2014-09-25
PoC in GitHubwoltage/CVE-2014-62712014-09-25
PoC in GitHubAPSL/salt-shellshock2014-09-26
PoC in GitHubinternero/debian-lenny-bash_3.2.52-cve-2014-62712014-09-26
PoC in GitHubsecurusglobal/BadBash2014-09-26
PoC in GitHubteedeedubya/bash-fix-exploit2014-09-26
PoC in GitHubvilladora/CVE-2014-62712014-09-26
PoC in GitHubu20024804/bash-3.2-fixed-CVE-2014-62712014-09-27
PoC in GitHubu20024804/bash-4.2-fixed-CVE-2014-62712014-09-27
PoC in GitHubu20024804/bash-4.3-fixed-CVE-2014-62712014-09-27
PoC in GitHubfrancisck/shellshock-cgi2014-09-28
PoC in GitHubproclnas/ShellShock-CGI-Scan2014-09-28
MetasploitIPFire Bash Environment Variable Injection (Shellshock)2014-09-29
Exploit-DBIPFire - CGI Web Interface (Authenticated) Bash Environment Variable Code Injection2014-10-01
Exploit-DBGNU bash 4.3.11 - Environment Variable dhclient2014-10-02
Exploit-DBPure-FTPd - External Authentication Bash Environment Variable Code Injection (Metasploit)2014-10-02
Exploit-DBOpenVPN 2.2.29 - 'Shellshock' Remote Command Injection2014-10-04
Exploit-DBBash CGI - 'Shellshock' Remote Command Injection (Metasploit)2014-10-06
Exploit-DBPostfix SMTP 4.2.x < 4.2.48 - 'Shellshock' Remote Command Injection2014-10-06
Exploit-DBApache mod_cgi - 'Shellshock' Remote Command Injection2014-10-06
Exploit-DBCUPS Filter - Bash Environment Variable Code Injection (Metasploit)2014-10-29
Exploit-DBPHP < 5.6.2 - 'Shellshock' Safe Mode / disable_functions Bypass / Command Injection2014-11-03
Exploit-DBQNAP - Admin Shell via Bash Environment Variable Code Injection (Metasploit)2015-03-26
Exploit-DBQNAP - Web Server Remote Code Execution via Bash Environment Variable Code Injection (Metasploit)2015-03-26
Exploit-DBKemp Load Master 7.1.16 - Multiple Vulnerabilities2015-04-02
Exploit-DBCisco Unified Communications Manager - Multiple Vulnerabilities2015-08-18
MetasploitAdvantech Switch Bash Environment Variable Code Injection (Shellshock)2015-12-01
Exploit-DBAdvantech Switch - 'Shellshock' Bash Environment Variable Command Injection (Metasploit)2015-12-02
Exploit-DBIPFire - 'Shellshock' Bash Environment Variable Command Injection (Metasploit)2016-06-10
Exploit-DBTrendMicro InterScan Web Security Virtual Appliance - 'Shellshock' Remote Command Injection2016-10-21
Exploit-DBRedStar 3.0 Server - 'Shellshock' 'BEAM' / 'RSSMON' Command Injection2016-12-18
Exploit-DBQmail SMTP - Bash Environment Variable Injection (Metasploit)2017-10-02
MetasploitApache mod_cgi Bash Environment Variable Injection (Shellshock) Scanner2014-09-24
MetasploitDHCP Client Bash Environment Variable Code Injection (Shellshock)2014-09-24
NucleiShellShock - Remote Code Execution

Plus 71 more. The full list has every link.

History

History
RecordedChangedSources
exploitation
exploits, exploits_more
exploits
first indexedCVE List, EUVD, Exploit-DB, GitHub Advisories, CISA KEV, Metasploit, Nuclei, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-6271 is a critical vulnerability (CVSS 9.8) in Gnu Bash, published September 24, 2014. CISA lists it as known to be exploited, since January 28, 2022. EUVD reports exploitation since January 28, 2022. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 100.0%, the 99th percentile. Fixed in bash 4.3-9.1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 158 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open