CVE-2014-6271: GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

CVSS: 10.0v2.0HighKEVAnalyzed

AliasesMGASA-2014-0388RHSA-2014:1293RHSA-2014:1294+6 more

Published 24-09-2014Last modified 22-10-2025

Some data may be incomplete

1 reference with an unsupported link type was hidden.

Vulnerability summary

CVE-2014-6271 is a high (CVSS 10.0) OS Command Injection vulnerability in GNU Bourne-Again Shell (Bash). It is known to be exploited: CISA lists it, first on 28-01-2022. EPSS estimates a 100.00% chance of exploitation in the next 30 days, higher than 99.9% of scored vulnerabilities. 39 public exploits are recorded.

Overall risk

90/100

0100

Critical · default modelHow is this calculated?

CVSS score

10.0/10

010

High · v2.0 (NVD)

EPSS score

100.00%

0%100%

Critical · 0.00 pp in 30 days

KEVListedCISA

RansomwareNone recordedNo known use recorded

Public exploits39reference, exploit-database, metasploit

Advisory lineage

Upstream 0 · Downstream 2 · Duplicates 3 · Related 1

OPENSUSE-SU-2024:10106-1 RHSA-2014:1354 CVE-2014-3671 CVE-2014-62771 CVE-2014-7227

Timeline

24-09-2014
PublishedVulnerability first disclosed.
28-01-2022
Added to CISA KEVGNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
28-07-2022
CISA remediation dueApply updates per vendor instructions.
22-10-2025
Last modifiedVulnerability information updated.

Description

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka "ShellShock." NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.

CVSS metrics

5 scores · 4 sources · 2 versions

v3.19.8v2.010.0

EPSS trend

Probability

100.00%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

0.00 pp

From 100.00% on 18-09-2026

18-09-202618-10-2026

EPSS score

100.00%

Known exploited

Compare KEV catalogs

CISA KEVListed

Added: 28-01-2022
Federal due date: 28-07-2022

CISA required action

Apply updates per vendor instructions. nvd.nist.gov/vuln/detail/CVE-2014-6271

Public exploits

39 found

referenceUnverified
Exploit Reference (packetstormsecurity.com)
Maturity: unknown
referenceUnverified
Exploit Reference (securityblog.redhat.com)
Maturity: unknown
referenceUnverified
Exploit Reference (access.redhat.com)
Maturity: unknown

Show all 39 exploits

referenceUnverified
Exploit Reference (packetstormsecurity.com)
Maturity: unknown
referenceUnverified
Exploit Reference (packetstormsecurity.com)
Maturity: unknown
referenceUnverified
Exploit Reference (access.redhat.com)
Maturity: unknown
referenceUnverified
Exploit Reference (packetstormsecurity.com)
Maturity: unknown
referenceUnverified
Exploit Reference (lcamtuf.blogspot.com)
Maturity: unknown
exploit-databaseremotecgiVerified
Advantech Switch - 'Shellshock' Bash Environment Variable Command Injection (Metasploit)
Maturity: weaponized
exploit-databaseremotecgiVerified
GNU Bash - Environment Variable Command Injection (Metasploit)
Maturity: weaponized
exploit-databaseremotecgiVerified
IPFire - 'Shellshock' Bash Environment Variable Command Injection (Metasploit)
Maturity: weaponized
exploit-databasecgiVerified
Bash CGI - 'Shellshock' Remote Command Injection (Metasploit)
Maturity: poc
exploit-databasecgiVerified
IPFire - CGI Web Interface (Authenticated) Bash Environment Variable Code Injection
Maturity: poc
exploit-databaseremotehardwareUnverified
QNAP - Admin Shell via Bash Environment Variable Code Injection (Metasploit)
Maturity: poc
exploit-databaseremotehardwareUnverified
QNAP - Web Server Remote Code Execution via Bash Environment Variable Code Injection (Metasploit)
Maturity: poc
exploit-databaseremotehardwareUnverified
TrendMicro InterScan Web Security Virtual Appliance - 'Shellshock' Remote Command Injection
Maturity: poc
exploit-databaselocallinuxVerified
RedStar 3.0 Server - 'Shellshock' 'BEAM' / 'RSSMON' Command Injection
Maturity: weaponized
exploit-databaseremotelinuxVerified
Apache mod_cgi - 'Shellshock' Remote Command Injection
Maturity: weaponized
exploit-databaseremotelinuxVerified
Bash - 'Shellshock' Environment Variables Command Injection
Maturity: weaponized
exploit-databaseremotelinuxVerified
CUPS Filter - Bash Environment Variable Code Injection (Metasploit)
Maturity: weaponized
exploit-databaseremotelinuxVerified
GNU Bash - 'Shellshock' Environment Variable Command Injection
Maturity: weaponized
exploit-databaseremotelinuxUnverified
GNU bash 4.3.11 - Environment Variable dhclient
Maturity: poc
exploit-databaseremotelinuxUnverified
OpenVPN 2.2.29 - 'Shellshock' Remote Command Injection
Maturity: poc
exploit-databaseremotelinuxVerified
Postfix SMTP 4.2.x < 4.2.48 - 'Shellshock' Remote Command Injection
Maturity: weaponized
exploit-databaseremotelinuxVerified
Pure-FTPd - External Authentication Bash Environment Variable Code Injection (Metasploit)
Maturity: weaponized
exploit-databaseremotelinuxVerified
Qmail SMTP - Bash Environment Variable Injection (Metasploit)
Maturity: weaponized
exploit-databasemultipleUnverified
Cisco Unified Communications Manager - Multiple Vulnerabilities
Maturity: poc
exploit-databasemultipleUnverified
Kemp Load Master 7.1.16 - Multiple Vulnerabilities
Maturity: poc
exploit-databasephpUnverified
PHP < 5.6.2 - 'Shellshock' Safe Mode / disable_functions Bypass / Command Injection
Maturity: poc
MetasploitremoteUnverified
Apache mod_cgi Bash Environment Variable Injection (Shellshock) Scanner
auxiliary/scanner/http/apache_mod_cgi_bash_env
Maturity: poc
MetasploitremoteUnverified
DHCP Client Bash Environment Variable Code Injection (Shellshock)
auxiliary/server/dhclient_bash_env
Maturity: poc
MetasploitremoteVerified
Advantech Switch Bash Environment Variable Code Injection (Shellshock)
exploit/linux/http/advantech_switch_bash_env_exec
Maturity: weaponized
MetasploitremoteVerified
IPFire Bash Environment Variable Injection (Shellshock)
exploit/linux/http/ipfire_bashbug_exec
Maturity: weaponized
MetasploitremoteVerified
Pure-FTPd External Authentication Bash Environment Variable Code Injection (Shellshock)
exploit/multi/ftp/pureftpd_bash_env_exec
Maturity: weaponized
MetasploitremoteVerified
Apache mod_cgi Bash Environment Variable Code Injection (Shellshock)
exploit/multi/http/apache_mod_cgi_bash_env_exec
Maturity: weaponized
MetasploitremoteVerified
CUPS Filter Bash Environment Variable Code Injection (Shellshock)
exploit/multi/http/cups_bash_env_exec
Maturity: weaponized
MetasploitremoteUnverified
OS X VMWare Fusion Privilege Escalation via Bash Environment Code Injection (Shellshock)
exploit/osx/local/vmware_bash_function_root
Maturity: poc
MetasploitremoteVerified
Dhclient Bash Environment Variable Injection (Shellshock)
exploit/unix/dhcp/bash_environment
Maturity: weaponized
MetasploitremoteUnverified
Qmail SMTP Bash Environment Variable Injection (Shellshock)
exploit/unix/smtp/qmail_bash_env_exec
Maturity: poc

Weaknesses

CWE · root cause

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Affected systems

Ibm22 products

flex_system_v7000_firmware≥ 1.1.0.0, < 7.1.0.11 | ≥ 7.2.0.0, < 7.2.0.9 | ≥ 7.3.0.0, < 7.3.0.7
infosphere_guardium_database_activity_monitoring8.2 | 9.0 | 9.1
pureapplication_system≥ 1.0.0.0, ≤ 1.0.0.4 | ≥ 1.1.0.0, ≤ 1.1.0.4 | 2.0.0.0
qradar_risk_manager7.1.0
qradar_security_information_and_event_manager7.1.0 | 7.1.0:mr1 | 7.1.0:mr2 | 7.1.1 | 7.1.1:p1 | 7.1.1:p2 | 7.1.1:p3 | 7.1.2 | 7.1.2:p1 | 7.1.2:p10 | 7.1.2:p11 | 7.1.2:p12 | 7.1.2:p13 | 7.1.2:p2 | 7.1.2:p3 | 7.1.2:p4 | 7.1.2:p5 | 7.1.2:p6 | 7.1.2:p7 | 7.1.2:p8 | 7.1.2:p9 | 7.2 | 7.2.0 | 7.2.0:p1 | 7.2.0:p2 | 7.2.0:p3 | 7.2.1 | 7.2.1:p1 | 7.2.1:p2 | 7.2.1:p3 | 7.2.2 | 7.2.2:p1 | 7.2.2:p2 | 7.2.2:p3 | 7.2.2:p4 | 7.2.3 | 7.2.3:p1 | 7.2.3:p2 | 7.2.3:p3 | 7.2.3:p4 | 7.2.4 | 7.2.4:p1 | 7.2.4:p2 | 7.2.4:p3 | 7.2.4:p4 | 7.2.4:p5 | 7.2.4:p6 | 7.2.5 | 7.2.5:p1 | 7.2.5:p2 | 7.2.5:p3 | 7.2.5:p4 | 7.2.5:p5 | 7.2.5:p6 | 7.2.6 | 7.2.6:p1 | 7.2.6:p2 | 7.2.6:p3 | 7.2.6:p4 | 7.2.6:p5 | 7.2.6:p6 | 7.2.6:p7 | 7.2.7 | 7.2.7:p1 | 7.2.7:p2 | 7.2.7:p3 | 7.2.7:p4 | 7.2.8 | 7.2.8:p1 | 7.2.8:p10 | 7.2.8:p11 | 7.2.8:p12 | 7.2.8:p13 | 7.2.8:p14 | 7.2.8:p15 | 7.2.8:p16 | 7.2.8:p2 | 7.2.8:p3 | 7.2.8:p4 | 7.2.8:p5 | 7.2.8:p6 | 7.2.8:p7 | 7.2.8:p8 | 7.2.8:p9 | 7.2.8.15 | 7.2.9

Show all 22

F519 products

arx≥ 6.0.0, ≤ 6.4.0
big-ip_access_policy_manager≥ 10.1.0, ≤ 10.2.4 | ≥ 11.0.0, ≤ 11.5.1 | 11.6.0
big-ip_advanced_firewall_manager≥ 11.3.0, ≤ 11.5.1 | 11.6.0
big-ip_analytics≥ 11.0.0, ≤ 11.5.1 | 11.6.0
big-ip_application_acceleration_manager≥ 11.4.0, ≤ 11.5.1 | 11.6.0

Show all 19

Redhat17 products

enterprise_linuxEOL4.0 | 5.0 | 6.0 | 7.0
enterprise_linux_desktop5.0 | 6.0 | 7.0
enterprise_linux_eus5.9 | 6.4 | 6.5 | 7.3 | 7.4 | 7.5 | 7.6 | 7.7
enterprise_linux_for_ibm_z_systems5.9_s390x | 6.4_s390x | 6.5_s390x | 7.3_s390x | 7.4_s390x | 7.5_s390x | 7.6_s390x | 7.7_s390x
enterprise_linux_for_power_big_endian5.0_ppc | 5.9_ppc | 6.0_ppc64 | 6.4_ppc64 | 7.0_ppc64

Show all 17

Suse4 products

linux_enterprise_desktop11:sp3 | 12
linux_enterprise_server10:sp3 | 10:sp4 | 11:sp1 | 11:sp2 | 11:sp3 | 12
linux_enterprise_software_development_kit11:sp3 | 12
studio_onsite1.3

Mageia3 products

bash< 4.2-48.1.mga3
bash< 4.2-48.1.mga4
mageiaEOL3.0 | 4.0

Debian2 products

bash< 4.3-9.1 | < 4.1-3+deb6u1 | < 4.2+dfsg-0.1+deb7u1
debian_linuxEOL7.0

Novell2 products

open_enterprise_server2.0:sp3 | 11.0:sp2
zenworks_configuration_management10.3 | 11 | 11.1 | 11.2 | 11.3.0

Vmware2 products

esx4.0 | 4.1
vcenter_server_appliance5.0 | 5.0:update_1 | 5.0:update_2 | 5.1 | 5.1:update_1 | 5.1:update_2 | 5.5 | 5.5:update_1

Apple1 product

mac_os_x≥ 10.0.0, < 10.10.0

Arista1 product

eos≥ 4.9.0, < 4.9.12 | ≥ 4.10.0, < 4.10.9 | ≥ 4.11.0, < 4.11.11 | ≥ 4.12.0, < 4.12.9 | ≥ 4.13.0, < 4.13.9 | ≥ 4.14.0, < 4.14.4f

Canonical1 product

ubuntu_linuxEOL10.04 | 12.04 | 14.04

Checkpoint1 product

security_gateway< r77.30

Citrix1 product

netscaler_sdx_firmware< 9.3.67.5r1 | ≥ 10, < 10.1.129.11r1 | ≥ 10.5, < 10.5.52.11r1

Gnu1 product

bash≤ 4.3

Opensuse1 product

opensuseEOL12.3 | 13.1 | 13.2

Oracle1 product

linuxEOL4 | 5 | 6

Qnap1 product

qts< 4.1.1 | 4.1.1 | 4.1.1:build_0927

Ubuntu1 product

bash< 4.3-7ubuntu1.1

18 vendors · 81 products

References

190 links

www.exploit-db.com/exploits/37816/ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.htmlX Refsource MISCExploitThird Party AdvisoryVDB Entry
lists.opensuse.org/opensuse-security-announce/2014-09/msg00034.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=ssg1S1004897X Refsource CONFIRMThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21685749X Refsource CONFIRMThird Party Advisory
marc.info?l=bugtraq&m=141577137423233&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
marc.info?l=bugtraq&m=142719845423222&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
www.exploit-db.com/exploits/39918/ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
marc.info?l=bugtraq&m=141216668515282&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
rhn.redhat.com/errata/RHSA-2014-1295.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory

Show all 100 references

lists.opensuse.org/opensuse-security-announce/2014-09/msg00037.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
securityblog.redhat.com/2014/…X Refsource CONFIRMExploitThird Party AdvisoryWEB
supportcenter.checkpoint.com/supportcenter/…X Refsource CONFIRMThird Party Advisory
marc.info?l=bugtraq&m=141383138121313&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
marc.info?l=bugtraq&m=142721162228379&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
www.securityfocus.com/archive/1/533593/100/0/threadedMailing ListX Refsource BUGTRAQBroken LinkThird Party AdvisoryVDB Entry
marc.info?l=bugtraq&m=142358026505815&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21686084X Refsource CONFIRMThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21686479X Refsource CONFIRMBroken LinkThird Party Advisory
secunia.com/advisories/61188Third Party AdvisoryX Refsource SECUNIABroken Link
www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0X Refsource CONFIRMBroken LinkThird Party Advisory
jvn.jp/en/jp/JVN55667175/index.htmlThird Party AdvisoryX Refsource JVNVendor Advisory
secunia.com/advisories/61676Third Party AdvisoryX Refsource SECUNIABroken Link
www.exploit-db.com/exploits/40619/ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
secunia.com/advisories/60433Third Party AdvisoryX Refsource SECUNIABroken Link
www.exploit-db.com/exploits/38849/ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
marc.info?l=bugtraq&m=141383026420882&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
marc.info?l=bugtraq&m=141585637922673&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
kb.juniper.net/InfoCenter/index?page=content&id=JSA10673X Refsource CONFIRMThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2014-09/msg00049.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
marc.info?l=bugtraq&m=141576728022234&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21685541X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/61715Third Party AdvisoryX Refsource SECUNIABroken Link
www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.htmlX Refsource CONFIRMThird Party Advisory
secunia.com/advisories/61816Third Party AdvisoryX Refsource SECUNIABroken Link
lists.opensuse.org/opensuse-updates/2014-10/msg00025.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
secunia.com/advisories/61442Third Party AdvisoryX Refsource SECUNIABroken Link
marc.info?l=bugtraq&m=142358078406056&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
marc.info?l=bugtraq&m=142805027510172&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
secunia.com/advisories/61283Third Party AdvisoryX Refsource SECUNIABroken Link
marc.info?l=bugtraq&m=142113462216480&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
www.ubuntu.com/usn/USN-2362-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
kc.mcafee.com/corporate/index?page=content&id=SB10085X Refsource CONFIRMBroken LinkThird Party Advisory
lists.opensuse.org/opensuse-updates/2014-10/msg00023.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
secunia.com/advisories/61654Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/61542Third Party AdvisoryX Refsource SECUNIABroken Link
www.novell.com/support/kb/doc.php?id=7015701X Refsource CONFIRMThird Party Advisory
www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315X Refsource CONFIRMBroken LinkThird Party Advisory
secunia.com/advisories/62312Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/59272Third Party AdvisoryX Refsource SECUNIABroken Link
marc.info?l=bugtraq&m=141319209015420&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.htmlX Refsource CONFIRMThird Party Advisory
marc.info?l=bugtraq&m=141879528318582&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21685604X Refsource CONFIRMThird Party Advisory
marc.info?l=bugtraq&m=142118135300698&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
secunia.com/advisories/61703Third Party AdvisoryX Refsource SECUNIABroken Link
support.apple.com/kb/HT6495X Refsource CONFIRMThird Party Advisory
www.kb.cert.org/vuls/id/252743Third Party AdvisoryX Refsource CERT VNUS Government Resource
secunia.com/advisories/61065Third Party AdvisoryX Refsource SECUNIABroken Link
lists.opensuse.org/opensuse-security-announce/2014-09/msg00029.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
marc.info?l=bugtraq&m=141383196021590&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
marc.info?l=bugtraq&m=141383081521087&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21686445X Refsource CONFIRMThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21686131X Refsource CONFIRMThird Party Advisory
www.securityfocus.com/bid/70103VDB EntryX Refsource BIDBroken LinkThird Party Advisory
jvndb.jvn.jp/jvndb/JVNDB-2014-000126Third Party AdvisoryX Refsource JVNDBVDB EntryVendor Advisory
www.us-cert.gov/ncas/alerts/TA14-268AThird Party AdvisoryX Refsource CERTUS Government Resource
lists.opensuse.org/opensuse-security-announce/2014-09/msg00028.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
secunia.com/advisories/61641Third Party AdvisoryX Refsource SECUNIABroken Link
kb.juniper.net/InfoCenter/index?page=content&id=JSA10648X Refsource CONFIRMThird Party Advisory
access.redhat.com/node/1200223X Refsource CONFIRMExploitThird Party Advisory
packetstormsecurity.com/files/137376/IPFire-Bash-Environment-Variable-Injection-Shellshock.htmlX Refsource MISCExploitThird Party AdvisoryVDB Entry
lists.opensuse.org/opensuse-security-announce/2014-10/msg00004.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=ssg1S1004898X Refsource CONFIRMThird Party Advisory
archives.neohapsis.com/archives/bugtraq/2014-10/0101.htmlVendor AdvisoryX Refsource APPLEBroken LinkThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21685914X Refsource CONFIRMBroken LinkThird Party Advisory
seclists.org/fulldisclosure/2014/Oct/0Mailing ListX Refsource FULLDISCThird Party Advisory
www.mandriva.com/security/advisories?name=MDVSA-2015:164Vendor AdvisoryX Refsource MANDRIVABroken LinkThird Party Advisory
rhn.redhat.com/errata/RHSA-2014-1293.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04497075X Refsource CONFIRMThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2014-09/msg00040.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
secunia.com/advisories/60325Third Party AdvisoryX Refsource SECUNIABroken Link
help.ecostruxureit.com/display/…X Refsource CONFIRMBroken LinkThird Party Advisory
secunia.com/advisories/60024Third Party AdvisoryX Refsource SECUNIABroken Link
packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.htmlX Refsource MISCExploitThird Party AdvisoryVDB Entry
www.exploit-db.com/exploits/34879/ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
access.redhat.com/articles/1200223X Refsource CONFIRMExploitThird Party AdvisoryWEBARTICLE
secunia.com/advisories/62343Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/61565Third Party AdvisoryX Refsource SECUNIABroken Link
www.suse.com/support/shellshock/X Refsource CONFIRMThird Party Advisory
marc.info?l=bugtraq&m=141450491804793&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
secunia.com/advisories/61313Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/61873Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/61485Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/60947Third Party AdvisoryX Refsource SECUNIABroken Link
support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04518183X Refsource CONFIRMBroken LinkThird Party Advisory
support.apple.com/kb/HT6535X Refsource CONFIRMThird Party Advisory
marc.info?l=bugtraq&m=141577297623641&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
marc.info?l=bugtraq&m=142546741516006&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory

Showing 100 of 190. Use Open JSON for the complete list.

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities