CVE-2014-6271

Published: Sep 24, 2014Modified: Apr 22, 2026CISA KEV

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka "ShellShock." NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.

Affected (334)

Products: Gnu: Bash · Arista: Eos · Oracle: Linux · +14 more

Show all products

Gnu: Bash · Arista: Eos · Oracle: Linux · Qnap: Qts · Mageia: Mageia · Redhat: Enterprise Linux, Enterprise Linux Desktop, Enterprise Linux Eus, Enterprise Linux For Ibm Z Systems, Enterprise Linux For Power Big Endian, Enterprise Linux For Power Big Endian Eus, Enterprise Linux For Scientific Computing, Enterprise Linux Server, Enterprise Linux Server Aus, Enterprise Linux Server From Rhui, Enterprise Linux Server Tus, Enterprise Linux Workstation, Gluster Storage Server For On Premise, Virtualization · Opensuse: Opensuse · Suse: Linux Enterprise Desktop, Linux Enterprise Server, Linux Enterprise Software Development Kit, Studio Onsite · Debian: Debian Linux · Ibm: Infosphere Guardium Database Activity Monitoring, Pureapplication System, Qradar Risk Manager, Qradar Security Information And Event Manager, Qradar Vulnerability Manager, Security Access Manager For Mobile 8.0 Firmware, Security Access Manager For Web 7.0 Firmware, Security Access Manager For Web 8.0 Firmware, Smartcloud Entry Appliance, Smartcloud Provisioning, Software Defined Network For Virtual Environments, Starter Kit For Cloud, Workload Deployer, Storwize V7000 Firmware, Storwize V5000 Firmware, Storwize V3700 Firmware, Storwize V3500 Firmware, Flex System V7000 Firmware, San Volume Controller Firmware, Stn6500 Firmware, Stn6800 Firmware, Stn7800 Firmware · Canonical: Ubuntu Linux · Novell: Open Enterprise Server, Zenworks Configuration Management · Checkpoint: Security Gateway · F5: Big Ip Access Policy Manager, Big Ip Advanced Firewall Manager, Big Ip Analytics, Big Ip Application Acceleration Manager, Big Ip Application Security Manager, Big Ip Edge Gateway, Big Ip Global Traffic Manager, Big Ip Link Controller, Big Ip Local Traffic Manager, Big Ip Policy Enforcement Manager, Big Ip Protocol Security Module, Big Ip Wan Optimization Manager, Big Ip Webaccelerator, Big Iq Cloud, Big Iq Device, Big Iq Security, Enterprise Manager, Traffix Signaling Delivery Controller, Arx Firmware · Citrix: Netscaler Sdx Firmware · Apple: Mac Os X · Vmware: Esx, Vcenter Server Appliance

1 product

1 product

1 product

1 product

1 product

14 products

Enterprise Linux Desktop

Enterprise Linux Eus

Enterprise Linux For Ibm Z Systems

Enterprise Linux For Power Big Endian

Enterprise Linux For Power Big Endian Eus

Enterprise Linux For Scientific Computing

Enterprise Linux Server

Enterprise Linux Server Aus

Enterprise Linux Server From Rhui

Enterprise Linux Server Tus

Enterprise Linux Workstation

Gluster Storage Server For On Premise

1 product

4 products

Linux Enterprise Desktop

Linux Enterprise Server

Linux Enterprise Software Development Kit

1 product

22 products

Infosphere Guardium Database Activity Monitoring

Pureapplication System

Qradar Risk Manager

Qradar Security Information And Event Manager

Qradar Vulnerability Manager

Security Access Manager For Mobile 8.0 Firmware

Security Access Manager For Web 7.0 Firmware

Security Access Manager For Web 8.0 Firmware

Smartcloud Entry Appliance

Smartcloud Provisioning

Software Defined Network For Virtual Environments

Starter Kit For Cloud

Workload Deployer

Storwize V7000 Firmware

Storwize V5000 Firmware

Storwize V3700 Firmware

Storwize V3500 Firmware

Flex System V7000 Firmware

San Volume Controller Firmware

1 product

2 products

Open Enterprise Server

Zenworks Configuration Management

Checkpoint

1 product

Security Gateway

19 products

Big Ip Access Policy Manager

Big Ip Advanced Firewall Manager

Big Ip Analytics

Big Ip Application Acceleration Manager

Big Ip Application Security Manager

Big Ip Edge Gateway

Big Ip Global Traffic Manager

Big Ip Link Controller

Big Ip Local Traffic Manager

Big Ip Policy Enforcement Manager

Big Ip Protocol Security Module

Big Ip Wan Optimization Manager

Big Ip Webaccelerator

Traffix Signaling Delivery Controller

Arx Firmware

Citrix

1 product

Netscaler Sdx Firmware

1 product

2 products

Vcenter Server Appliance

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gnu Bash	Up to 4.3

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Arista Eos	From 4.10.0 to 4.10.9
Arista Eos	From 4.11.0 to 4.11.11
Arista Eos	From 4.12.0 to 4.12.9
Arista Eos	From 4.13.0 to 4.13.9
Arista Eos	From 4.14.0 to 4.14.4f
Arista Eos	From 4.9.0 to 4.9.12

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Oracle Linux	Version 4
Oracle Linux	Version 5
Oracle Linux	Version 6

Configuration D

3 vulnerable

Vulnerable Software	Affected Versions
Qnap Qts	Before 4.1.1
Qnap Qts	Version 4.1.1
Qnap Qts	Version 4.1.1 build_0927

Configuration E

2 vulnerable

Vulnerable Software	Affected Versions
Mageia Mageia	Version 3.0
Mageia Mageia	Version 4.0

Configuration F

60 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 4.0
Redhat Enterprise Linux	Version 5.0
Redhat Enterprise Linux	Version 6.0
Redhat Enterprise Linux	Version 7.0
Redhat Enterprise Linux Desktop	Version 5.0
Redhat Enterprise Linux Desktop	Version 6.0
Redhat Enterprise Linux Desktop	Version 7.0
Redhat Enterprise Linux Eus	Version 5.9
Redhat Enterprise Linux Eus	Version 6.4
Redhat Enterprise Linux Eus	Version 6.5
Redhat Enterprise Linux Eus	Version 7.3
Redhat Enterprise Linux Eus	Version 7.4
Redhat Enterprise Linux Eus	Version 7.5
Redhat Enterprise Linux Eus	Version 7.6
Redhat Enterprise Linux Eus	Version 7.7
Redhat Enterprise Linux For Ibm Z Systems	Version 5.9_s390x
Redhat Enterprise Linux For Ibm Z Systems	Version 6.4_s390x
Redhat Enterprise Linux For Ibm Z Systems	Version 6.5_s390x
Redhat Enterprise Linux For Ibm Z Systems	Version 7.3_s390x
Redhat Enterprise Linux For Ibm Z Systems	Version 7.4_s390x
Redhat Enterprise Linux For Ibm Z Systems	Version 7.5_s390x
Redhat Enterprise Linux For Ibm Z Systems	Version 7.6_s390x
Redhat Enterprise Linux For Ibm Z Systems	Version 7.7_s390x
Redhat Enterprise Linux For Power Big Endian	Version 5.0_ppc
Redhat Enterprise Linux For Power Big Endian	Version 5.9_ppc
Redhat Enterprise Linux For Power Big Endian	Version 6.0_ppc64
Redhat Enterprise Linux For Power Big Endian	Version 6.4_ppc64
Redhat Enterprise Linux For Power Big Endian	Version 7.0_ppc64
Redhat Enterprise Linux For Power Big Endian Eus	Version 6.5_ppc64
Redhat Enterprise Linux For Power Big Endian Eus	Version 7.3_ppc64
Redhat Enterprise Linux For Power Big Endian Eus	Version 7.4_ppc64
Redhat Enterprise Linux For Power Big Endian Eus	Version 7.5_ppc64
Redhat Enterprise Linux For Power Big Endian Eus	Version 7.6_ppc64
Redhat Enterprise Linux For Power Big Endian Eus	Version 7.7_ppc64
Redhat Enterprise Linux For Scientific Computing	Version 6.0
Redhat Enterprise Linux For Scientific Computing	Version 7.0
Redhat Enterprise Linux Server	Version 5.0
Redhat Enterprise Linux Server	Version 6.0
Redhat Enterprise Linux Server	Version 7.0
Redhat Enterprise Linux Server Aus	Version 5.6
Redhat Enterprise Linux Server Aus	Version 5.9
Redhat Enterprise Linux Server Aus	Version 6.2
Redhat Enterprise Linux Server Aus	Version 6.4
Redhat Enterprise Linux Server Aus	Version 6.5
Redhat Enterprise Linux Server Aus	Version 7.3
Redhat Enterprise Linux Server Aus	Version 7.4
Redhat Enterprise Linux Server Aus	Version 7.6
Redhat Enterprise Linux Server Aus	Version 7.7
Redhat Enterprise Linux Server From Rhui	Version 5.0
Redhat Enterprise Linux Server From Rhui	Version 6.0
Redhat Enterprise Linux Server From Rhui	Version 7.0
Redhat Enterprise Linux Server Tus	Version 6.5
Redhat Enterprise Linux Server Tus	Version 7.3
Redhat Enterprise Linux Server Tus	Version 7.6
Redhat Enterprise Linux Server Tus	Version 7.7
Redhat Enterprise Linux Workstation	Version 5.0
Redhat Enterprise Linux Workstation	Version 6.0
Redhat Enterprise Linux Workstation	Version 7.0
Redhat Gluster Storage Server For On Premise	Version 2.1
Redhat Virtualization	Version 3.4

Configuration G

15 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 12.3
Opensuse Opensuse	Version 13.1
Opensuse Opensuse	Version 13.2
Suse Linux Enterprise Desktop	Version 11 sp3
Suse Linux Enterprise Desktop	Version 12
Suse Linux Enterprise Server	Version 10 sp3
Suse Linux Enterprise Server	Version 10 sp4
Suse Linux Enterprise Server	Version 11 sp1
Suse Linux Enterprise Server	Version 11 sp2
Suse Linux Enterprise Server	Version 11 sp3
Suse Linux Enterprise Server	Version 11 sp3
Suse Linux Enterprise Server	Version 12
Suse Linux Enterprise Software Development Kit	Version 11 sp3
Suse Linux Enterprise Software Development Kit	Version 12
Suse Studio Onsite	Version 1.3

Configuration H

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 7.0

Configuration I

148 vulnerable

Vulnerable Software	Affected Versions
Ibm Infosphere Guardium Database Activity Monitoring	Version 8.2
Ibm Infosphere Guardium Database Activity Monitoring	Version 9.0
Ibm Infosphere Guardium Database Activity Monitoring	Version 9.1
Ibm Pureapplication System	From 1.0.0.0 to 1.0.0.4
Ibm Pureapplication System	From 1.1.0.0 to 1.1.0.4
Ibm Pureapplication System	Version 2.0.0.0
Ibm Qradar Risk Manager	Version 7.1.0
Ibm Qradar Security Information And Event Manager	Version 7.1.0
Ibm Qradar Security Information And Event Manager	Version 7.1.0 mr1
Ibm Qradar Security Information And Event Manager	Version 7.1.0 mr2
Ibm Qradar Security Information And Event Manager	Version 7.1.1
Ibm Qradar Security Information And Event Manager	Version 7.1.1 p1
Ibm Qradar Security Information And Event Manager	Version 7.1.1 p2
Ibm Qradar Security Information And Event Manager	Version 7.1.1 p3
Ibm Qradar Security Information And Event Manager	Version 7.1.2
Ibm Qradar Security Information And Event Manager	Version 7.1.2 p10
Ibm Qradar Security Information And Event Manager	Version 7.1.2 p11
Ibm Qradar Security Information And Event Manager	Version 7.1.2 p12
Ibm Qradar Security Information And Event Manager	Version 7.1.2 p13
Ibm Qradar Security Information And Event Manager	Version 7.1.2 p1
Ibm Qradar Security Information And Event Manager	Version 7.1.2 p2
Ibm Qradar Security Information And Event Manager	Version 7.1.2 p3
Ibm Qradar Security Information And Event Manager	Version 7.1.2 p4
Ibm Qradar Security Information And Event Manager	Version 7.1.2 p5
Ibm Qradar Security Information And Event Manager	Version 7.1.2 p6
Ibm Qradar Security Information And Event Manager	Version 7.1.2 p7
Ibm Qradar Security Information And Event Manager	Version 7.1.2 p8
Ibm Qradar Security Information And Event Manager	Version 7.1.2 p9
Ibm Qradar Security Information And Event Manager	Version 7.2.0
Ibm Qradar Security Information And Event Manager	Version 7.2.0 p1
Ibm Qradar Security Information And Event Manager	Version 7.2.0 p2
Ibm Qradar Security Information And Event Manager	Version 7.2.0 p3
Ibm Qradar Security Information And Event Manager	Version 7.2.1
Ibm Qradar Security Information And Event Manager	Version 7.2.1 p1
Ibm Qradar Security Information And Event Manager	Version 7.2.1 p2
Ibm Qradar Security Information And Event Manager	Version 7.2.1 p3
Ibm Qradar Security Information And Event Manager	Version 7.2.2
Ibm Qradar Security Information And Event Manager	Version 7.2.2 p1
Ibm Qradar Security Information And Event Manager	Version 7.2.2 p2
Ibm Qradar Security Information And Event Manager	Version 7.2.2 p3
Ibm Qradar Security Information And Event Manager	Version 7.2.2 p4
Ibm Qradar Security Information And Event Manager	Version 7.2.3
Ibm Qradar Security Information And Event Manager	Version 7.2.3 p1
Ibm Qradar Security Information And Event Manager	Version 7.2.3 p2
Ibm Qradar Security Information And Event Manager	Version 7.2.3 p3
Ibm Qradar Security Information And Event Manager	Version 7.2.3 p4
Ibm Qradar Security Information And Event Manager	Version 7.2.4
Ibm Qradar Security Information And Event Manager	Version 7.2.4 p1
Ibm Qradar Security Information And Event Manager	Version 7.2.4 p2
Ibm Qradar Security Information And Event Manager	Version 7.2.4 p3
Ibm Qradar Security Information And Event Manager	Version 7.2.4 p4
Ibm Qradar Security Information And Event Manager	Version 7.2.4 p5
Ibm Qradar Security Information And Event Manager	Version 7.2.4 p6
Ibm Qradar Security Information And Event Manager	Version 7.2.5
Ibm Qradar Security Information And Event Manager	Version 7.2.5 p1
Ibm Qradar Security Information And Event Manager	Version 7.2.5 p2
Ibm Qradar Security Information And Event Manager	Version 7.2.5 p3
Ibm Qradar Security Information And Event Manager	Version 7.2.5 p4
Ibm Qradar Security Information And Event Manager	Version 7.2.5 p5
Ibm Qradar Security Information And Event Manager	Version 7.2.5 p6
Ibm Qradar Security Information And Event Manager	Version 7.2.6
Ibm Qradar Security Information And Event Manager	Version 7.2.6 p1
Ibm Qradar Security Information And Event Manager	Version 7.2.6 p2
Ibm Qradar Security Information And Event Manager	Version 7.2.6 p3
Ibm Qradar Security Information And Event Manager	Version 7.2.6 p4
Ibm Qradar Security Information And Event Manager	Version 7.2.6 p5
Ibm Qradar Security Information And Event Manager	Version 7.2.6 p6
Ibm Qradar Security Information And Event Manager	Version 7.2.6 p7
Ibm Qradar Security Information And Event Manager	Version 7.2.7
Ibm Qradar Security Information And Event Manager	Version 7.2.7 p1
Ibm Qradar Security Information And Event Manager	Version 7.2.7 p2
Ibm Qradar Security Information And Event Manager	Version 7.2.7 p3
Ibm Qradar Security Information And Event Manager	Version 7.2.7 p4
Ibm Qradar Security Information And Event Manager	Version 7.2.8.15
Ibm Qradar Security Information And Event Manager	Version 7.2.8
Ibm Qradar Security Information And Event Manager	Version 7.2.8 p10
Ibm Qradar Security Information And Event Manager	Version 7.2.8 p11
Ibm Qradar Security Information And Event Manager	Version 7.2.8 p12
Ibm Qradar Security Information And Event Manager	Version 7.2.8 p13
Ibm Qradar Security Information And Event Manager	Version 7.2.8 p14
Ibm Qradar Security Information And Event Manager	Version 7.2.8 p15
Ibm Qradar Security Information And Event Manager	Version 7.2.8 p16
Ibm Qradar Security Information And Event Manager	Version 7.2.8 p1
Ibm Qradar Security Information And Event Manager	Version 7.2.8 p2
Ibm Qradar Security Information And Event Manager	Version 7.2.8 p3
Ibm Qradar Security Information And Event Manager	Version 7.2.8 p4
Ibm Qradar Security Information And Event Manager	Version 7.2.8 p5
Ibm Qradar Security Information And Event Manager	Version 7.2.8 p6
Ibm Qradar Security Information And Event Manager	Version 7.2.8 p7
Ibm Qradar Security Information And Event Manager	Version 7.2.8 p8
Ibm Qradar Security Information And Event Manager	Version 7.2.8 p9
Ibm Qradar Security Information And Event Manager	Version 7.2.9
Ibm Qradar Security Information And Event Manager	Version 7.2
Ibm Qradar Vulnerability Manager	Version 7.2.0
Ibm Qradar Vulnerability Manager	Version 7.2.1
Ibm Qradar Vulnerability Manager	Version 7.2.2
Ibm Qradar Vulnerability Manager	Version 7.2.3
Ibm Qradar Vulnerability Manager	Version 7.2.4
Ibm Qradar Vulnerability Manager	Version 7.2.6 p1
Ibm Qradar Vulnerability Manager	Version 7.2.6 p2
Ibm Qradar Vulnerability Manager	Version 7.2.6 p3
Ibm Qradar Vulnerability Manager	Version 7.2.6 p4
Ibm Qradar Vulnerability Manager	Version 7.2.6 p5
Ibm Qradar Vulnerability Manager	Version 7.2.6 p6
Ibm Qradar Vulnerability Manager	Version 7.2.6 p7
Ibm Qradar Vulnerability Manager	Version 7.2.8
Ibm Qradar Vulnerability Manager	Version 7.2.8 p10
Ibm Qradar Vulnerability Manager	Version 7.2.8 p11
Ibm Qradar Vulnerability Manager	Version 7.2.8 p12
Ibm Qradar Vulnerability Manager	Version 7.2.8 p13
Ibm Qradar Vulnerability Manager	Version 7.2.8 p14
Ibm Qradar Vulnerability Manager	Version 7.2.8 p15
Ibm Qradar Vulnerability Manager	Version 7.2.8 p16
Ibm Qradar Vulnerability Manager	Version 7.2.8 p17
Ibm Qradar Vulnerability Manager	Version 7.2.8 p1
Ibm Qradar Vulnerability Manager	Version 7.2.8 p2
Ibm Qradar Vulnerability Manager	Version 7.2.8 p3
Ibm Qradar Vulnerability Manager	Version 7.2.8 p4
Ibm Qradar Vulnerability Manager	Version 7.2.8 p5
Ibm Qradar Vulnerability Manager	Version 7.2.8 p6
Ibm Qradar Vulnerability Manager	Version 7.2.8 p7
Ibm Qradar Vulnerability Manager	Version 7.2.8 p8
Ibm Qradar Vulnerability Manager	Version 7.2.8 p9
Ibm Security Access Manager For Mobile 8.0 Firmware	Version 8.0.0.1
Ibm Security Access Manager For Mobile 8.0 Firmware	Version 8.0.0.2
Ibm Security Access Manager For Mobile 8.0 Firmware	Version 8.0.0.3
Ibm Security Access Manager For Mobile 8.0 Firmware	Version 8.0.0.5
Ibm Security Access Manager For Web 7.0 Firmware	Version 7.0.0.1
Ibm Security Access Manager For Web 7.0 Firmware	Version 7.0.0.2
Ibm Security Access Manager For Web 7.0 Firmware	Version 7.0.0.3
Ibm Security Access Manager For Web 7.0 Firmware	Version 7.0.0.4
Ibm Security Access Manager For Web 7.0 Firmware	Version 7.0.0.5
Ibm Security Access Manager For Web 7.0 Firmware	Version 7.0.0.6
Ibm Security Access Manager For Web 7.0 Firmware	Version 7.0.0.7
Ibm Security Access Manager For Web 7.0 Firmware	Version 7.0.0.8
Ibm Security Access Manager For Web 8.0 Firmware	Version 8.0.0.2
Ibm Security Access Manager For Web 8.0 Firmware	Version 8.0.0.3
Ibm Security Access Manager For Web 8.0 Firmware	Version 8.0.0.5
Ibm Smartcloud Entry Appliance	Version 2.3.0
Ibm Smartcloud Entry Appliance	Version 2.4.0
Ibm Smartcloud Entry Appliance	Version 3.1.0
Ibm Smartcloud Entry Appliance	Version 3.2.0
Ibm Smartcloud Provisioning	Version 2.1.0
Ibm Software Defined Network For Virtual Environments	Before 1.2.1
Ibm Software Defined Network For Virtual Environments	Before 1.2.1
Ibm Software Defined Network For Virtual Environments	Before 1.2.1
Ibm Starter Kit For Cloud	Version 2.2.0
Ibm Workload Deployer	From 3.1.0 to 3.1.0.7

Configuration J

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Storwize V7000 Firmware	From 1.1.0.0 to 1.4.3.5
Ibm Storwize V7000 Firmware	From 1.5.0.0 to 1.5.0.4
Ibm Storwize V7000 Firmware	From 7.2.0.0 to 7.2.0.9
Ibm Storwize V7000 Firmware	From 7.3.0.0 to 7.3.0.7

Running on/with	Platform Versions
Ibm Storwize V7000	All versions

Configuration K

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Storwize V5000 Firmware	From 1.1.0.0 to 7.1.0.11
Ibm Storwize V5000 Firmware	From 7.2.0.0 to 7.2.0.9
Ibm Storwize V5000 Firmware	From 7.3.0.0 to 7.3.0.7

Running on/with	Platform Versions
Ibm Storwize V5000	All versions

Configuration L

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Storwize V3700 Firmware	From 1.1.0.0 to 7.1.0.11
Ibm Storwize V3700 Firmware	From 7.2.0.0 to 7.2.0.9
Ibm Storwize V3700 Firmware	From 7.3.0.0 to 7.3.0.7

Running on/with	Platform Versions
Ibm Storwize V3700	All versions

Configuration M

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Storwize V3500 Firmware	From 1.1.0.0 to 7.1.0.11
Ibm Storwize V3500 Firmware	From 7.2.0.0 to 7.2.0.9
Ibm Storwize V3500 Firmware	From 7.3.0.0 to 7.3.0.7

Running on/with	Platform Versions
Ibm Storwize V3500	All versions

Configuration N

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Flex System V7000 Firmware	From 1.1.0.0 to 7.1.0.11
Ibm Flex System V7000 Firmware	From 7.2.0.0 to 7.2.0.9
Ibm Flex System V7000 Firmware	From 7.3.0.0 to 7.3.0.7

Running on/with	Platform Versions
Ibm Flex System V7000	All versions

Configuration O

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm San Volume Controller Firmware	From 1.1.0.0 to 7.1.0.11
Ibm San Volume Controller Firmware	From 7.2.0.0 to 7.2.0.9
Ibm San Volume Controller Firmware	From 7.3.0.0 to 7.3.0.7

Running on/with	Platform Versions
Ibm San Volume Controller	All versions

Configuration P

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Stn6500 Firmware	From 3.8.0.0 to 3.8.0.07
Ibm Stn6500 Firmware	From 3.9.1.0 to 3.9.1.08
Ibm Stn6500 Firmware	From 4.1.2.0 to 4.1.2.06

Running on/with	Platform Versions
Ibm Stn6500	All versions

Configuration Q

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Stn6800 Firmware	From 3.8.0.0 to 3.8.0.07
Ibm Stn6800 Firmware	From 3.9.1.0 to 3.9.1.08
Ibm Stn6800 Firmware	From 4.1.2.0 to 4.1.2.06

Running on/with	Platform Versions
Ibm Stn6800	All versions

Configuration R

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Stn7800 Firmware	From 3.8.0.0 to 3.8.0.07
Ibm Stn7800 Firmware	From 3.9.1.0 to 3.9.1.08
Ibm Stn7800 Firmware	From 4.1.2.0 to 4.1.2.06

Running on/with	Platform Versions
Ibm Stn7800	All versions

Configuration S

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 10.04
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04

Configuration T

7 vulnerable

Vulnerable Software	Affected Versions
Novell Open Enterprise Server	Version 11.0 sp2
Novell Open Enterprise Server	Version 2.0 sp3
Novell Zenworks Configuration Management	Version 10.3
Novell Zenworks Configuration Management	Version 11.1
Novell Zenworks Configuration Management	Version 11.2
Novell Zenworks Configuration Management	Version 11.3.0
Novell Zenworks Configuration Management	Version 11

Configuration U

1 vulnerable

Vulnerable Software	Affected Versions
Checkpoint Security Gateway	Before r77.30

Configuration V

41 vulnerable

Vulnerable Software	Affected Versions
F5 Big Ip Access Policy Manager	From 10.1.0 to 10.2.4
F5 Big Ip Access Policy Manager	From 11.0.0 to 11.5.1
F5 Big Ip Access Policy Manager	Version 11.6.0
F5 Big Ip Advanced Firewall Manager	From 11.3.0 to 11.5.1
F5 Big Ip Advanced Firewall Manager	Version 11.6.0
F5 Big Ip Analytics	From 11.0.0 to 11.5.1
F5 Big Ip Analytics	Version 11.6.0
F5 Big Ip Application Acceleration Manager	From 11.4.0 to 11.5.1
F5 Big Ip Application Acceleration Manager	Version 11.6.0
F5 Big Ip Application Security Manager	From 10.0.0 to 10.2.4
F5 Big Ip Application Security Manager	From 11.0.0 to 11.5.1
F5 Big Ip Application Security Manager	Version 11.6.0
F5 Big Ip Edge Gateway	From 10.1.0 to 10.2.4
F5 Big Ip Edge Gateway	From 11.0.0 to 11.3.0
F5 Big Ip Global Traffic Manager	From 10.0.0 to 10.2.4
F5 Big Ip Global Traffic Manager	From 11.0.0 to 11.5.1
F5 Big Ip Global Traffic Manager	Version 11.6.0
F5 Big Ip Link Controller	From 10.0.0 to 10.2.4
F5 Big Ip Link Controller	From 11.0.0 to 11.5.1
F5 Big Ip Link Controller	Version 11.6.0
F5 Big Ip Local Traffic Manager	From 10.0.0 to 10.2.4
F5 Big Ip Local Traffic Manager	From 11.0.0 to 11.5.1
F5 Big Ip Local Traffic Manager	Version 11.6.0
F5 Big Ip Policy Enforcement Manager	From 11.3.0 to 11.5.1
F5 Big Ip Policy Enforcement Manager	Version 11.6.0
F5 Big Ip Protocol Security Module	From 10.0.0 to 10.2.4
F5 Big Ip Protocol Security Module	From 11.0.0 to 11.4.1
F5 Big Ip Wan Optimization Manager	From 10.0.0 to 10.2.4
F5 Big Ip Wan Optimization Manager	From 11.0.0 to 11.3.0
F5 Big Ip Webaccelerator	From 10.0.0 to 10.2.4
F5 Big Ip Webaccelerator	From 11.0.0 to 11.3.0
F5 Big Iq Cloud	From 4.0.0 to 4.4.0
F5 Big Iq Device	From 4.2.0 to 4.4.0
F5 Big Iq Security	From 4.0.0 to 4.4.0
F5 Enterprise Manager	From 2.1.0 to 2.3.0
F5 Enterprise Manager	From 3.0.0 to 3.1.1
F5 Traffix Signaling Delivery Controller	From 4.0.0 to 4.0.5
F5 Traffix Signaling Delivery Controller	Version 3.3.2
F5 Traffix Signaling Delivery Controller	Version 3.4.1
F5 Traffix Signaling Delivery Controller	Version 3.5.1
F5 Traffix Signaling Delivery Controller	Version 4.1.0

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
F5 Arx Firmware	From 6.0.0 to 6.4.0

Running on/with	Platform Versions
F5 Arx	All versions

Configuration X

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Citrix Netscaler Sdx Firmware	Before 9.3.67.5r1
Citrix Netscaler Sdx Firmware	From 10 to 10.1.129.11r1
Citrix Netscaler Sdx Firmware	From 10.5 to 10.5.52.11r1

Running on/with	Platform Versions
Citrix Netscaler Sdx	All versions

Configuration Y

1 vulnerable

Vulnerable Software	Affected Versions
Apple Mac Os X	From 10.0.0 to 10.10.0

Configuration Z

10 vulnerable

Vulnerable Software	Affected Versions
Vmware Esx	Version 4.0
Vmware Esx	Version 4.1
Vmware Vcenter Server Appliance	Version 5.0
Vmware Vcenter Server Appliance	Version 5.0 update_1
Vmware Vcenter Server Appliance	Version 5.0 update_2
Vmware Vcenter Server Appliance	Version 5.1
Vmware Vcenter Server Appliance	Version 5.1 update_1
Vmware Vcenter Server Appliance	Version 5.1 update_2
Vmware Vcenter Server Appliance	Version 5.5
Vmware Vcenter Server Appliance	Version 5.5 update_1

Related CWEs

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

References (341)

http://advisories.mageia.org/MGASA-2014-0388.html

Source: security@debian.org

Third Party Advisory

http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html

Source: security@debian.org

Broken LinkThird Party Advisory

http://jvn.jp/en/jp/JVN55667175/index.html

Source: security@debian.org

Vendor Advisory

http://jvndb.jvn.jp/jvndb/JVNDB-2014-000126

Source: security@debian.org

Third Party AdvisoryVDB EntryVendor Advisory

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673

Source: security@debian.org

Third Party Advisory

http://lcamtuf.blogspot.com/2014/09/quick-notes-about-bash-bug-its-impact.html

Source: security@debian.org

ExploitIssue TrackingThird Party Advisory

http://linux.oracle.com/errata/ELSA-2014-1293.html

Source: security@debian.org

Third Party Advisory

http://linux.oracle.com/errata/ELSA-2014-1294.html

Source: security@debian.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00028.html

Source: security@debian.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00029.html

Source: security@debian.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00034.html

Source: security@debian.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00037.html

Source: security@debian.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00040.html

Source: security@debian.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.html

Source: security@debian.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00049.html

Source: security@debian.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00004.html

Source: security@debian.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-updates/2014-10/msg00023.html

Source: security@debian.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-updates/2014-10/msg00025.html

Source: security@debian.org

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=141216207813411&w=2

Source: security@debian.org

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=141216668515282&w=2

Source: security@debian.org

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=141235957116749&w=2

Source: security@debian.org

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=141319209015420&w=2

Source: security@debian.org

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=141330425327438&w=2

Source: security@debian.org

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=141330468527613&w=2

Source: security@debian.org

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=141345648114150&w=2

Source: security@debian.org

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=141383026420882&w=2

Source: security@debian.org

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=141383081521087&w=2

Source: security@debian.org

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=141383138121313&w=2

Source: security@debian.org

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=141383196021590&w=2

Source: security@debian.org

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=141383244821813&w=2

Source: security@debian.org

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=141383304022067&w=2

Source: security@debian.org

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=141383353622268&w=2

Source: security@debian.org

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=141383465822787&w=2

Source: security@debian.org

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=141450491804793&w=2

Source: security@debian.org

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=141576728022234&w=2

Source: security@debian.org

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=141577137423233&w=2

Source: security@debian.org

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=141577241923505&w=2

Source: security@debian.org

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=141577297623641&w=2

Source: security@debian.org

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=141585637922673&w=2

Source: security@debian.org

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=141694386919794&w=2

Source: security@debian.org

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=141879528318582&w=2

Source: security@debian.org

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=142113462216480&w=2

Source: security@debian.org

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=142118135300698&w=2

Source: security@debian.org

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=142358026505815&w=2

Source: security@debian.org

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=142358078406056&w=2

Source: security@debian.org

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=142546741516006&w=2

Source: security@debian.org

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=142719845423222&w=2

Source: security@debian.org

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=142721162228379&w=2

Source: security@debian.org

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=142805027510172&w=2

Source: security@debian.org

Mailing ListThird Party Advisory

http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.html

Source: security@debian.org

ExploitThird Party AdvisoryVDB Entry

http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html

Source: security@debian.org

ExploitThird Party AdvisoryVDB Entry

http://packetstormsecurity.com/files/128573/Apache-mod_cgi-Remote-Command-Execution.html

Source: security@debian.org

ExploitThird Party AdvisoryVDB Entry

http://packetstormsecurity.com/files/137376/IPFire-Bash-Environment-Variable-Injection-Shellshock.html

Source: security@debian.org

ExploitThird Party AdvisoryVDB Entry

http://packetstormsecurity.com/files/161107/SonicWall-SSL-VPN-Shellshock-Remote-Code-Execution.html

Source: security@debian.org

Third Party AdvisoryVDB Entry

http://rhn.redhat.com/errata/RHSA-2014-1293.html

Source: security@debian.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2014-1294.html

Source: security@debian.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2014-1295.html

Source: security@debian.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2014-1354.html

Source: security@debian.org

Third Party Advisory

http://seclists.org/fulldisclosure/2014/Oct/0

Source: security@debian.org

Mailing ListThird Party Advisory

http://secunia.com/advisories/58200

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/59272

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/59737

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/59907

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/60024

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/60034

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/60044

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/60055

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/60063

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/60193

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/60325

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/60433

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/60947

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/61065

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/61128

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/61129

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/61188

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/61283

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/61287

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/61291

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/61312

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/61313

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/61328

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/61442

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/61471

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/61485

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/61503

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/61542

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/61547

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/61550

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/61552

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/61565

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/61603

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/61633

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/61641

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/61643

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/61654

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/61676

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/61700

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/61703

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/61711

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/61715

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/61780

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/61816

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/61855

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/61857

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/61873

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/62228

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/62312

Source: security@debian.org

Broken LinkThird Party Advisory

http://secunia.com/advisories/62343

Source: security@debian.org

Broken LinkThird Party Advisory

http://support.apple.com/kb/HT6495

Source: security@debian.org

Third Party Advisory

http://support.novell.com/security/cve/CVE-2014-6271.html

Source: security@debian.org

Third Party Advisory

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bash

Source: security@debian.org

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=isg3T1021272

Source: security@debian.org

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279

Source: security@debian.org

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=isg3T1021361

Source: security@debian.org

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879

Source: security@debian.org

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897

Source: security@debian.org

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898

Source: security@debian.org

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915

Source: security@debian.org

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21685541

Source: security@debian.org

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21685604

Source: security@debian.org

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21685733

Source: security@debian.org

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21685749

Source: security@debian.org

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21685914

Source: security@debian.org

Broken LinkThird Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21686084

Source: security@debian.org

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21686131

Source: security@debian.org

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21686246

Source: security@debian.org

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21686445

Source: security@debian.org

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21686447

Source: security@debian.org

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21686479

Source: security@debian.org

Broken LinkThird Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21686494

Source: security@debian.org

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21687079

Source: security@debian.org

Third Party Advisory

http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315

Source: security@debian.org

Broken LinkThird Party Advisory

http://www.debian.org/security/2014/dsa-3032

Source: security@debian.org

Mailing ListThird Party Advisory

http://www.kb.cert.org/vuls/id/252743

Source: security@debian.org

Third Party AdvisoryUS Government Resource

http://www.mandriva.com/security/advisories?name=MDVSA-2015:164

Source: security@debian.org

Broken LinkThird Party Advisory

http://www.novell.com/support/kb/doc.php?id=7015701

Source: security@debian.org

Third Party Advisory

http://www.novell.com/support/kb/doc.php?id=7015721

Source: security@debian.org

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html

Source: security@debian.org

Third Party Advisory

http://www.qnap.com/i/en/support/con_show.php?cid=61

Source: security@debian.org

Third Party Advisory

http://www.securityfocus.com/archive/1/533593/100/0/threaded

Source: security@debian.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/70103

Source: security@debian.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-2362-1

Source: security@debian.org

Third Party Advisory

http://www.us-cert.gov/ncas/alerts/TA14-268A

Source: security@debian.org

Third Party AdvisoryUS Government Resource

http://www.vmware.com/security/advisories/VMSA-2014-0010.html

Source: security@debian.org

Third Party Advisory

http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0

Source: security@debian.org

Broken LinkThird Party Advisory

https://access.redhat.com/articles/1200223

Source: security@debian.org

ExploitThird Party Advisory

https://access.redhat.com/node/1200223

Source: security@debian.org

ExploitThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1141597

Source: security@debian.org

Issue TrackingPatch

https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes

Source: security@debian.org

Broken LinkThird Party Advisory

https://kb.bluecoat.com/index?page=content&id=SA82

Source: security@debian.org

Broken LinkThird Party Advisory

https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10648

Source: security@debian.org

Third Party Advisory

https://kc.mcafee.com/corporate/index?page=content&id=SB10085

Source: security@debian.org

Broken LinkThird Party Advisory

https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/

Source: security@debian.org

ExploitThird Party Advisory

https://support.apple.com/kb/HT6535

Source: security@debian.org

Third Party Advisory

https://support.citrix.com/article/CTX200217

Source: security@debian.org

Third Party Advisory

https://support.citrix.com/article/CTX200223

Source: security@debian.org

Permissions Required

https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html

Source: security@debian.org

Third Party Advisory

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04497075

Source: security@debian.org

Third Party Advisory

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04518183

Source: security@debian.org

Broken LinkThird Party Advisory

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk102673&src=securityAlerts

Source: security@debian.org

Third Party Advisory

https://www.arista.com/en/support/advisories-notices/security-advisories/1008-security-advisory-0006

Source: security@debian.org

Third Party Advisory

https://www.exploit-db.com/exploits/34879/

Source: security@debian.org

ExploitThird Party AdvisoryVDB Entry

https://www.exploit-db.com/exploits/37816/

Source: security@debian.org

ExploitThird Party AdvisoryVDB Entry

https://www.exploit-db.com/exploits/38849/

Source: security@debian.org

ExploitThird Party AdvisoryVDB Entry

https://www.exploit-db.com/exploits/39918/

Source: security@debian.org

ExploitThird Party AdvisoryVDB Entry

https://www.exploit-db.com/exploits/40619/

Source: security@debian.org

ExploitThird Party AdvisoryVDB Entry

https://www.exploit-db.com/exploits/40938/

Source: security@debian.org

ExploitThird Party AdvisoryVDB Entry

https://www.exploit-db.com/exploits/42938/

Source: security@debian.org

ExploitThird Party AdvisoryVDB Entry

https://www.suse.com/support/shellshock/

Source: security@debian.org

Third Party Advisory

http://advisories.mageia.org/MGASA-2014-0388.html