Skip to content

01 Record

CVE-2014-6271

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as

CriticalKEVPUBLISHEDCNA: debian

CNA base score9.8 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

02 Description

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as

03 Exploitation and scoring

Exploitation

Exploited in the wild. Listed in the CISA Known Exploited Vulnerabilities catalog on 2022-01-28. Federal remediation due 2022-07-28.

SSVC decision

ExploitationactiveCISA reports credible evidence of active exploitation.
AutomatableyesAn attacker can reliably automate reconnaissance through exploitation, so this scales.
Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

99.99% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 99.9% of scored records. A rank, not a probability.

NVD base score

9.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Analyzed. NVD last modified this record on 2026-06-17.

Red Hat severity

Critical. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2014-09-24 18:00Z12 YR AGO

Last updated

2025-10-22 00:05Z1 YR AGO

Reserved

2014-09-09

Assigning CNA

debian

Record state

PUBLISHED

Severity

Critical (CVSS 9.8)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Base

Data version

5.1

Document digest

10368313161c8b5dcaaca40af14f8c1cff9b0656acd2cdb3fed040f223c3947d

05 Affected products

VendorProductVersionsPlatforms

applemac_os_xNot specified—

aristaeosNot specified—

canonicalubuntu_linuxNot specified—

checkpointsecurity_gatewayNot specified—

citrixnetscaler_sdxNot specified—

citrixnetscaler_sdx_firmwareNot specified—

debiandebian_linuxNot specified—

f5arxNot specified—

f5arx_firmwareNot specified—

f5big-ip_access_policy_managerNot specified—

f5big-ip_advanced_firewall_managerNot specified—

f5big-ip_analyticsNot specified—

f5big-ip_application_acceleration_managerNot specified—

f5big-ip_application_security_managerNot specified—

f5big-ip_edge_gatewayNot specified—

f5big-ip_global_traffic_managerNot specified—

f5big-ip_link_controllerNot specified—

f5big-ip_local_traffic_managerNot specified—

f5big-ip_policy_enforcement_managerNot specified—

f5big-ip_protocol_security_moduleNot specified—

f5big-ip_wan_optimization_managerNot specified—

f5big-ip_webacceleratorNot specified—

f5big-iq_cloudNot specified—

f5big-iq_deviceNot specified—

f5big-iq_securityNot specified—

f5enterprise_managerNot specified—

f5traffix_signaling_delivery_controllerNot specified—

gnubashNot specified—

ibmflex_system_v7000Not specified—

ibmflex_system_v7000_firmwareNot specified—

ibminfosphere_guardium_database_activity_monitoringNot specified—

ibmpureapplication_systemNot specified—

ibmqradar_risk_managerNot specified—

ibmqradar_security_information_and_event_managerNot specified—

ibmqradar_vulnerability_managerNot specified—

ibmsan_volume_controllerNot specified—

ibmsan_volume_controller_firmwareNot specified—

ibmsecurity_access_manager_for_mobile_8.0_firmwareNot specified—

ibmsecurity_access_manager_for_web_7.0_firmwareNot specified—

ibmsecurity_access_manager_for_web_8.0_firmwareNot specified—

ibmsmartcloud_entry_applianceNot specified—

ibmsmartcloud_provisioningNot specified—

ibmsoftware_defined_network_for_virtual_environmentsNot specified—

ibmstarter_kit_for_cloudNot specified—

ibmstn6500Not specified—

ibmstn6500_firmwareNot specified—

ibmstn6800Not specified—

ibmstn6800_firmwareNot specified—

ibmstn7800Not specified—

ibmstn7800_firmwareNot specified—

ibmstorwize_v3500Not specified—

ibmstorwize_v3500_firmwareNot specified—

ibmstorwize_v3700Not specified—

ibmstorwize_v3700_firmwareNot specified—

ibmstorwize_v5000Not specified—

ibmstorwize_v5000_firmwareNot specified—

ibmstorwize_v7000Not specified—

ibmstorwize_v7000_firmwareNot specified—

ibmworkload_deployerNot specified—

mageiamageiaNot specified—

30 further entries not shown. The complete list is in the raw JSON document.

06 References

www.exploit-db.com37816https://www.exploit-db.com/exploits/37816/exploitx_refsource_EXPLOIT-DB
packetstormsecurity.comhttp://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.htmlx_refsource_MISC
lists.opensuse.orgSUSE-SU-2014:1223http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00034.htmlvendor-advisoryx_refsource_SUSE
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897x_refsource_CONFIRM
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21685749x_refsource_CONFIRM
marc.infoHPSBMU03165http://marc.info/?l=bugtraq&m=141577137423233&w=2vendor-advisoryx_refsource_HP
marc.infoSSRT101816http://marc.info/?l=bugtraq&m=142719845423222&w=2vendor-advisoryx_refsource_HP
www.exploit-db.com39918https://www.exploit-db.com/exploits/39918/exploitx_refsource_EXPLOIT-DB
marc.infoHPSBHF03119http://marc.info/?l=bugtraq&m=141216668515282&w=2vendor-advisoryx_refsource_HP
rhn.redhat.comRHSA-2014:1295http://rhn.redhat.com/errata/RHSA-2014-1295.htmlvendor-advisoryx_refsource_REDHAT
lists.opensuse.orgopenSUSE-SU-2014:1226http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00037.htmlvendor-advisoryx_refsource_SUSE
securityblog.redhat.comhttps://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/x_refsource_CONFIRM
supportcenter.checkpoint.comhttps://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk102673&src=securityAlertsx_refsource_CONFIRM
marc.infoHPSBST03131http://marc.info/?l=bugtraq&m=141383138121313&w=2vendor-advisoryx_refsource_HP
marc.infoSSRT101819http://marc.info/?l=bugtraq&m=142721162228379&w=2vendor-advisoryx_refsource_HP
www.securityfocus.com20141001 NEW VMSA-2014-0010 - VMware product updates address critical Bash security vulnerabilitieshttp://www.securityfocus.com/archive/1/533593/100/0/threadedmailing-listx_refsource_BUGTRAQ
marc.infoHPSBMU03245http://marc.info/?l=bugtraq&m=142358026505815&w=2vendor-advisoryx_refsource_HP
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21686084x_refsource_CONFIRM
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21686479x_refsource_CONFIRM
secunia.com61188http://secunia.com/advisories/61188third-party-advisoryx_refsource_SECUNIA
www.websense.comhttp://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0x_refsource_CONFIRM
jvn.jpJVN#55667175http://jvn.jp/en/jp/JVN55667175/index.htmlthird-party-advisoryx_refsource_JVN
secunia.com61676http://secunia.com/advisories/61676third-party-advisoryx_refsource_SECUNIA
www.exploit-db.com40619https://www.exploit-db.com/exploits/40619/exploitx_refsource_EXPLOIT-DB
lists.opensuse.orgopenSUSE-SU-2014:1254http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.htmlvendor-advisoryx_refsource_SUSE
secunia.com60433http://secunia.com/advisories/60433third-party-advisoryx_refsource_SECUNIA
www.exploit-db.com38849https://www.exploit-db.com/exploits/38849/exploitx_refsource_EXPLOIT-DB
marc.infoHPSBMU03143http://marc.info/?l=bugtraq&m=141383026420882&w=2vendor-advisoryx_refsource_HP
marc.infoHPSBMU03182http://marc.info/?l=bugtraq&m=141585637922673&w=2vendor-advisoryx_refsource_HP
kb.juniper.nethttp://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673x_refsource_CONFIRM
lists.opensuse.orgSUSE-SU-2014:1260http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00049.htmlvendor-advisoryx_refsource_SUSE
marc.infoHPSBST03155http://marc.info/?l=bugtraq&m=141576728022234&w=2vendor-advisoryx_refsource_HP
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21685541x_refsource_CONFIRM
secunia.com61715http://secunia.com/advisories/61715third-party-advisoryx_refsource_SECUNIA
www.oracle.comhttp://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.htmlx_refsource_CONFIRM
secunia.com61816http://secunia.com/advisories/61816third-party-advisoryx_refsource_SECUNIA
lists.opensuse.orgopenSUSE-SU-2014:1310http://lists.opensuse.org/opensuse-updates/2014-10/msg00025.htmlvendor-advisoryx_refsource_SUSE
secunia.com61442http://secunia.com/advisories/61442third-party-advisoryx_refsource_SECUNIA
marc.infoHPSBMU03246http://marc.info/?l=bugtraq&m=142358078406056&w=2vendor-advisoryx_refsource_HP
marc.infoHPSBST03195http://marc.info/?l=bugtraq&m=142805027510172&w=2vendor-advisoryx_refsource_HP
secunia.com61283http://secunia.com/advisories/61283third-party-advisoryx_refsource_SECUNIA
marc.infoSSRT101711http://marc.info/?l=bugtraq&m=142113462216480&w=2vendor-advisoryx_refsource_HP
www.ubuntu.comUSN-2362-1http://www.ubuntu.com/usn/USN-2362-1vendor-advisoryx_refsource_UBUNTU
kc.mcafee.comhttps://kc.mcafee.com/corporate/index?page=content&id=SB10085x_refsource_CONFIRM
lists.opensuse.orgopenSUSE-SU-2014:1308http://lists.opensuse.org/opensuse-updates/2014-10/msg00023.htmlvendor-advisoryx_refsource_SUSE
secunia.com61654http://secunia.com/advisories/61654third-party-advisoryx_refsource_SECUNIA
secunia.com61542http://secunia.com/advisories/61542third-party-advisoryx_refsource_SECUNIA
www.novell.comhttp://www.novell.com/support/kb/doc.php?id=7015701x_refsource_CONFIRM
www-947.ibm.comhttp://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315x_refsource_CONFIRM
secunia.com62312http://secunia.com/advisories/62312third-party-advisoryx_refsource_SECUNIA
secunia.com59272http://secunia.com/advisories/59272third-party-advisoryx_refsource_SECUNIA
marc.infoHPSBST03122http://marc.info/?l=bugtraq&m=141319209015420&w=2vendor-advisoryx_refsource_HP
support.f5.comhttps://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.htmlx_refsource_CONFIRM
marc.infoHPSBMU03217http://marc.info/?l=bugtraq&m=141879528318582&w=2vendor-advisoryx_refsource_HP
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21685604x_refsource_CONFIRM
marc.infoSSRT101868http://marc.info/?l=bugtraq&m=142118135300698&w=2vendor-advisoryx_refsource_HP
secunia.com61703http://secunia.com/advisories/61703third-party-advisoryx_refsource_SECUNIA
support.apple.comhttp://support.apple.com/kb/HT6495x_refsource_CONFIRM
www.kb.cert.orgVU#252743http://www.kb.cert.org/vuls/id/252743third-party-advisoryx_refsource_CERT-VN
secunia.com61065http://secunia.com/advisories/61065third-party-advisoryx_refsource_SECUNIA
lists.opensuse.orgSUSE-SU-2014:1213http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00029.htmlvendor-advisoryx_refsource_SUSE
marc.infoHPSBST03129http://marc.info/?l=bugtraq&m=141383196021590&w=2vendor-advisoryx_refsource_HP
marc.infoHPSBMU03144http://marc.info/?l=bugtraq&m=141383081521087&w=2vendor-advisoryx_refsource_HP
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21686445x_refsource_CONFIRM
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21686131x_refsource_CONFIRM
www.securityfocus.com70103http://www.securityfocus.com/bid/70103vdb-entryx_refsource_BID
jvndb.jvn.jpJVNDB-2014-000126http://jvndb.jvn.jp/jvndb/JVNDB-2014-000126third-party-advisoryx_refsource_JVNDB
www.us-cert.govTA14-268Ahttp://www.us-cert.gov/ncas/alerts/TA14-268Athird-party-advisoryx_refsource_CERT
lists.opensuse.orgSUSE-SU-2014:1212http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00028.htmlvendor-advisoryx_refsource_SUSE
secunia.com61641http://secunia.com/advisories/61641third-party-advisoryx_refsource_SECUNIA
kb.juniper.nethttps://kb.juniper.net/InfoCenter/index?page=content&id=JSA10648x_refsource_CONFIRM
access.redhat.comhttps://access.redhat.com/node/1200223x_refsource_CONFIRM
packetstormsecurity.comhttp://packetstormsecurity.com/files/137376/IPFire-Bash-Environment-Variable-Injection-Shellshock.htmlx_refsource_MISC
lists.opensuse.orgSUSE-SU-2014:1287http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00004.htmlvendor-advisoryx_refsource_SUSE
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898x_refsource_CONFIRM
archives.neohapsis.comAPPLE-SA-2014-10-16-1http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.htmlvendor-advisoryx_refsource_APPLE
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21685914x_refsource_CONFIRM
seclists.org20141001 FW: NEW VMSA-2014-0010 - VMware product updates address critical Bash security vulnerabilitieshttp://seclists.org/fulldisclosure/2014/Oct/0mailing-listx_refsource_FULLDISC
www.mandriva.comMDVSA-2015:164http://www.mandriva.com/security/advisories?name=MDVSA-2015:164vendor-advisoryx_refsource_MANDRIVA
rhn.redhat.comRHSA-2014:1293http://rhn.redhat.com/errata/RHSA-2014-1293.htmlvendor-advisoryx_refsource_REDHAT
support.hpe.comhttps://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04497075x_refsource_CONFIRM
lists.opensuse.orgopenSUSE-SU-2014:1238http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00040.htmlvendor-advisoryx_refsource_SUSE
secunia.com60325http://secunia.com/advisories/60325third-party-advisoryx_refsource_SECUNIA
help.ecostruxureit.comhttps://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixesx_refsource_CONFIRM
secunia.com60024http://secunia.com/advisories/60024third-party-advisoryx_refsource_SECUNIA
packetstormsecurity.comhttp://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.htmlx_refsource_MISC
www.exploit-db.com34879https://www.exploit-db.com/exploits/34879/exploitx_refsource_EXPLOIT-DB
access.redhat.comhttps://access.redhat.com/articles/1200223x_refsource_CONFIRM
secunia.com62343http://secunia.com/advisories/62343third-party-advisoryx_refsource_SECUNIA
secunia.com61565http://secunia.com/advisories/61565third-party-advisoryx_refsource_SECUNIA
www.suse.comhttps://www.suse.com/support/shellshock/x_refsource_CONFIRM
marc.infoHPSBST03157http://marc.info/?l=bugtraq&m=141450491804793&w=2vendor-advisoryx_refsource_HP
secunia.com61313http://secunia.com/advisories/61313third-party-advisoryx_refsource_SECUNIA
secunia.com61873http://secunia.com/advisories/61873third-party-advisoryx_refsource_SECUNIA
secunia.com61485http://secunia.com/advisories/61485third-party-advisoryx_refsource_SECUNIA
secunia.com60947http://secunia.com/advisories/60947third-party-advisoryx_refsource_SECUNIA
support.hpe.comhttps://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04518183x_refsource_CONFIRM
support.apple.comhttps://support.apple.com/kb/HT6535x_refsource_CONFIRM
marc.infoHPSBST03154http://marc.info/?l=bugtraq&m=141577297623641&w=2vendor-advisoryx_refsource_HP
marc.infoHPSBST03265http://marc.info/?l=bugtraq&m=142546741516006&w=2vendor-advisoryx_refsource_HP
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=isg3T1021272x_refsource_CONFIRM
marc.infoHPSBGN03142http://marc.info/?l=bugtraq&m=141383244821813&w=2vendor-advisoryx_refsource_HP
secunia.com61312http://secunia.com/advisories/61312third-party-advisoryx_refsource_SECUNIA
secunia.com60193http://secunia.com/advisories/60193third-party-advisoryx_refsource_SECUNIA
www.vmware.comhttp://www.vmware.com/security/advisories/VMSA-2014-0010.htmlx_refsource_CONFIRM
linux.oracle.comhttp://linux.oracle.com/errata/ELSA-2014-1294.htmlx_refsource_CONFIRM
secunia.com60063http://secunia.com/advisories/60063third-party-advisoryx_refsource_SECUNIA
packetstormsecurity.comhttp://packetstormsecurity.com/files/128573/Apache-mod_cgi-Remote-Command-Execution.htmlx_refsource_MISC
secunia.com60034http://secunia.com/advisories/60034third-party-advisoryx_refsource_SECUNIA
marc.infoHPSBMU03133http://marc.info/?l=bugtraq&m=141330425327438&w=2vendor-advisoryx_refsource_HP
lcamtuf.blogspot.comhttp://lcamtuf.blogspot.com/2014/09/quick-notes-about-bash-bug-its-impact.htmlx_refsource_MISC
secunia.com59907http://secunia.com/advisories/59907third-party-advisoryx_refsource_SECUNIA
secunia.com58200http://secunia.com/advisories/58200third-party-advisoryx_refsource_SECUNIA
marc.infoHPSBST03181http://marc.info/?l=bugtraq&m=141577241923505&w=2vendor-advisoryx_refsource_HP
secunia.com61643http://secunia.com/advisories/61643third-party-advisoryx_refsource_SECUNIA
www.novell.comhttp://www.novell.com/support/kb/doc.php?id=7015721x_refsource_CONFIRM
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21687079x_refsource_CONFIRM
secunia.com61503http://secunia.com/advisories/61503third-party-advisoryx_refsource_SECUNIA
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21686246x_refsource_CONFIRM
rhn.redhat.comRHSA-2014:1354http://rhn.redhat.com/errata/RHSA-2014-1354.htmlvendor-advisoryx_refsource_REDHAT
www.exploit-db.com40938https://www.exploit-db.com/exploits/40938/exploitx_refsource_EXPLOIT-DB
marc.infoHPSBGN03117http://marc.info/?l=bugtraq&m=141216207813411&w=2vendor-advisoryx_refsource_HP
support.novell.comhttp://support.novell.com/security/cve/CVE-2014-6271.htmlx_refsource_CONFIRM
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915x_refsource_CONFIRM
secunia.com61547http://secunia.com/advisories/61547third-party-advisoryx_refsource_SECUNIA
marc.infoHPSBHF03145http://marc.info/?l=bugtraq&m=141383465822787&w=2vendor-advisoryx_refsource_HP
www.qnap.comhttp://www.qnap.com/i/en/support/con_show.php?cid=61x_refsource_CONFIRM
marc.infoHPSBST03148http://marc.info/?l=bugtraq&m=141694386919794&w=2vendor-advisoryx_refsource_HP
secunia.com61552http://secunia.com/advisories/61552third-party-advisoryx_refsource_SECUNIA
secunia.com61780http://secunia.com/advisories/61780third-party-advisoryx_refsource_SECUNIA
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=isg3T1021279x_refsource_CONFIRM
support.citrix.comhttps://support.citrix.com/article/CTX200223x_refsource_CONFIRM
www.debian.orgDSA-3032http://www.debian.org/security/2014/dsa-3032vendor-advisoryx_refsource_DEBIAN
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21686447x_refsource_CONFIRM
secunia.com62228http://secunia.com/advisories/62228third-party-advisoryx_refsource_SECUNIA
marc.infoHPSBGN03138http://marc.info/?l=bugtraq&m=141330468527613&w=2vendor-advisoryx_refsource_HP
secunia.com61855http://secunia.com/advisories/61855third-party-advisoryx_refsource_SECUNIA
marc.infoHPSBHF03124http://marc.info/?l=bugtraq&m=141235957116749&w=2vendor-advisoryx_refsource_HP
secunia.com60044http://secunia.com/advisories/60044third-party-advisoryx_refsource_SECUNIA
secunia.com61291http://secunia.com/advisories/61291third-party-advisoryx_refsource_SECUNIA
rhn.redhat.comRHSA-2014:1294http://rhn.redhat.com/errata/RHSA-2014-1294.htmlvendor-advisoryx_refsource_REDHAT
marc.infoHPSBHF03125http://marc.info/?l=bugtraq&m=141345648114150&w=2vendor-advisoryx_refsource_HP
secunia.com59737http://secunia.com/advisories/59737third-party-advisoryx_refsource_SECUNIA
secunia.com61287http://secunia.com/advisories/61287third-party-advisoryx_refsource_SECUNIA
marc.infoHPSBHF03146http://marc.info/?l=bugtraq&m=141383353622268&w=2vendor-advisoryx_refsource_HP
bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=1141597x_refsource_CONFIRM
secunia.com61711http://secunia.com/advisories/61711third-party-advisoryx_refsource_SECUNIA
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=isg3T1021361x_refsource_CONFIRM
marc.infoHPSBGN03141http://marc.info/?l=bugtraq&m=141383304022067&w=2vendor-advisoryx_refsource_HP
advisories.mageia.orghttp://advisories.mageia.org/MGASA-2014-0388.htmlx_refsource_CONFIRM
secunia.com61128http://secunia.com/advisories/61128third-party-advisoryx_refsource_SECUNIA
support.citrix.comhttps://support.citrix.com/article/CTX200217x_refsource_CONFIRM
secunia.com61471http://secunia.com/advisories/61471third-party-advisoryx_refsource_SECUNIA
secunia.com60055http://secunia.com/advisories/60055third-party-advisoryx_refsource_SECUNIA
tools.cisco.com20140926 GNU Bash Environmental Variable Command Injection Vulnerabilityhttp://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bashvendor-advisoryx_refsource_CISCO
secunia.com61550http://secunia.com/advisories/61550third-party-advisoryx_refsource_SECUNIA
secunia.com61633http://secunia.com/advisories/61633third-party-advisoryx_refsource_SECUNIA
linux.oracle.comhttp://linux.oracle.com/errata/ELSA-2014-1293.htmlx_refsource_CONFIRM
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21686494x_refsource_CONFIRM
kb.bluecoat.comhttps://kb.bluecoat.com/index?page=content&id=SA82x_refsource_CONFIRM
secunia.com61328http://secunia.com/advisories/61328third-party-advisoryx_refsource_SECUNIA
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21685733x_refsource_CONFIRM
www.exploit-db.com42938https://www.exploit-db.com/exploits/42938/exploitx_refsource_EXPLOIT-DB
secunia.com61129http://secunia.com/advisories/61129third-party-advisoryx_refsource_SECUNIA
secunia.com61700http://secunia.com/advisories/61700third-party-advisoryx_refsource_SECUNIA
secunia.com61603http://secunia.com/advisories/61603third-party-advisoryx_refsource_SECUNIA
secunia.com61857http://secunia.com/advisories/61857third-party-advisoryx_refsource_SECUNIA
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879x_refsource_CONFIRM
packetstormsecurity.comhttp://packetstormsecurity.com/files/161107/SonicWall-SSL-VPN-Shellshock-Remote-Code-Execution.htmlx_refsource_MISC
www.arista.comhttps://www.arista.com/en/support/advisories-notices/security-advisories/1008-security-advisory-0006x_refsource_MISC
www.cisa.govhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-6271government-resource

07 Fixed in

Debian 12

bash
Fixed in 4.3-9.1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

bash
Fixed in 4.3-9.1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

bash
Fixed in 4.3-9.1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Ubuntu 14.04 LTS

bash
Fixed in 4.3-7ubuntu1.1

Source: Ubuntu, Canonical Ltd. Licensed under CC BY-SA 4.0. Received through OSV.dev. Reformatted by exploit.cc.

A release or ecosystem missing from this list has no record here. It may be unaffected or not covered by the source. Source notices and licences.