CVE-2014-6271

KEV

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

Vendor / Project: GNU
Product: Bourne-Again Shell (Bash)
Date added: Jan 28, 2022
Due date: Jul 28, 2022
Known ransomware use: Unknown
CWEs: CWE-78

Description

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2014-6271