CVE-2014-7169

Producto

GNU / Bourne-Again Shell (Bash)

Vulnerabilidad

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

Añadido a KEV

28 ene 2022

Remediar antes de

28 jul 2022

Uso conocido en ransomware

No

Descripción resumida

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271.

Acción requerida

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2014-7169