coldbraid

CVE-2014-6271 GNU Bourne-Again Shell (Bash)

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.

CVSS
not scored

CWE-78

On CISA’s exploited list

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

Added
2022-01-28
Federal patch deadline
2022-07-28
Ransomware use
not known