GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

Published Jan 28, 2022·Updated Jan 28, 2022

NVD Description

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271.

Public Exploits & PoCs3 found

PoC: bash-shellshock

DEPRECATED: Chef cookbook to audit & remediate "Shellshock" (BASH-CVE-2014-7169)

PoC: shellshock-poc-cve-2014-7169

This contains the Dockerfile for building and reproduing shellshock

PoC: SHELL-SCHOCK

CVE-2014-7169 Shell Shock

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Start monitoring free