CVE-2014-6271

lastmod 2023-08-11created 2015-01-302 edits

We are informing you that an arbitrary code execution vulnerability (CVE-2014-6271) has been found in GNU Bash (Bourne Again SHell), which is used in Linux-family operating systems.

This vulnerability allows arbitrary malware to be executed remotely, in which case the OS and important data may fall into the attacker's hands.

Update

• CentOS: http://lists.centos.org/pipermail/centos/2014-September/146154.html
• Debian: https://www.debian.org/security/2014/dsa-3035
• Redhat: https://rhn.redhat.com/errata/RHSA-2014-1306.html
• Ubuntu: http://www.ubuntu.com/usn/usn-2363-2/
• Fedora: http://fedoramagazine.org/shellshock-update-bash-packages-that-resolve-cve-2014-6271-and-cve-2014-7169-available/