CVE-2014-6277 | AttackerKB

Description

GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized memory access, and untrusted-pointer read and write operations) via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271 and CVE-2014-7169.

Add Assessment

No one has assessed this topic. Be the first to add your voice to the community.

CVSS V3 Severity and Metrics

Data provided by the National Vulnerability Database (NVD)

Base Score:

None

Impact Score:

Unknown

Exploitability Score:

Unknown

Vector:

Attack Vector (AV):

Unknown

Attack Complexity (AC):

Unknown

Privileges Required (PR):

Unknown

User Interaction (UI):

Unknown

Scope (S):

Unknown

Confidentiality (C):

Unknown

Integrity (I):

Unknown

Availability (A):

Unknown

Exploited in the Wild

Reported by:

gwillcox-r7 indicated source as Government or Industry Alert (https://www.cisa.gov/known-exploited-vulnerabilities-catalog)

Reported: June 14, 2022 9:36pm UTC (2 years ago)

References

Canonical

CVE-2014-6277 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6277)

Advisory

http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897

http://www-01.ibm.com/support/docview.wss?uid=swg21685749

HPSBMU03165 (http://marc.info?l=bugtraq&m=141577137423233&w=2)

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk102673&src=securityAlerts

http://linux.oracle.com/errata/ELSA-2014-3093

SSRT101819 (http://marc.info?l=bugtraq&m=142721162228379&w=2)

HPSBMU03245 (http://marc.info?l=bugtraq&m=142358026505815&w=2)

http://www-01.ibm.com/support/docview.wss?uid=swg21686479

JVN#55667175 (http://jvn.jp/en/jp/JVN55667175/index.html)

SECUNIA-60433 (http://secunia.com/advisories/60433)

HPSBMU03143 (http://marc.info?l=bugtraq&m=141383026420882&w=2)

HPSBMU03182 (http://marc.info?l=bugtraq&m=141585637922673&w=2)

HPSBST03155 (http://marc.info?l=bugtraq&m=141576728022234&w=2)

http://www-01.ibm.com/support/docview.wss?uid=swg21685541

http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html

SECUNIA-61816 (http://secunia.com/advisories/61816)

http://lists.opensuse.org/opensuse-updates/2014-10/msg00025.html

SECUNIA-61442 (http://secunia.com/advisories/61442)

HPSBMU03246 (http://marc.info?l=bugtraq&m=142358078406056&w=2)

SECUNIA-61283 (http://secunia.com/advisories/61283)

APPLE-SA-2015-09-30-3 (http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html)

https://kc.mcafee.com/corporate/index?page=content&id=SB10085

SECUNIA-61654 (http://secunia.com/advisories/61654)

USN-2380-1 (http://www.ubuntu.com/usn/USN-2380-1)

http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315

SECUNIA-62312 (http://secunia.com/advisories/62312)

https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html

HPSBMU03217 (http://marc.info?l=bugtraq&m=141879528318582&w=2)

http://www-01.ibm.com/support/docview.wss?uid=swg21685604

SSRT101868 (http://marc.info?l=bugtraq&m=142118135300698&w=2)

SECUNIA-61703 (http://secunia.com/advisories/61703)

SECUNIA-61065 (http://secunia.com/advisories/61065)

HPSBST03129 (http://marc.info?l=bugtraq&m=141383196021590&w=2)

HPSBMU03144 (http://marc.info?l=bugtraq&m=141383081521087&w=2)

http://www-01.ibm.com/support/docview.wss?uid=swg21686445

http://www-01.ibm.com/support/docview.wss?uid=swg21686131

JVNDB-2014-000126 (http://jvndb.jvn.jp/jvndb/JVNDB-2014-000126)

SECUNIA-61641 (http://secunia.com/advisories/61641)

https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10648

http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00004.html

http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898

http://www-01.ibm.com/support/docview.wss?uid=swg21685914

http://www.mandriva.com/security/advisories?name=MDVSA-2015:164

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04497075

https://support.apple.com/HT205267

SECUNIA-60325 (http://secunia.com/advisories/60325)

SECUNIA-60024 (http://secunia.com/advisories/60024)

20140926 GNU Bash Environmental Variable Command Injection Vulnerability (http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bash)

SECUNIA-62343 (http://secunia.com/advisories/62343)

SECUNIA-61565 (http://secunia.com/advisories/61565)

https://www.suse.com/support/shellshock

http://support.apple.com/HT204244

HPSBST03157 (http://marc.info?l=bugtraq&m=141450491804793&w=2)

SECUNIA-61313 (http://secunia.com/advisories/61313)

SSRT101830 (http://marc.info?l=bugtraq&m=142289270617409&w=2)

SECUNIA-61485 (http://secunia.com/advisories/61485)

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04518183

HPSBST03154 (http://marc.info?l=bugtraq&m=141577297623641&w=2)

http://www-01.ibm.com/support/docview.wss?uid=isg3T1021272

HPSBGN03142 (http://marc.info?l=bugtraq&m=141383244821813&w=2)

SECUNIA-61312 (http://secunia.com/advisories/61312)

http://linux.oracle.com/errata/ELSA-2014-3094

SECUNIA-60193 (http://secunia.com/advisories/60193)

http://www.vmware.com/security/advisories/VMSA-2014-0010.html

SECUNIA-60063 (http://secunia.com/advisories/60063)

SECUNIA-60034 (http://secunia.com/advisories/60034)

SECUNIA-59907 (http://secunia.com/advisories/59907)

SECUNIA-58200 (http://secunia.com/advisories/58200)

HPSBST03181 (http://marc.info?l=bugtraq&m=141577241923505&w=2)

SECUNIA-61643 (http://secunia.com/advisories/61643)

http://www.novell.com/support/kb/doc.php?id=7015721

http://www-01.ibm.com/support/docview.wss?uid=swg21687079

SECUNIA-61503 (http://secunia.com/advisories/61503)

http://www-01.ibm.com/support/docview.wss?uid=swg21686246

http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915

HPSBHF03145 (http://marc.info?l=bugtraq&m=141383465822787&w=2)

http://www.qnap.com/i/en/support/con_show.php?cid=61

SECUNIA-61552 (http://secunia.com/advisories/61552)

SECUNIA-61780 (http://secunia.com/advisories/61780)

http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279

https://support.citrix.com/article/CTX200223

HPSBGN03138 (http://marc.info?l=bugtraq&m=141330468527613&w=2)

SECUNIA-60044 (http://secunia.com/advisories/60044)

SECUNIA-61291 (http://secunia.com/advisories/61291)

HPSBHF03125 (http://marc.info?l=bugtraq&m=141345648114150&w=2)

SECUNIA-61287 (http://secunia.com/advisories/61287)

HPSBHF03146 (http://marc.info?l=bugtraq&m=141383353622268&w=2)

http://www-01.ibm.com/support/docview.wss?uid=isg3T1021361

APPLE-SA-2015-01-27-4 (http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html)

HPSBGN03141 (http://marc.info?l=bugtraq&m=141383304022067&w=2)

SECUNIA-61128 (http://secunia.com/advisories/61128)

https://support.citrix.com/article/CTX200217

SECUNIA-61471 (http://secunia.com/advisories/61471)

SECUNIA-60055 (http://secunia.com/advisories/60055)

SECUNIA-59961 (http://secunia.com/advisories/59961)

SECUNIA-61550 (http://secunia.com/advisories/61550)

SECUNIA-61633 (http://secunia.com/advisories/61633)

http://www-01.ibm.com/support/docview.wss?uid=swg21686494

http://support.novell.com/security/cve/CVE-2014-6277.html

https://kb.bluecoat.com/index?page=content&id=SA82

SECUNIA-61328 (http://secunia.com/advisories/61328)

http://www-01.ibm.com/support/docview.wss?uid=swg21685733

SECUNIA-61129 (http://secunia.com/advisories/61129)

SECUNIA-61603 (http://secunia.com/advisories/61603)

SECUNIA-61857 (http://secunia.com/advisories/61857)

http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879

Miscellaneous

http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html

http://lcamtuf.blogspot.com/2014/10/bash-bug-how-we-finally-cracked.html

http://lcamtuf.blogspot.com/2014/09/bash-bug-apply-unofficial-patch-now.html

Rapid7

Technical Analysis