cvelist/2014/6xxx/CVE-2014-6277.json

{
   "CVE_data_meta" : {
      "ASSIGNER" : "cve@mitre.org",
      "ID" : "CVE-2014-6277",
      "STATE" : "PUBLIC"
   },
   "affects" : {
      "vendor" : {
         "vendor_data" : [
            {
               "product" : {
                  "product_data" : [
                     {
                        "product_name" : "n/a",
                        "version" : {
                           "version_data" : [
                              {
                                 "version_value" : "n/a"
                              }
                           ]
                        }
                     }
                  ]
               },
               "vendor_name" : "n/a"
            }
         ]
      }
   },
   "data_format" : "MITRE",
   "data_type" : "CVE",
   "data_version" : "4.0",
   "description" : {
      "description_data" : [
         {
            "lang" : "eng",
            "value" : "GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized memory access, and untrusted-pointer read and write operations) via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271 and CVE-2014-7169."
         }
      ]
   },
   "problemtype" : {
      "problemtype_data" : [
         {
            "description" : [
               {
                  "lang" : "eng",
                  "value" : "n/a"
               }
            ]
         }
      ]
   },
   "references" : {
      "reference_data" : [
         {
            "name" : "http://lcamtuf.blogspot.com/2014/09/bash-bug-apply-unofficial-patch-now.html",
            "refsource" : "MISC",
            "url" : "http://lcamtuf.blogspot.com/2014/09/bash-bug-apply-unofficial-patch-now.html"
         },
         {
            "name" : "http://lcamtuf.blogspot.com/2014/10/bash-bug-how-we-finally-cracked.html",
            "refsource" : "MISC",
            "url" : "http://lcamtuf.blogspot.com/2014/10/bash-bug-how-we-finally-cracked.html"
         },
         {
            "name" : "http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html",
            "refsource" : "MISC",
            "url" : "http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html"
         },
         {
            "name" : "http://support.novell.com/security/cve/CVE-2014-6277.html",
            "refsource" : "CONFIRM",
            "url" : "http://support.novell.com/security/cve/CVE-2014-6277.html"
         },
         {
            "name" : "https://www.suse.com/support/shellshock/",
            "refsource" : "CONFIRM",
            "url" : "https://www.suse.com/support/shellshock/"
         },
         {
            "name" : "https://kb.bluecoat.com/index?page=content&id=SA82",
            "refsource" : "CONFIRM",
            "url" : "https://kb.bluecoat.com/index?page=content&id=SA82"
         },
         {
            "name" : "http://www-01.ibm.com/support/docview.wss?uid=isg3T1021272",
            "refsource" : "CONFIRM",
            "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg3T1021272"
         },
         {
            "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21685749",
            "refsource" : "CONFIRM",
            "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21685749"
         },
         {
            "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21685914",
            "refsource" : "CONFIRM",
            "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21685914"
         },
         {
            "name" : "http://www.novell.com/support/kb/doc.php?id=7015721",
            "refsource" : "CONFIRM",
            "url" : "http://www.novell.com/support/kb/doc.php?id=7015721"
         },
         {
            "name" : "http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html",
            "refsource" : "CONFIRM",
            "url" : "http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html"
         },
         {
            "name" : "http://www.vmware.com/security/advisories/VMSA-2014-0010.html",
            "refsource" : "CONFIRM",
            "url" : "http://www.vmware.com/security/advisories/VMSA-2014-0010.html"
         },
         {
            "name" : "https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10648",
            "refsource" : "CONFIRM",
            "url" : "https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10648"
         },
         {
            "name" : "http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279",
            "refsource" : "CONFIRM",
            "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279"
         },
         {
            "name" : "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879",
            "refsource" : "CONFIRM",
            "url" : "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879"
         },
         {
            "name" : "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897",
            "refsource" : "CONFIRM",
            "url" : "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897"
         },
         {
            "name" : "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898",
            "refsource" : "CONFIRM",
            "url" : "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898"
         },
         {
            "name" : "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915",
            "refsource" : "CONFIRM",
            "url" : "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915"
         },
         {
            "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21685541",
            "refsource" : "CONFIRM",
            "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21685541"
         },
         {
            "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21685604",
            "refsource" : "CONFIRM",
            "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21685604"
         },
         {
            "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21685733",
            "refsource" : "CONFIRM",
            "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21685733"
         },
         {
            "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21686131",
            "refsource" : "CONFIRM",
            "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21686131"
         },
         {
            "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21686479",
            "refsource" : "CONFIRM",
            "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21686479"
         },
         {
            "name" : "http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315",
            "refsource" : "CONFIRM",
            "url" : "http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315"
         },
         {
            "name" : "https://support.citrix.com/article/CTX200217",
            "refsource" : "CONFIRM",
            "url" : "https://support.citrix.com/article/CTX200217"
         },
         {
            "name" : "https://support.citrix.com/article/CTX200223",
            "refsource" : "CONFIRM",
            "url" : "https://support.citrix.com/article/CTX200223"
         },
         {
            "name" : "https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html",
            "refsource" : "CONFIRM",
            "url" : "https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html"
         },
         {
            "name" : "http://www-01.ibm.com/support/docview.wss?uid=isg3T1021361",
            "refsource" : "CONFIRM",
            "url" : "http://www-01.ibm.com/support/docview.wss?uid=isg3T1021361"
         },
         {
            "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21686246",
            "refsource" : "CONFIRM",
            "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21686246"
         },
         {
            "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21686445",
            "refsource" : "CONFIRM",
            "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21686445"
         },
         {
            "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21686494",
            "refsource" : "CONFIRM",
            "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21686494"
         },
         {
            "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21687079",
            "refsource" : "CONFIRM",
            "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21687079"
         },
         {
            "name" : "https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk102673&src=securityAlerts",
            "refsource" : "CONFIRM",
            "url" : "https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk102673&src=securityAlerts"
         },
         {
            "name" : "http://www.qnap.com/i/en/support/con_show.php?cid=61",
            "refsource" : "CONFIRM",
            "url" : "http://www.qnap.com/i/en/support/con_show.php?cid=61"
         },
         {
            "name" : "http://linux.oracle.com/errata/ELSA-2014-3093",
            "refsource" : "CONFIRM",
            "url" : "http://linux.oracle.com/errata/ELSA-2014-3093"
         },
         {
            "name" : "http://linux.oracle.com/errata/ELSA-2014-3094",
            "refsource" : "CONFIRM",
            "url" : "http://linux.oracle.com/errata/ELSA-2014-3094"
         },
         {
            "name" : "http://support.apple.com/HT204244",
            "refsource" : "CONFIRM",
            "url" : "http://support.apple.com/HT204244"
         },
         {
            "name" : "https://support.apple.com/HT205267",
            "refsource" : "CONFIRM",
            "url" : "https://support.apple.com/HT205267"
         },
         {
            "name" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10085",
            "refsource" : "CONFIRM",
            "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10085"
         },
         {
            "name" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04497075",
            "refsource" : "CONFIRM",
            "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04497075"
         },
         {
            "name" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04518183",
            "refsource" : "CONFIRM",
            "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04518183"
         },
         {
            "name" : "APPLE-SA-2015-01-27-4",
            "refsource" : "APPLE",
            "url" : "http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html"
         },
         {
            "name" : "APPLE-SA-2015-09-30-3",
            "refsource" : "APPLE",
            "url" : "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
         },
         {
            "name" : "20140926 GNU Bash Environment Variable Command Injection Vulnerability",
            "refsource" : "CISCO",
            "url" : "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bash"
         },
         {
            "name" : "HPSBGN03138",
            "refsource" : "HP",
            "url" : "http://marc.info/?l=bugtraq&m=141330468527613&w=2"
         },
         {
            "name" : "HPSBHF03125",
            "refsource" : "HP",
            "url" : "http://marc.info/?l=bugtraq&m=141345648114150&w=2"
         },
         {
            "name" : "HPSBGN03141",
            "refsource" : "HP",
            "url" : "http://marc.info/?l=bugtraq&m=141383304022067&w=2"
         },
         {
            "name" : "HPSBGN03142",
            "refsource" : "HP",
            "url" : "http://marc.info/?l=bugtraq&m=141383244821813&w=2"
         },
         {
            "name" : "HPSBHF03146",
            "refsource" : "HP",
            "url" : "http://marc.info/?l=bugtraq&m=141383353622268&w=2"
         },
         {
            "name" : "HPSBMU03143",
            "refsource" : "HP",
            "url" : "http://marc.info/?l=bugtraq&m=141383026420882&w=2"
         },
         {
            "name" : "HPSBMU03144",
            "refsource" : "HP",
            "url" : "http://marc.info/?l=bugtraq&m=141383081521087&w=2"
         },
         {
            "name" : "HPSBST03129",
            "refsource" : "HP",
            "url" : "http://marc.info/?l=bugtraq&m=141383196021590&w=2"
         },
         {
            "name" : "HPSBST03157",
            "refsource" : "HP",
            "url" : "http://marc.info/?l=bugtraq&m=141450491804793&w=2"
         },
         {
            "name" : "HPSBHF03145",
            "refsource" : "HP",
            "url" : "http://marc.info/?l=bugtraq&m=141383465822787&w=2"
         },
         {
            "name" : "HPSBMU03165",
            "refsource" : "HP",
            "url" : "http://marc.info/?l=bugtraq&m=141577137423233&w=2"
         },
         {
            "name" : "HPSBMU03182",
            "refsource" : "HP",
            "url" : "http://marc.info/?l=bugtraq&m=141585637922673&w=2"
         },
         {
            "name" : "HPSBST03154",
            "refsource" : "HP",
            "url" : "http://marc.info/?l=bugtraq&m=141577297623641&w=2"
         },
         {
            "name" : "HPSBST03155",
            "refsource" : "HP",
            "url" : "http://marc.info/?l=bugtraq&m=141576728022234&w=2"
         },
         {
            "name" : "HPSBST03181",
            "refsource" : "HP",
            "url" : "http://marc.info/?l=bugtraq&m=141577241923505&w=2"
         },
         {
            "name" : "HPSBMU03217",
            "refsource" : "HP",
            "url" : "http://marc.info/?l=bugtraq&m=141879528318582&w=2"
         },
         {
            "name" : "HPSBMU03236",
            "refsource" : "HP",
            "url" : "http://marc.info/?l=bugtraq&m=142289270617409&w=2"
         },
         {
            "name" : "HPSBMU03245",
            "refsource" : "HP",
            "url" : "http://marc.info/?l=bugtraq&m=142358026505815&w=2"
         },
         {
            "name" : "HPSBMU03246",
            "refsource" : "HP",
            "url" : "http://marc.info/?l=bugtraq&m=142358078406056&w=2"
         },
         {
            "name" : "SSRT101742",
            "refsource" : "HP",
            "url" : "http://marc.info/?l=bugtraq&m=142358026505815&w=2"
         },
         {
            "name" : "SSRT101827",
            "refsource" : "HP",
            "url" : "http://marc.info/?l=bugtraq&m=141879528318582&w=2"
         },
         {
            "name" : "SSRT101830",
            "refsource" : "HP",
            "url" : "http://marc.info/?l=bugtraq&m=142289270617409&w=2"
         },
         {
            "name" : "HPSBGN03233",
            "refsource" : "HP",
            "url" : "http://marc.info/?l=bugtraq&m=142118135300698&w=2"
         },
         {
            "name" : "SSRT101739",
            "refsource" : "HP",
            "url" : "http://marc.info/?l=bugtraq&m=142118135300698&w=2"
         },
         {
            "name" : "SSRT101868",
            "refsource" : "HP",
            "url" : "http://marc.info/?l=bugtraq&m=142118135300698&w=2"
         },
         {
            "name" : "HPSBMU03220",
            "refsource" : "HP",
            "url" : "http://marc.info/?l=bugtraq&m=142721162228379&w=2"
         },
         {
            "name" : "SSRT101819",
            "refsource" : "HP",
            "url" : "http://marc.info/?l=bugtraq&m=142721162228379&w=2"
         },
         {
            "name" : "MDVSA-2015:164",
            "refsource" : "MANDRIVA",
            "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2015:164"
         },
         {
            "name" : "SUSE-SU-2014:1287",
            "refsource" : "SUSE",
            "url" : "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00004.html"
         },
         {
            "name" : "openSUSE-SU-2014:1310",
            "refsource" : "SUSE",
            "url" : "http://lists.opensuse.org/opensuse-updates/2014-10/msg00025.html"
         },
         {
            "name" : "USN-2380-1",
            "refsource" : "UBUNTU",
            "url" : "http://www.ubuntu.com/usn/USN-2380-1"
         },
         {
            "name" : "JVN#55667175",
            "refsource" : "JVN",
            "url" : "http://jvn.jp/en/jp/JVN55667175/index.html"
         },
         {
            "name" : "JVNDB-2014-000126",
            "refsource" : "JVNDB",
            "url" : "http://jvndb.jvn.jp/jvndb/JVNDB-2014-000126"
         },
         {
            "name" : "61641",
            "refsource" : "SECUNIA",
            "url" : "http://secunia.com/advisories/61641"
         },
         {
            "name" : "59907",
            "refsource" : "SECUNIA",
            "url" : "http://secunia.com/advisories/59907"
         },
         {
            "name" : "61283",
            "refsource" : "SECUNIA",
            "url" : "http://secunia.com/advisories/61283"
         },
         {
            "name" : "61485",
            "refsource" : "SECUNIA",
            "url" : "http://secunia.com/advisories/61485"
         },
         {
            "name" : "61503",
            "refsource" : "SECUNIA",
            "url" : "http://secunia.com/advisories/61503"
         },
         {
            "name" : "61552",
            "refsource" : "SECUNIA",
            "url" : "http://secunia.com/advisories/61552"
         },
         {
            "name" : "61565",
            "refsource" : "SECUNIA",
            "url" : "http://secunia.com/advisories/61565"
         },
         {
            "name" : "61603",
            "refsource" : "SECUNIA",
            "url" : "http://secunia.com/advisories/61603"
         },
         {
            "name" : "61633",
            "refsource" : "SECUNIA",
            "url" : "http://secunia.com/advisories/61633"
         },
         {
            "name" : "61643",
            "refsource" : "SECUNIA",
            "url" : "http://secunia.com/advisories/61643"
         },
         {
            "name" : "61654",
            "refsource" : "SECUNIA",
            "url" : "http://secunia.com/advisories/61654"
         },
         {
            "name" : "61703",
            "refsource" : "SECUNIA",
            "url" : "http://secunia.com/advisories/61703"
         },
         {
            "name" : "58200",
            "refsource" : "SECUNIA",
            "url" : "http://secunia.com/advisories/58200"
         },
         {
            "name" : "60034",
            "refsource" : "SECUNIA",
            "url" : "http://secunia.com/advisories/60034"
         },
         {
            "name" : "60055",
            "refsource" : "SECUNIA",
            "url" : "http://secunia.com/advisories/60055"
         },
         {
            "name" : "60193",
            "refsource" : "SECUNIA",
            "url" : "http://secunia.com/advisories/60193"
         },
         {
            "name" : "60325",
            "refsource" : "SECUNIA",
            "url" : "http://secunia.com/advisories/60325"
         },
         {
            "name" : "61065",
            "refsource" : "SECUNIA",
            "url" : "http://secunia.com/advisories/61065"
         },
         {
            "name" : "61128",
            "refsource" : "SECUNIA",
            "url" : "http://secunia.com/advisories/61128"
         },
         {
            "name" : "61129",
            "refsource" : "SECUNIA",
            "url" : "http://secunia.com/advisories/61129"
         },
         {
            "name" : "61287",
            "refsource" : "SECUNIA",
            "url" : "http://secunia.com/advisories/61287"
         },
         {
            "name" : "61312",
            "refsource" : "SECUNIA",
            "url" : "http://secunia.com/advisories/61312"
         },
         {
            "name" : "61313",
            "refsource" : "SECUNIA",
            "url" : "http://secunia.com/advisories/61313"
         },
         {
            "name" : "61328",
            "refsource" : "SECUNIA",
            "url" : "http://secunia.com/advisories/61328"
         },
         {
            "name" : "61442",
            "refsource" : "SECUNIA",
            "url" : "http://secunia.com/advisories/61442"
         },
         {
            "name" : "61471",
            "refsource" : "SECUNIA",
            "url" : "http://secunia.com/advisories/61471"
         },
         {
            "name" : "61550",
            "refsource" : "SECUNIA",
            "url" : "http://secunia.com/advisories/61550"
         },
         {
            "name" : "61780",
            "refsource" : "SECUNIA",
            "url" : "http://secunia.com/advisories/61780"
         },
         {
            "name" : "61816",
            "refsource" : "SECUNIA",
            "url" : "http://secunia.com/advisories/61816"
         },
         {
            "name" : "61857",
            "refsource" : "SECUNIA",
            "url" : "http://secunia.com/advisories/61857"
         },
         {
            "name" : "60024",
            "refsource" : "SECUNIA",
            "url" : "http://secunia.com/advisories/60024"
         },
         {
            "name" : "60063",
            "refsource" : "SECUNIA",
            "url" : "http://secunia.com/advisories/60063"
         },
         {
            "name" : "60044",
            "refsource" : "SECUNIA",
            "url" : "http://secunia.com/advisories/60044"
         },
         {
            "name" : "60433",
            "refsource" : "SECUNIA",
            "url" : "http://secunia.com/advisories/60433"
         },
         {
            "name" : "61291",
            "refsource" : "SECUNIA",
            "url" : "http://secunia.com/advisories/61291"
         },
         {
            "name" : "59961",
            "refsource" : "SECUNIA",
            "url" : "http://secunia.com/advisories/59961"
         },
         {
            "name" : "62312",
            "refsource" : "SECUNIA",
            "url" : "http://secunia.com/advisories/62312"
         },
         {
            "name" : "62343",
            "refsource" : "SECUNIA",
            "url" : "http://secunia.com/advisories/62343"
         }
      ]
   }
}