cvelist/2014/6xxx/CVE-2014-6277.json
2018-08-08 06:03:44 -04:00

633 lines
22 KiB
JSON

{
"CVE_data_meta" : {
"ASSIGNER" : "cve@mitre.org",
"ID" : "CVE-2014-6277",
"STATE" : "PUBLIC"
},
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"product_name" : "n/a",
"version" : {
"version_data" : [
{
"version_value" : "n/a"
}
]
}
}
]
},
"vendor_name" : "n/a"
}
]
}
},
"data_format" : "MITRE",
"data_type" : "CVE",
"data_version" : "4.0",
"description" : {
"description_data" : [
{
"lang" : "eng",
"value" : "GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized memory access, and untrusted-pointer read and write operations) via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271 and CVE-2014-7169."
}
]
},
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng",
"value" : "n/a"
}
]
}
]
},
"references" : {
"reference_data" : [
{
"name" : "http://lcamtuf.blogspot.com/2014/09/bash-bug-apply-unofficial-patch-now.html",
"refsource" : "MISC",
"url" : "http://lcamtuf.blogspot.com/2014/09/bash-bug-apply-unofficial-patch-now.html"
},
{
"name" : "http://lcamtuf.blogspot.com/2014/10/bash-bug-how-we-finally-cracked.html",
"refsource" : "MISC",
"url" : "http://lcamtuf.blogspot.com/2014/10/bash-bug-how-we-finally-cracked.html"
},
{
"name" : "http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html",
"refsource" : "MISC",
"url" : "http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html"
},
{
"name" : "http://support.novell.com/security/cve/CVE-2014-6277.html",
"refsource" : "CONFIRM",
"url" : "http://support.novell.com/security/cve/CVE-2014-6277.html"
},
{
"name" : "https://www.suse.com/support/shellshock/",
"refsource" : "CONFIRM",
"url" : "https://www.suse.com/support/shellshock/"
},
{
"name" : "https://kb.bluecoat.com/index?page=content&id=SA82",
"refsource" : "CONFIRM",
"url" : "https://kb.bluecoat.com/index?page=content&id=SA82"
},
{
"name" : "http://www-01.ibm.com/support/docview.wss?uid=isg3T1021272",
"refsource" : "CONFIRM",
"url" : "http://www-01.ibm.com/support/docview.wss?uid=isg3T1021272"
},
{
"name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21685749",
"refsource" : "CONFIRM",
"url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21685749"
},
{
"name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21685914",
"refsource" : "CONFIRM",
"url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21685914"
},
{
"name" : "http://www.novell.com/support/kb/doc.php?id=7015721",
"refsource" : "CONFIRM",
"url" : "http://www.novell.com/support/kb/doc.php?id=7015721"
},
{
"name" : "http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html",
"refsource" : "CONFIRM",
"url" : "http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html"
},
{
"name" : "http://www.vmware.com/security/advisories/VMSA-2014-0010.html",
"refsource" : "CONFIRM",
"url" : "http://www.vmware.com/security/advisories/VMSA-2014-0010.html"
},
{
"name" : "https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10648",
"refsource" : "CONFIRM",
"url" : "https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10648"
},
{
"name" : "http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279",
"refsource" : "CONFIRM",
"url" : "http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279"
},
{
"name" : "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879",
"refsource" : "CONFIRM",
"url" : "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879"
},
{
"name" : "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897",
"refsource" : "CONFIRM",
"url" : "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897"
},
{
"name" : "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898",
"refsource" : "CONFIRM",
"url" : "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898"
},
{
"name" : "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915",
"refsource" : "CONFIRM",
"url" : "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915"
},
{
"name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21685541",
"refsource" : "CONFIRM",
"url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21685541"
},
{
"name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21685604",
"refsource" : "CONFIRM",
"url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21685604"
},
{
"name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21685733",
"refsource" : "CONFIRM",
"url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21685733"
},
{
"name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21686131",
"refsource" : "CONFIRM",
"url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21686131"
},
{
"name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21686479",
"refsource" : "CONFIRM",
"url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21686479"
},
{
"name" : "http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315",
"refsource" : "CONFIRM",
"url" : "http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315"
},
{
"name" : "https://support.citrix.com/article/CTX200217",
"refsource" : "CONFIRM",
"url" : "https://support.citrix.com/article/CTX200217"
},
{
"name" : "https://support.citrix.com/article/CTX200223",
"refsource" : "CONFIRM",
"url" : "https://support.citrix.com/article/CTX200223"
},
{
"name" : "https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html",
"refsource" : "CONFIRM",
"url" : "https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html"
},
{
"name" : "http://www-01.ibm.com/support/docview.wss?uid=isg3T1021361",
"refsource" : "CONFIRM",
"url" : "http://www-01.ibm.com/support/docview.wss?uid=isg3T1021361"
},
{
"name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21686246",
"refsource" : "CONFIRM",
"url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21686246"
},
{
"name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21686445",
"refsource" : "CONFIRM",
"url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21686445"
},
{
"name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21686494",
"refsource" : "CONFIRM",
"url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21686494"
},
{
"name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21687079",
"refsource" : "CONFIRM",
"url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21687079"
},
{
"name" : "https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk102673&src=securityAlerts",
"refsource" : "CONFIRM",
"url" : "https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk102673&src=securityAlerts"
},
{
"name" : "http://www.qnap.com/i/en/support/con_show.php?cid=61",
"refsource" : "CONFIRM",
"url" : "http://www.qnap.com/i/en/support/con_show.php?cid=61"
},
{
"name" : "http://linux.oracle.com/errata/ELSA-2014-3093",
"refsource" : "CONFIRM",
"url" : "http://linux.oracle.com/errata/ELSA-2014-3093"
},
{
"name" : "http://linux.oracle.com/errata/ELSA-2014-3094",
"refsource" : "CONFIRM",
"url" : "http://linux.oracle.com/errata/ELSA-2014-3094"
},
{
"name" : "http://support.apple.com/HT204244",
"refsource" : "CONFIRM",
"url" : "http://support.apple.com/HT204244"
},
{
"name" : "https://support.apple.com/HT205267",
"refsource" : "CONFIRM",
"url" : "https://support.apple.com/HT205267"
},
{
"name" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10085",
"refsource" : "CONFIRM",
"url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10085"
},
{
"name" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04497075",
"refsource" : "CONFIRM",
"url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04497075"
},
{
"name" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04518183",
"refsource" : "CONFIRM",
"url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04518183"
},
{
"name" : "APPLE-SA-2015-01-27-4",
"refsource" : "APPLE",
"url" : "http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html"
},
{
"name" : "APPLE-SA-2015-09-30-3",
"refsource" : "APPLE",
"url" : "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"
},
{
"name" : "20140926 GNU Bash Environment Variable Command Injection Vulnerability",
"refsource" : "CISCO",
"url" : "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bash"
},
{
"name" : "HPSBGN03138",
"refsource" : "HP",
"url" : "http://marc.info/?l=bugtraq&m=141330468527613&w=2"
},
{
"name" : "HPSBHF03125",
"refsource" : "HP",
"url" : "http://marc.info/?l=bugtraq&m=141345648114150&w=2"
},
{
"name" : "HPSBGN03141",
"refsource" : "HP",
"url" : "http://marc.info/?l=bugtraq&m=141383304022067&w=2"
},
{
"name" : "HPSBGN03142",
"refsource" : "HP",
"url" : "http://marc.info/?l=bugtraq&m=141383244821813&w=2"
},
{
"name" : "HPSBHF03146",
"refsource" : "HP",
"url" : "http://marc.info/?l=bugtraq&m=141383353622268&w=2"
},
{
"name" : "HPSBMU03143",
"refsource" : "HP",
"url" : "http://marc.info/?l=bugtraq&m=141383026420882&w=2"
},
{
"name" : "HPSBMU03144",
"refsource" : "HP",
"url" : "http://marc.info/?l=bugtraq&m=141383081521087&w=2"
},
{
"name" : "HPSBST03129",
"refsource" : "HP",
"url" : "http://marc.info/?l=bugtraq&m=141383196021590&w=2"
},
{
"name" : "HPSBST03157",
"refsource" : "HP",
"url" : "http://marc.info/?l=bugtraq&m=141450491804793&w=2"
},
{
"name" : "HPSBHF03145",
"refsource" : "HP",
"url" : "http://marc.info/?l=bugtraq&m=141383465822787&w=2"
},
{
"name" : "HPSBMU03165",
"refsource" : "HP",
"url" : "http://marc.info/?l=bugtraq&m=141577137423233&w=2"
},
{
"name" : "HPSBMU03182",
"refsource" : "HP",
"url" : "http://marc.info/?l=bugtraq&m=141585637922673&w=2"
},
{
"name" : "HPSBST03154",
"refsource" : "HP",
"url" : "http://marc.info/?l=bugtraq&m=141577297623641&w=2"
},
{
"name" : "HPSBST03155",
"refsource" : "HP",
"url" : "http://marc.info/?l=bugtraq&m=141576728022234&w=2"
},
{
"name" : "HPSBST03181",
"refsource" : "HP",
"url" : "http://marc.info/?l=bugtraq&m=141577241923505&w=2"
},
{
"name" : "HPSBMU03217",
"refsource" : "HP",
"url" : "http://marc.info/?l=bugtraq&m=141879528318582&w=2"
},
{
"name" : "HPSBMU03236",
"refsource" : "HP",
"url" : "http://marc.info/?l=bugtraq&m=142289270617409&w=2"
},
{
"name" : "HPSBMU03245",
"refsource" : "HP",
"url" : "http://marc.info/?l=bugtraq&m=142358026505815&w=2"
},
{
"name" : "HPSBMU03246",
"refsource" : "HP",
"url" : "http://marc.info/?l=bugtraq&m=142358078406056&w=2"
},
{
"name" : "SSRT101742",
"refsource" : "HP",
"url" : "http://marc.info/?l=bugtraq&m=142358026505815&w=2"
},
{
"name" : "SSRT101827",
"refsource" : "HP",
"url" : "http://marc.info/?l=bugtraq&m=141879528318582&w=2"
},
{
"name" : "SSRT101830",
"refsource" : "HP",
"url" : "http://marc.info/?l=bugtraq&m=142289270617409&w=2"
},
{
"name" : "HPSBGN03233",
"refsource" : "HP",
"url" : "http://marc.info/?l=bugtraq&m=142118135300698&w=2"
},
{
"name" : "SSRT101739",
"refsource" : "HP",
"url" : "http://marc.info/?l=bugtraq&m=142118135300698&w=2"
},
{
"name" : "SSRT101868",
"refsource" : "HP",
"url" : "http://marc.info/?l=bugtraq&m=142118135300698&w=2"
},
{
"name" : "HPSBMU03220",
"refsource" : "HP",
"url" : "http://marc.info/?l=bugtraq&m=142721162228379&w=2"
},
{
"name" : "SSRT101819",
"refsource" : "HP",
"url" : "http://marc.info/?l=bugtraq&m=142721162228379&w=2"
},
{
"name" : "MDVSA-2015:164",
"refsource" : "MANDRIVA",
"url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2015:164"
},
{
"name" : "SUSE-SU-2014:1287",
"refsource" : "SUSE",
"url" : "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00004.html"
},
{
"name" : "openSUSE-SU-2014:1310",
"refsource" : "SUSE",
"url" : "http://lists.opensuse.org/opensuse-updates/2014-10/msg00025.html"
},
{
"name" : "USN-2380-1",
"refsource" : "UBUNTU",
"url" : "http://www.ubuntu.com/usn/USN-2380-1"
},
{
"name" : "JVN#55667175",
"refsource" : "JVN",
"url" : "http://jvn.jp/en/jp/JVN55667175/index.html"
},
{
"name" : "JVNDB-2014-000126",
"refsource" : "JVNDB",
"url" : "http://jvndb.jvn.jp/jvndb/JVNDB-2014-000126"
},
{
"name" : "61641",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/61641"
},
{
"name" : "59907",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/59907"
},
{
"name" : "61283",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/61283"
},
{
"name" : "61485",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/61485"
},
{
"name" : "61503",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/61503"
},
{
"name" : "61552",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/61552"
},
{
"name" : "61565",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/61565"
},
{
"name" : "61603",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/61603"
},
{
"name" : "61633",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/61633"
},
{
"name" : "61643",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/61643"
},
{
"name" : "61654",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/61654"
},
{
"name" : "61703",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/61703"
},
{
"name" : "58200",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/58200"
},
{
"name" : "60034",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/60034"
},
{
"name" : "60055",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/60055"
},
{
"name" : "60193",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/60193"
},
{
"name" : "60325",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/60325"
},
{
"name" : "61065",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/61065"
},
{
"name" : "61128",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/61128"
},
{
"name" : "61129",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/61129"
},
{
"name" : "61287",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/61287"
},
{
"name" : "61312",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/61312"
},
{
"name" : "61313",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/61313"
},
{
"name" : "61328",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/61328"
},
{
"name" : "61442",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/61442"
},
{
"name" : "61471",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/61471"
},
{
"name" : "61550",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/61550"
},
{
"name" : "61780",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/61780"
},
{
"name" : "61816",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/61816"
},
{
"name" : "61857",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/61857"
},
{
"name" : "60024",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/60024"
},
{
"name" : "60063",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/60063"
},
{
"name" : "60044",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/60044"
},
{
"name" : "60433",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/60433"
},
{
"name" : "61291",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/61291"
},
{
"name" : "59961",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/59961"
},
{
"name" : "62312",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/62312"
},
{
"name" : "62343",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/62343"
}
]
}
}