CVE-2014-6278
Quick assessment
Affected
n/a n/a
Exploitation
Confirmed exploitation in the wild; remediate immediately
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
GNU Bash是美国软件开发者布莱恩-福克斯（Brian J. Fox）为GNU计划而编写的一个Shell（命令语言解释器），它运行于类Unix操作系统中（Linux系统的默认Shell），并能够从标准输入设备或文件中读取、执行命令，同时也结合了一部分ksh和csh的特点。 GNU Bash 4.3及之前版本中存在安全漏洞，该漏洞源于程序没有正确解析环境变量中的函数定义。远程攻击者可借助特制的环境变量利用该漏洞执行任意命令。以下产品可能受到影响：OpenSSH sshd中的ForceCommand功能，
Public Exploits 8
In-the-Wild Activity Observed
cisa_kev · confirmed
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2014-6278
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary commands via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271, CVE-2014-7169, and CVE-2014-6277.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
GNU Bash 操作系统命令注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
GNU Bash是美国软件开发者布莱恩-福克斯（Brian J. Fox）为GNU计划而编写的一个Shell（命令语言解释器），它运行于类Unix操作系统中（Linux系统的默认Shell），并能够从标准输入设备或文件中读取、执行命令，同时也结合了一部分ksh和csh的特点。 GNU Bash 4.3及之前版本中存在安全漏洞，该漏洞源于程序没有正确解析环境变量中的函数定义。远程攻击者可借助特制的环境变量利用该漏洞执行任意命令。以下产品可能受到影响：OpenSSH sshd中的ForceCommand功能，
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Shenlong Deep Dive — AI Deep Analysis
10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2014-6278
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2014-6278
请登录查看更多情报信息。
Vendor Advisories for CVE-2014-6278 (65)
-
http://www.vmware.com/security/advisories/VMSA-2014-0010.html x_refsource_CONFIRM
-
http://www-01.ibm.com/support/docview.wss?uid=swg21685604 x_refsource_CONFIRM
-
http://www-01.ibm.com/support/docview.wss?uid=swg21686479 x_refsource_CONFIRM
-
http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315 x_refsource_CONFIRM
-
http://www-01.ibm.com/support/docview.wss?uid=swg21686445 x_refsource_CONFIRM
-
http://www-01.ibm.com/support/docview.wss?uid=swg21686246 x_refsource_CONFIRM
-
http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279 x_refsource_CONFIRM
-
http://www-01.ibm.com/support/docview.wss?uid=swg21685541 x_refsource_CONFIRM
-
http://www-01.ibm.com/support/docview.wss?uid=swg21685914 x_refsource_CONFIRM
-
http://www-01.ibm.com/support/docview.wss?uid=swg21687079 x_refsource_CONFIRM
-
https://security-tracker.debian.org/tracker/CVE-2014-6278 x_refsource_CONFIRM
-
http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897 x_refsource_CONFIRM
-
http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915 x_refsource_CONFIRM
-
https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10648 x_refsource_CONFIRM
-
http://www-01.ibm.com/support/docview.wss?uid=swg21685749 x_refsource_CONFIRM
-
http://www-01.ibm.com/support/docview.wss?uid=isg3T1021272 x_refsource_CONFIRM
-
-
http://www-01.ibm.com/support/docview.wss?uid=swg21686494 x_refsource_CONFIRM
-
https://bugzilla.redhat.com/show_bug.cgi?id=1147414 x_refsource_CONFIRM
-
-
http://www-01.ibm.com/support/docview.wss?uid=swg21685733 x_refsource_CONFIRM
-
https://www.suse.com/support/shellshock/ x_refsource_CONFIRM
-
http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898 x_refsource_CONFIRM
-
http://www-01.ibm.com/support/docview.wss?uid=swg21686131 x_refsource_CONFIRM
-
http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879 x_refsource_CONFIRM
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
http://www.mandriva.com/security/advisories?name=MDVSA-2015:164 vendor-advisory x_refsource_MANDRIVA
-
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bash vendor-advisory x_refsource_CISCO
Exploits & Public PoCs for CVE-2014-6278 (3)
-
-
🔗 Cisco UCS Manager 2.1(1b) - Remote Command Injection (Shellshock) - Hardware remote Exploit Read full article exploit x_refsource_EXPLOIT-DB
Mailing List Discussions for CVE-2014-6278 (21)
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00004.html vendor-advisory x_refsource_SUSE
-
Other References for CVE-2014-6278 (13)
-
http://www.qnap.com/i/en/support/con_show.php?cid=61 x_refsource_CONFIRM
-
http://support.novell.com/security/cve/CVE-2014-6278.html x_refsource_CONFIRM
-
http://www.novell.com/support/kb/doc.php?id=7015721 x_refsource_CONFIRM
-
http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html x_refsource_CONFIRM
-
https://kb.bluecoat.com/index?page=content&id=SA82 x_refsource_CONFIRM
-
https://kc.mcafee.com/corporate/index?page=content&id=SB10085 x_refsource_CONFIRM
-
https://support.citrix.com/article/CTX200217 x_refsource_CONFIRM
-
https://support.citrix.com/article/CTX200223 x_refsource_CONFIRM
-
Same Patch Batch · n/a · 2014-09-30 · 83 CVEs total
| CVE-2012-6316 | TP-LINK TL-WR841N路由器跨站脚本漏洞 | |
| CVE-2014-4728 | TP-LINK N750 Wireless Dual Band Gigabit Router 资源管理错误漏洞 | |
| CVE-2012-5505 | Plone 信息泄露漏洞 | |
| CVE-2012-5506 | Plone 资源管理错误漏洞 | |
| CVE-2012-5504 | Plone 跨站脚本漏洞 | |
| CVE-2012-5501 | Plone 权限许可和访问控制漏洞 | |
| CVE-2012-5499 | Plone 资源管理错误漏洞 | |
| CVE-2012-5498 | Plone 权限许可和访问控制问题漏洞 | |
| CVE-2012-5497 | Plone 信息泄露漏洞 | |
| CVE-2012-5502 | Plone 跨站脚本漏洞 | |
| CVE-2012-5507 | Zope 竞争条件漏洞 | |
| CVE-2014-0170 | Red Hat Teiid和Red Hat JBoss Data Virtualization 安全漏洞 | |
| CVE-2014-3558 | Red Hat Hibernate Validator 权限许可和访问控制漏洞 | |
| CVE-2014-5267 | Drupal 权限许可和访问控制漏洞 | |
| CVE-2014-5444 | Geary 加密问题漏洞 | |
| CVE-2014-6269 | HAProxy 整数溢出漏洞 | |
| CVE-2014-6273 | APT 缓冲区错误漏洞 | |
| CVE-2014-7199 | MediaWiki 跨站脚本漏洞 | |
| CVE-2014-4330 | Perl Data::Dumper 缓冲区溢出漏洞 | |
| CVE-2014-4727 | TP-LINK N750 Wireless Dual Band Gigabit Router 跨站脚本漏洞 |
Showing top 20 of 83 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2014-6278
No comments yet