← CVE Radar
CVE-2014-6271GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka "ShellShock." NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.
9.8 CRITICALEPSS 99.99%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 9.8 | CRITICAL | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 10.0 | HIGH | 2.0NVD | AV:N/AC:L/Au:N/C:C/I:C/A:C |
CISA required action
⚡ Known exploited · remediation due Jul 28, 2022
Apply updates per vendor instructions.
Details
- CVE ID
- CVE-2014-6271
- Status
- Analyzed
- Assigner (CNA)
- debian
- Published
- Sep 24, 2014
- Last modified
- 2026-06-17 00:12 UTC
- Weaknesses
Affected Products
From NVD CPE configurations.
gnubash1 version range
- through 4.3
aristaeos6 version ranges
- 4.9.0 before 4.9.12
- 4.10.0 before 4.10.9
- 4.11.0 before 4.11.11
- 4.12.0 before 4.12.9
- 4.13.0 before 4.13.9
- 4.14.0 before 4.14.4f
oraclelinux3 version ranges
- 4
- 5
- 6
qnapqts3 version ranges
- before 4.1.1
- 4.1.1
- 4.1.1 build 0927
mageiamageia2 version ranges
- 3.0
- 4.0
redhatgluster storage server for on-premise1 version range
- 2.1
redhatvirtualization1 version range
- 3.4
redhatenterprise linux4 version ranges
- 4.0
- 5.0
- 6.0
- 7.0
redhatenterprise linux desktop3 version ranges
- 5.0
- 6.0
- 7.0
redhatenterprise linux eus8 version ranges
- 5.9
- 6.4
- 6.5
- 7.3
- 7.4
- 7.5
- 7.6
- 7.7
redhatenterprise linux for ibm z systems8 version ranges
- 5.9 s390x
- 6.4 s390x
- 6.5 s390x
- 7.3 s390x
- 7.4 s390x
- 7.5 s390x
- 7.6 s390x
- 7.7 s390x
redhatenterprise linux for power big endian5 version ranges
- 5.0 ppc
- 5.9 ppc
- 6.0 ppc64
- 6.4 ppc64
- 7.0 ppc64
redhatenterprise linux for power big endian eus6 version ranges
- 6.5 ppc64
- 7.3 ppc64
- 7.4 ppc64
- 7.5 ppc64
- 7.6 ppc64
- 7.7 ppc64
redhatenterprise linux for scientific computing2 version ranges
- 6.0
- 7.0
redhatenterprise linux server3 version ranges
- 5.0
- 6.0
- 7.0
redhatenterprise linux server aus9 version ranges
- 5.6
- 5.9
- 6.2
- 6.4
- 6.5
- 7.3
- 7.4
- 7.6
- 7.7
redhatenterprise linux server from rhui3 version ranges
- 5.0
- 6.0
- 7.0
redhatenterprise linux server tus4 version ranges
- 6.5
- 7.3
- 7.6
- 7.7
redhatenterprise linux workstation3 version ranges
- 5.0
- 6.0
- 7.0
susestudio onsite1 version range
- 1.3
opensuseopensuse3 version ranges
- 12.3
- 13.1
- 13.2
suselinux enterprise desktop2 version ranges
- 11 sp3
- 12
suselinux enterprise server6 version ranges
- 10 sp3
- 10 sp4
- 11 sp1
- 11 sp2
- 11 sp3
- 12
suselinux enterprise software development kit2 version ranges
- 11 sp3
- 12
debiandebian linux1 version range
- 7.0
ibminfosphere guardium database activity monitoring3 version ranges
- 8.2
- 9.0
- 9.1
ibmpureapplication system3 version ranges
- 1.0.0.0 through 1.0.0.4
- 1.1.0.0 through 1.1.0.4
- 2.0.0.0
ibmqradar risk manager1 version range
- 7.1.0
ibmqradar security information and event manager86 version ranges
- 7.1.0
- 7.1.0 mr1
- 7.1.0 mr2
- 7.1.1
- 7.1.1 p1
- 7.1.1 p2
- 7.1.1 p3
- 7.1.2
- 7.1.2 p1
- 7.1.2 p10
- 7.1.2 p11
- 7.1.2 p12
- 7.1.2 p13
- 7.1.2 p2
- 7.1.2 p3
- 7.1.2 p4
- 7.1.2 p5
- 7.1.2 p6
- 7.1.2 p7
- 7.1.2 p8
- 7.1.2 p9
- 7.2
- 7.2.0
- 7.2.0 p1
- 7.2.0 p2
- 7.2.0 p3
- 7.2.1
- 7.2.1 p1
- 7.2.1 p2
- 7.2.1 p3
- 7.2.2
- 7.2.2 p1
- 7.2.2 p2
- 7.2.2 p3
- 7.2.2 p4
- 7.2.3
- 7.2.3 p1
- 7.2.3 p2
- 7.2.3 p3
- 7.2.3 p4
- 7.2.4
- 7.2.4 p1
- 7.2.4 p2
- 7.2.4 p3
- 7.2.4 p4
- 7.2.4 p5
- 7.2.4 p6
- 7.2.5
- 7.2.5 p1
- 7.2.5 p2
- 7.2.5 p3
- 7.2.5 p4
- 7.2.5 p5
- 7.2.5 p6
- 7.2.6
- 7.2.6 p1
- 7.2.6 p2
- 7.2.6 p3
- 7.2.6 p4
- 7.2.6 p5
- 7.2.6 p6
- 7.2.6 p7
- 7.2.7
- 7.2.7 p1
- 7.2.7 p2
- 7.2.7 p3
- 7.2.7 p4
- 7.2.8
- 7.2.8 p1
- 7.2.8 p10
- 7.2.8 p11
- 7.2.8 p12
- 7.2.8 p13
- 7.2.8 p14
- 7.2.8 p15
- 7.2.8 p16
- 7.2.8 p2
- 7.2.8 p3
- 7.2.8 p4
- 7.2.8 p5
- 7.2.8 p6
- 7.2.8 p7
- 7.2.8 p8
- 7.2.8 p9
- 7.2.8.15
- 7.2.9
ibmqradar vulnerability manager30 version ranges
- 7.2.0
- 7.2.1
- 7.2.2
- 7.2.3
- 7.2.4
- 7.2.6 p1
- 7.2.6 p2
- 7.2.6 p3
- 7.2.6 p4
- 7.2.6 p5
- 7.2.6 p6
- 7.2.6 p7
- 7.2.8
- 7.2.8 p1
- 7.2.8 p10
- 7.2.8 p11
- 7.2.8 p12
- 7.2.8 p13
- 7.2.8 p14
- 7.2.8 p15
- 7.2.8 p16
- 7.2.8 p17
- 7.2.8 p2
- 7.2.8 p3
- 7.2.8 p4
- 7.2.8 p5
- 7.2.8 p6
- 7.2.8 p7
- 7.2.8 p8
- 7.2.8 p9
ibmsmartcloud entry appliance4 version ranges
- 2.3.0
- 2.4.0
- 3.1.0
- 3.2.0
ibmsmartcloud provisioning1 version range
- 2.1.0
ibmsoftware defined network for virtual environments1 version range
- before 1.2.1
ibmstarter kit for cloud1 version range
- 2.2.0
ibmworkload deployer1 version range
- 3.1.0 through 3.1.0.7
ibmsecurity access manager for mobile 8.0 firmware4 version ranges
- 8.0.0.1
- 8.0.0.2
- 8.0.0.3
- 8.0.0.5
ibmsecurity access manager for web 7.0 firmware8 version ranges
- 7.0.0.1
- 7.0.0.2
- 7.0.0.3
- 7.0.0.4
- 7.0.0.5
- 7.0.0.6
- 7.0.0.7
- 7.0.0.8
ibmsecurity access manager for web 8.0 firmware3 version ranges
- 8.0.0.2
- 8.0.0.3
- 8.0.0.5
ibmstorwize v7000 firmware4 version ranges
- 1.1.0.0 before 1.4.3.5
- 1.5.0.0 before 1.5.0.4
- 7.2.0.0 before 7.2.0.9
- 7.3.0.0 before 7.3.0.7
ibmstorwize v5000 firmware3 version ranges
- 1.1.0.0 before 7.1.0.11
- 7.2.0.0 before 7.2.0.9
- 7.3.0.0 before 7.3.0.7
ibmstorwize v3700 firmware3 version ranges
- 1.1.0.0 before 7.1.0.11
- 7.2.0.0 before 7.2.0.9
- 7.3.0.0 before 7.3.0.7
ibmstorwize v3500 firmware3 version ranges
- 1.1.0.0 before 7.1.0.11
- 7.2.0.0 before 7.2.0.9
- 7.3.0.0 before 7.3.0.7
ibmflex system v7000 firmware3 version ranges
- 1.1.0.0 before 7.1.0.11
- 7.2.0.0 before 7.2.0.9
- 7.3.0.0 before 7.3.0.7
ibmsan volume controller firmware3 version ranges
- 1.1.0.0 before 7.1.0.11
- 7.2.0.0 before 7.2.0.9
- 7.3.0.0 before 7.3.0.7
ibmstn6500 firmware3 version ranges
- 3.8.0.0 before 3.8.0.07
- 3.9.1.0 before 3.9.1.08
- 4.1.2.0 before 4.1.2.06
ibmstn6800 firmware3 version ranges
- 3.8.0.0 before 3.8.0.07
- 3.9.1.0 before 3.9.1.08
- 4.1.2.0 before 4.1.2.06
ibmstn7800 firmware3 version ranges
- 3.8.0.0 before 3.8.0.07
- 3.9.1.0 before 3.9.1.08
- 4.1.2.0 before 4.1.2.06
canonicalubuntu linux3 version ranges
- 10.04
- 12.04
- 14.04
novellzenworks configuration management5 version ranges
- 10.3
- 11
- 11.1
- 11.2
- 11.3.0
novellopen enterprise server2 version ranges
- 2.0 sp3
- 11.0 sp2
checkpointsecurity gateway1 version range
- before r77.30
f5big-ip access policy manager3 version ranges
- 10.1.0 through 10.2.4
- 11.0.0 through 11.5.1
- 11.6.0
f5big-ip advanced firewall manager2 version ranges
- 11.3.0 through 11.5.1
- 11.6.0
f5big-ip analytics2 version ranges
- 11.0.0 through 11.5.1
- 11.6.0
f5big-ip application acceleration manager2 version ranges
- 11.4.0 through 11.5.1
- 11.6.0
f5big-ip application security manager3 version ranges
- 10.0.0 through 10.2.4
- 11.0.0 through 11.5.1
- 11.6.0
f5big-ip edge gateway2 version ranges
- 10.1.0 through 10.2.4
- 11.0.0 through 11.3.0
f5big-ip global traffic manager3 version ranges
- 10.0.0 through 10.2.4
- 11.0.0 through 11.5.1
- 11.6.0
f5big-ip link controller3 version ranges
- 10.0.0 through 10.2.4
- 11.0.0 through 11.5.1
- 11.6.0
f5big-ip local traffic manager3 version ranges
- 10.0.0 through 10.2.4
- 11.0.0 through 11.5.1
- 11.6.0
f5big-ip policy enforcement manager2 version ranges
- 11.3.0 through 11.5.1
- 11.6.0
f5big-ip protocol security module2 version ranges
- 10.0.0 through 10.2.4
- 11.0.0 through 11.4.1
f5big-ip wan optimization manager2 version ranges
- 10.0.0 through 10.2.4
- 11.0.0 through 11.3.0
f5big-ip webaccelerator2 version ranges
- 10.0.0 through 10.2.4
- 11.0.0 through 11.3.0
f5big-iq cloud1 version range
- 4.0.0 through 4.4.0
f5big-iq device1 version range
- 4.2.0 through 4.4.0
f5big-iq security1 version range
- 4.0.0 through 4.4.0
f5enterprise manager2 version ranges
- 2.1.0 through 2.3.0
- 3.0.0 through 3.1.1
f5traffix signaling delivery controller5 version ranges
- 4.0.0 through 4.0.5
- 3.3.2
- 3.4.1
- 3.5.1
- 4.1.0
f5arx firmware1 version range
- 6.0.0 through 6.4.0
citrixnetscaler sdx firmware3 version ranges
- before 9.3.67.5r1
- 10 before 10.1.129.11r1
- 10.5 before 10.5.52.11r1
applemac os x1 version range
- 10.0.0 before 10.10.0
vmwarevcenter server appliance8 version ranges
- 5.0
- 5.0 update 1
- 5.0 update 2
- 5.1
- 5.1 update 1
- 5.1 update 2
- 5.5
- 5.5 update 1
vmwareesx2 version ranges
- 4.0
- 4.1
References
- advisories.mageia.org http://advisories.mageia.org/MGASA-2014-0388.html
- archives.neohapsis.com http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html
- jvn.jp http://jvn.jp/en/jp/JVN55667175/index.html
- jvndb.jvn.jp http://jvndb.jvn.jp/jvndb/JVNDB-2014-000126
- kb.juniper.net http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673
- lcamtuf.blogspot.com http://lcamtuf.blogspot.com/2014/09/quick-notes-about-bash-bug-its-impact.html
- linux.oracle.com http://linux.oracle.com/errata/ELSA-2014-1293.html
- linux.oracle.com http://linux.oracle.com/errata/ELSA-2014-1294.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00028.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00029.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00034.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00037.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00040.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00049.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00004.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-updates/2014-10/msg00023.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-updates/2014-10/msg00025.html
- marc.info http://marc.info/?l=bugtraq&m=141216207813411&w=2
- marc.info http://marc.info/?l=bugtraq&m=141216668515282&w=2
- marc.info http://marc.info/?l=bugtraq&m=141235957116749&w=2
- marc.info http://marc.info/?l=bugtraq&m=141319209015420&w=2
- marc.info http://marc.info/?l=bugtraq&m=141330425327438&w=2
- marc.info http://marc.info/?l=bugtraq&m=141330468527613&w=2
- marc.info http://marc.info/?l=bugtraq&m=141345648114150&w=2
- marc.info http://marc.info/?l=bugtraq&m=141383026420882&w=2
- marc.info http://marc.info/?l=bugtraq&m=141383081521087&w=2
- marc.info http://marc.info/?l=bugtraq&m=141383138121313&w=2
- marc.info http://marc.info/?l=bugtraq&m=141383196021590&w=2
- marc.info http://marc.info/?l=bugtraq&m=141383244821813&w=2
- marc.info http://marc.info/?l=bugtraq&m=141383304022067&w=2
- marc.info http://marc.info/?l=bugtraq&m=141383353622268&w=2
- marc.info http://marc.info/?l=bugtraq&m=141383465822787&w=2
- marc.info http://marc.info/?l=bugtraq&m=141450491804793&w=2
- marc.info http://marc.info/?l=bugtraq&m=141576728022234&w=2
- marc.info http://marc.info/?l=bugtraq&m=141577137423233&w=2
- marc.info http://marc.info/?l=bugtraq&m=141577241923505&w=2
- marc.info http://marc.info/?l=bugtraq&m=141577297623641&w=2
- marc.info http://marc.info/?l=bugtraq&m=141585637922673&w=2
- marc.info http://marc.info/?l=bugtraq&m=141694386919794&w=2
- marc.info http://marc.info/?l=bugtraq&m=141879528318582&w=2
- marc.info http://marc.info/?l=bugtraq&m=142113462216480&w=2
- marc.info http://marc.info/?l=bugtraq&m=142118135300698&w=2
- marc.info http://marc.info/?l=bugtraq&m=142358026505815&w=2
- marc.info http://marc.info/?l=bugtraq&m=142358078406056&w=2
- marc.info http://marc.info/?l=bugtraq&m=142546741516006&w=2
- marc.info http://marc.info/?l=bugtraq&m=142719845423222&w=2
- marc.info http://marc.info/?l=bugtraq&m=142721162228379&w=2
- marc.info http://marc.info/?l=bugtraq&m=142805027510172&w=2
- packetstormsecurity.com http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.html
- packetstormsecurity.com http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html
- packetstormsecurity.com http://packetstormsecurity.com/files/128573/Apache-mod_cgi-Remote-Command-Execution.html
- packetstormsecurity.com http://packetstormsecurity.com/files/137376/IPFire-Bash-Environment-Variable-Injection-Shellshock.html
- packetstormsecurity.com http://packetstormsecurity.com/files/161107/SonicWall-SSL-VPN-Shellshock-Remote-Code-Execution.html
- rhn.redhat.com http://rhn.redhat.com/errata/RHSA-2014-1293.html
- rhn.redhat.com http://rhn.redhat.com/errata/RHSA-2014-1294.html
- rhn.redhat.com http://rhn.redhat.com/errata/RHSA-2014-1295.html
- rhn.redhat.com http://rhn.redhat.com/errata/RHSA-2014-1354.html
- seclists.org http://seclists.org/fulldisclosure/2014/Oct/0
- secunia.com http://secunia.com/advisories/58200
- secunia.com http://secunia.com/advisories/59272
- secunia.com http://secunia.com/advisories/59737
- secunia.com http://secunia.com/advisories/59907
- secunia.com http://secunia.com/advisories/60024
- secunia.com http://secunia.com/advisories/60034
- secunia.com http://secunia.com/advisories/60044
- secunia.com http://secunia.com/advisories/60055
- secunia.com http://secunia.com/advisories/60063
- secunia.com http://secunia.com/advisories/60193
- secunia.com http://secunia.com/advisories/60325
- secunia.com http://secunia.com/advisories/60433
- secunia.com http://secunia.com/advisories/60947
- secunia.com http://secunia.com/advisories/61065
- secunia.com http://secunia.com/advisories/61128
- secunia.com http://secunia.com/advisories/61129
- secunia.com http://secunia.com/advisories/61188
- secunia.com http://secunia.com/advisories/61283
- secunia.com http://secunia.com/advisories/61287
- secunia.com http://secunia.com/advisories/61291
- secunia.com http://secunia.com/advisories/61312
- secunia.com http://secunia.com/advisories/61313
- secunia.com http://secunia.com/advisories/61328
- secunia.com http://secunia.com/advisories/61442
- secunia.com http://secunia.com/advisories/61471
- secunia.com http://secunia.com/advisories/61485
- secunia.com http://secunia.com/advisories/61503
- secunia.com http://secunia.com/advisories/61542
- secunia.com http://secunia.com/advisories/61547
- secunia.com http://secunia.com/advisories/61550
- secunia.com http://secunia.com/advisories/61552
- secunia.com http://secunia.com/advisories/61565
- secunia.com http://secunia.com/advisories/61603
- secunia.com http://secunia.com/advisories/61633
- secunia.com http://secunia.com/advisories/61641
- secunia.com http://secunia.com/advisories/61643
- secunia.com http://secunia.com/advisories/61654
- secunia.com http://secunia.com/advisories/61676
- secunia.com http://secunia.com/advisories/61700
- secunia.com http://secunia.com/advisories/61703
- secunia.com http://secunia.com/advisories/61711
- secunia.com http://secunia.com/advisories/61715
- secunia.com http://secunia.com/advisories/61780
- secunia.com http://secunia.com/advisories/61816
- secunia.com http://secunia.com/advisories/61855
- secunia.com http://secunia.com/advisories/61857
- secunia.com http://secunia.com/advisories/61873
- secunia.com http://secunia.com/advisories/62228
- secunia.com http://secunia.com/advisories/62312
- secunia.com http://secunia.com/advisories/62343
- support.apple.com http://support.apple.com/kb/HT6495
- support.novell.com http://support.novell.com/security/cve/CVE-2014-6271.html
- tools.cisco.com http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bash
- www-01.ibm.com http://www-01.ibm.com/support/docview.wss?uid=isg3T1021272
- www-01.ibm.com http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279
- www-01.ibm.com http://www-01.ibm.com/support/docview.wss?uid=isg3T1021361
- www-01.ibm.com http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879
- www-01.ibm.com http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897
- www-01.ibm.com http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898
- www-01.ibm.com http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915
- www-01.ibm.com http://www-01.ibm.com/support/docview.wss?uid=swg21685541
- www-01.ibm.com http://www-01.ibm.com/support/docview.wss?uid=swg21685604
- www-01.ibm.com http://www-01.ibm.com/support/docview.wss?uid=swg21685733
- www-01.ibm.com http://www-01.ibm.com/support/docview.wss?uid=swg21685749
- www-01.ibm.com http://www-01.ibm.com/support/docview.wss?uid=swg21685914
- www-01.ibm.com http://www-01.ibm.com/support/docview.wss?uid=swg21686084
- www-01.ibm.com http://www-01.ibm.com/support/docview.wss?uid=swg21686131
- www-01.ibm.com http://www-01.ibm.com/support/docview.wss?uid=swg21686246
- www-01.ibm.com http://www-01.ibm.com/support/docview.wss?uid=swg21686445
- www-01.ibm.com http://www-01.ibm.com/support/docview.wss?uid=swg21686447
- www-01.ibm.com http://www-01.ibm.com/support/docview.wss?uid=swg21686479
- www-01.ibm.com http://www-01.ibm.com/support/docview.wss?uid=swg21686494
- www-01.ibm.com http://www-01.ibm.com/support/docview.wss?uid=swg21687079
- www-947.ibm.com http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315
- debian.org http://www.debian.org/security/2014/dsa-3032
- kb.cert.org http://www.kb.cert.org/vuls/id/252743
- mandriva.com http://www.mandriva.com/security/advisories?name=MDVSA-2015:164
- novell.com http://www.novell.com/support/kb/doc.php?id=7015701
- novell.com http://www.novell.com/support/kb/doc.php?id=7015721
- oracle.com http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html
- qnap.com http://www.qnap.com/i/en/support/con_show.php?cid=61
- securityfocus.com http://www.securityfocus.com/archive/1/533593/100/0/threaded
- securityfocus.com http://www.securityfocus.com/bid/70103
- ubuntu.com http://www.ubuntu.com/usn/USN-2362-1
- us-cert.gov http://www.us-cert.gov/ncas/alerts/TA14-268A
- vmware.com http://www.vmware.com/security/advisories/VMSA-2014-0010.html
- websense.com http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0
- access.redhat.com https://access.redhat.com/articles/1200223
- access.redhat.com https://access.redhat.com/node/1200223
- bugzilla.redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=1141597
- help.ecostruxureit.com https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes
- kb.bluecoat.com https://kb.bluecoat.com/index?page=content&id=SA82
- kb.juniper.net https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10648
- kc.mcafee.com https://kc.mcafee.com/corporate/index?page=content&id=SB10085
- securityblog.redhat.com https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/
- support.apple.com https://support.apple.com/kb/HT6535
- support.citrix.com https://support.citrix.com/article/CTX200217
- support.citrix.com https://support.citrix.com/article/CTX200223
- support.f5.com https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html
- support.hpe.com https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04497075
- support.hpe.com https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04518183
- supportcenter.checkpoint.com https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk102673&src=securityAlerts
- arista.com https://www.arista.com/en/support/advisories-notices/security-advisories/1008-security-advisory-0006
- exploit-db.com https://www.exploit-db.com/exploits/34879/
- exploit-db.com https://www.exploit-db.com/exploits/37816/
- exploit-db.com https://www.exploit-db.com/exploits/38849/
- exploit-db.com https://www.exploit-db.com/exploits/39918/
- exploit-db.com https://www.exploit-db.com/exploits/40619/
- exploit-db.com https://www.exploit-db.com/exploits/40938/
- exploit-db.com https://www.exploit-db.com/exploits/42938/
- suse.com https://www.suse.com/support/shellshock/
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-6271