CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
GNU Bash Remote Code Execution and Arbitrary File Write Vulnerability (Shellshock Incomplete Fix Bypass - CVE-2014-7169)
[Affected Scope] GNU Bash through version 4.3 (patch level bash43-025 and earlier) and other legacy versions
[Impact] Remote attackers can write arbitrary files or execute unauthorized system commands via vectors such as OpenSSH ForceCommand, Apache mod_cgi/mod_cgid, or DHCP client scripts
[Mitigation] Immediately update GNU Bash to the latest patched version using your operating system's package manager and audit environment variable configurations
GNU Bash Remote Code Execution Vulnerability (CVE-2014-6271, Shellshock)
[Affected Scope] All Linux and Unix-like systems running GNU Bash versions up to and including 4.3
[Impact] Remote unauthenticated attackers can execute arbitrary system commands and gain full control of the target server by manipulating environment variables
[Mitigation] Immediately update GNU Bash to the latest patched version using your operating system package manager