Red Hat Security AdvisoryRHSA-2014:1293
bash security update
Released 2014-09-24 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) bash-3.2-33.el5.1, bash-3.2-33.el5.1.i386, bash-3.2-33.el5.1.ia64 +1
- Red Hat Enterprise Linux Client (v. 7) bash-4.2.45-5.el7_0.2
- Red Hat Enterprise Linux Client Optional (v. 7) bash-doc-4.2.45-5.el7_0.2
- Red Hat Enterprise Linux ComputeNode (v. 7) bash-4.2.45-5.el7_0.2
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) bash-doc-4.2.45-5.el7_0.2
- Red Hat Enterprise Linux Desktop (v. 5 client) bash-3.2-33.el5.1, bash-3.2-33.el5.1.i386
- Red Hat Enterprise Linux Desktop (v. 6) bash-4.1.2-15.el6_5.1
- Red Hat Enterprise Linux Desktop Optional (v. 6) bash-4.1.2-15.el6_5.1, bash-doc-4.1.2-15.el6_5.1
- Red Hat Enterprise Linux HPC Node (v. 6) bash-4.1.2-15.el6_5.1
- Red Hat Enterprise Linux HPC Node Optional (v. 6) bash-4.1.2-15.el6_5.1, bash-doc-4.1.2-15.el6_5.1
- Red Hat Enterprise Linux Server (v. 6) bash-4.1.2-15.el6_5.1
- Red Hat Enterprise Linux Server (v. 7) bash-4.2.45-5.el7_0.2
- Red Hat Enterprise Linux Server Optional (v. 6) bash-4.1.2-15.el6_5.1, bash-doc-4.1.2-15.el6_5.1
- Red Hat Enterprise Linux Server Optional (v. 7) bash-doc-4.2.45-5.el7_0.2
- Red Hat Enterprise Linux Workstation (v. 6) bash-4.1.2-15.el6_5.1
- Red Hat Enterprise Linux Workstation (v. 7) bash-4.2.45-5.el7_0.2
- Red Hat Enterprise Linux Workstation Optional (v. 6) bash-4.1.2-15.el6_5.1, bash-doc-4.1.2-15.el6_5.1
- Red Hat Enterprise Linux Workstation Optional (v. 7) bash-doc-4.2.45-5.el7_0.2
Fixes 1 record
Priority CRITICAL 100KEV
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vec…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.99999 · Published 2014-09-24 · Fixed CWE-78
