Red Hat Security AdvisoryRHSA-2014:1294
bash security update
Released 2014-09-24 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS (v. 4 ELS) bash-3.0-27.el4.2, bash-3.0-27.el4.2.i386, bash-3.0-27.el4.2.ia64
- Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.4) bash-4.1.2-15.el6_4.1, bash-doc-4.1.2-15.el6_4.1
- Red Hat Enterprise Linux ES (v. 4 ELS) bash-3.0-27.el4.2, bash-3.0-27.el4.2.i386
- Red Hat Enterprise Linux EUS (v. 5.9 server) bash-3.2-32.el5_9.2, bash-3.2-32.el5_9.2.i386, bash-3.2-32.el5_9.2.ia64 +1
- Red Hat Enterprise Linux HPC Node EUS (v. 6.4) bash-4.1.2-15.el6_4.1
- Red Hat Enterprise Linux Long Life (v. 5.6 server) bash-3.2-24.el5_6.1, bash-3.2-24.el5_6.1.i386, bash-3.2-24.el5_6.1.ia64
- Red Hat Enterprise Linux Server AUS (v. 6.2) bash-4.1.2-9.el6_2.1
- Red Hat Enterprise Linux Server EUS (v. 6.4) bash-4.1.2-15.el6_4.1
- Red Hat Enterprise Linux Server Optional AUS (v. 6.2) bash-4.1.2-9.el6_2.1, bash-doc-4.1.2-9.el6_2.1
- Red Hat Enterprise Linux Server Optional EUS (v. 6.4) bash-4.1.2-15.el6_4.1, bash-doc-4.1.2-15.el6_4.1
Fixes 1 record
Priority CRITICAL 100KEV
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vec…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.99999 · Published 2014-09-24 · Fixed CWE-78
