Skip to content
NewA calmer, faster ZeroHour
Vulnerabilitymedium

Shellshock

Cisco Talos ()2 min read3 · 2 reads
Read at blog.talosintelligence.com
Analyze CVE-2014-6271 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2014-6271CVE-2014-7169
Tags
cve-2014-6271cve-2014-7169vulnerability

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2014-6271
Arbitrary Code Execution in GNU Bash (Shellshock)
—100%KEV—
KEV
CVE-2014-7169
Arbitrary Code Execution in GNU Bash via Environment Variables (Shellshock Follow-Up)
—100%KEV—
KEV

Indicators of compromise

auto-extracted · verify before use · export allAll
TypeIndicatorContext
sha2562d3e0be24ef668b85ed48e81ebb50dce50612fb8dce96879f80306701bc41614llowing ELF binaries have been observed in the wild so far: 2d3e0be24ef668b85ed48e81ebb50dce50612fb8dce96879f80306701bc41614 3b13eef9b24919dc7e7071068a83defcc4808a41dc86fadf039e08dce11
sha2563b13eef9b24919dc7e7071068a83defcc4808a41dc86fadf039e08dce1107f7dbe24ef668b85ed48e81ebb50dce50612fb8dce96879f80306701bc41614 3b13eef9b24919dc7e7071068a83defcc4808a41dc86fadf039e08dce1107f7d 73b0d95541c84965fa42c3e257bb349957b3be626dec9d55efcc6ebcba6
sha25673b0d95541c84965fa42c3e257bb349957b3be626dec9d55efcc6ebcba6fa489ef9b24919dc7e7071068a83defcc4808a41dc86fadf039e08dce1107f7d 73b0d95541c84965fa42c3e257bb349957b3be626dec9d55efcc6ebcba6fa489 ae3b4f296957ee0a208003569647f04e585775be1f3992921af996b320c
sha256ae3b4f296957ee0a208003569647f04e585775be1f3992921af996b320cf520b95541c84965fa42c3e257bb349957b3be626dec9d55efcc6ebcba6fa489 ae3b4f296957ee0a208003569647f04e585775be1f3992921af996b320cf520b We'll be writing more on this subject early next week as we

From the original article

2 min read at blog.talosintelligence.com

Shellshock is a serious vulnerability. Bash, arguably the most widely distributed shell on Linux systems, fails to correctly parse environment variables with function declarations. Why the fuss over environment variables?

Cisco Talos

blog.talosintelligence.com

Read the full article at Cisco Talos

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.