Summary
Stephane Chazelas discovered that Bash incorrectly handled trailing code in
function definitions. An attacker could use this issue to bypass
environment restrictions, such as SSH forced command environments.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | bash | 4.3-7ubuntu1.1 |
Vulnerabilities 1
-
Critical 9.8
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, whic…
KEV Jan 28, 2022
References
-
report
https://ubuntu.com/security/CVE-2014-6271