CVE-2014-6271criticalbajo ataqueCWE-78

CVE-2014-6271

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Bourne-Again Shell+ Monitorear bash

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

100Vexday Risk Score

Corrige ahora. Ella está bajo explotación confirmada por CISA y tiene exploit funcional público.

ssvc Actcvss 9.8epss 100%
de la publicación al armael mismo día
Publicada en NVD24 sept
1ª PoC24 sept
metasploit24 sept
CISA KEV+2683d
Lo que declaran los fabricantes (VEX)

Declaraciones oficiales de los fabricantes en formato CSAF/VEX: si su producto está afectado, ya corregido o descartado — y por qué. Es afirmación del fabricante, no juicio de Vexday.

Red Hatdocumento VEX ↗
Corregido
31 productos (164 componentes)
Red Hat Enterprise Linux (v. 5 server) · Red Hat Enterprise Linux EUS (v. 5.9 server) · Red Hat Enterprise Linux Server (v. 6) · Red Hat Enterprise Linux Server EUS (v. 6.4) · Red Hat Enterprise Linux Server Optional (v. 6) · y otros 26
corrección ↗
Acción exigida por CISAplazo federal: 2022-07-28

Apply updates per vendor instructions.

En resumen

Bash procesa código extra oculto en variables de entorno, permitiendo que atacantes ejecuten comandos arbitrarios en sistemas con versiones vulnerables. Esto afecta servidores que utilizan SSH, servidores web y clientes DHCP.

Detalle técnico

La vulnerabilidad existe en la forma en que Bash analiza definiciones de funciones en variables de entorno; los atacantes pueden inyectar código arbitrario después de una definición de función que se ejecuta con los privilegios del proceso Bash. Los vectores de ataque incluyen comandos forzados SSH, scripts CGI y entornos de cliente DHCP a través de límites de privilegio. El parche inicial (CVE-2014-7169) resultó ser incompleto, dejando abiertos caminos de explotación.

Resumen generado y traducido por IA a partir de la descripción oficial.

El análisis completo de esta CVE está disponible en portugués →

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka "ShellShock." NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Productos afectados
n/a · n/a
PoCs públicas encontradas — 197✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/39918exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/34895exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/34777exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/42938exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/34839exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/34900exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/34765exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/38849exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/34766exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/40938exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/34862exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/35115exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/34896exploitdbwww.exploit-db.com/exploits/34860no verificadoexploitdbwww.exploit-db.com/exploits/37816no verificadoexploitdbwww.exploit-db.com/exploits/36609no verificadoexploitdbwww.exploit-db.com/exploits/35146no verificadoexploitdbwww.exploit-db.com/exploits/34879no verificadoexploitdbwww.exploit-db.com/exploits/36503no verificadoexploitdbwww.exploit-db.com/exploits/40619no verificadoexploitdbwww.exploit-db.com/exploits/36504no verificadogithubgithub.com/opsxcq/exploit-CVE-2014-6271★ 232githubgithub.com/scottjpack/shellshock_scanner★ 46githubgithub.com/hmlio/vaas-cve-2014-6271★ 22githubgithub.com/b4keSn4ke/CVE-2014-6271★ 15githubgithub.com/cj1324/CGIShell★ 13githubgithub.com/francisck/shellshock-cgi★ 12githubgithub.com/indiandragon/Shellshock-Vulnerability-Scan★ 11githubgithub.com/P0cL4bs/ShellShock-CGI-Scan★ 6githubgithub.com/npm/ansible-bashpocalypse★ 6githubgithub.com/J0hnTh3Kn1ght/CVE-2014-6271★ 5githubgithub.com/akr3ch/CVE-2014-6271★ 4githubgithub.com/zalalov/CVE-2014-6271★ 4githubgithub.com/K3ysTr0K3R/CVE-2014-6271-EXPLOIT★ 4githubgithub.com/securusglobal/BadBash★ 4githubgithub.com/0x00-0x00/CVE-2014-6271★ 3githubgithub.com/akiraaisha/shellshocker-python★ 3githubgithub.com/RainMak3r/Rainstorm★ 2githubgithub.com/ramnes/pyshellshock★ 2githubgithub.com/sch3m4/RIS★ 2githubgithub.com/Gurguii/cgi-bin-shellshock★ 1githubgithub.com/TheRealCiscoo/Shellshock-Exploit★ 1githubgithub.com/themson/shellshock★ 1githubgithub.com/im2sinister/CVE-2014-6271★ 1githubgithub.com/APSL/salt-shellshock★ 1githubgithub.com/Anklebiter87/Cgi-bin_bash_Reverse★ 1githubgithub.com/TheRealCiscoo/shellshock-poc★ 1githubgithub.com/mochizuki875/CVE-2014-6271-Apache-Debian★ 1githubgithub.com/0xN7y/CVE-2014-6271★ 1githubgithub.com/RadYio/CVE-2014-6271★ 1githubgithub.com/gabemarshall/shocknaww★ 1githubgithub.com/Any3ite/CVE-2014-6271★ 1githubgithub.com/somhm-solutions/Shell-Shock★ 1githubgithub.com/sunnyjiang/shellshocker-android★ 1githubgithub.com/V3nG4mxV1p3r/Mobile-Drop-Device-SOC-Detection★ 1githubgithub.com/FREEGUY-6/dmz-security-monitoring-hardening★ 1githubgithub.com/proclnas/ShellShock-CGI-Scan★ 1githubgithub.com/ryeyao/CVE-2014-6271_Test★ 1githubgithub.com/villadora/CVE-2014-6271★ 0githubgithub.com/u20024804/bash-4.3-fixed-CVE-2014-6271★ 0githubgithub.com/heikipikker/shellshock-shell★ 0githubgithub.com/shawntns/exploit-CVE-2014-6271★ 0githubgithub.com/Sindadziy/cve-2014-6271★ 0githubgithub.com/rashmikadileeshara/CVE-2014-6271-Shellshock-★ 0githubgithub.com/w4fz5uck5/ShockZaum-CVE-2014-6271★ 0githubgithub.com/andres101c/Shellshock-CVE-2014-6271★ 0githubgithub.com/HevenTafese/Penetration-Testing-Walkthrough-Hacksudo-Thor★ 0githubgithub.com/cyberexpert111/Blind-SSRF-to-Remote-Code-Execution-Shellshock-Professional-Bug-Bounty-Report★ 0githubgithub.com/caverm/Shellshock_CVE-2014-6271★ 0githubgithub.com/mgiftson0/linux-env-vars-shellshock-lab★ 0githubgithub.com/ItzSteve04/shellshock-linux-host-hardening-lab★ 0githubgithub.com/ilismal/Nessus_CVE-2014-6271_check★ 0githubgithub.com/mattclegg/CVE-2014-6271★ 0githubgithub.com/justzx2011/bash-up★ 0githubgithub.com/R3fr4kt/Shocker-TJNULL-OSCP-★ 0githubgithub.com/rrreeeyyy/cve-2014-6271-spec★ 0githubgithub.com/352926/shellshock_crawler★ 0githubgithub.com/kowshik-sundararajan/CVE-2014-6271★ 0githubgithub.com/Pilou-Pilou/docker_CVE-2014-6271.★ 0githubgithub.com/renanvicente/puppet-shellshock★ 0githubgithub.com/MuirlandOracle/CVE-2014-6271-IPFire★ 0githubgithub.com/AlissonFaoli/Shellshock★ 0githubgithub.com/ryancnelson/patched-bash-4.3★ 0githubgithub.com/YunchoHang/CVE-2014-6271-SHELLSHOCK★ 0githubgithub.com/knightc0de/Shellshock_vuln_Exploit★ 0githubgithub.com/mtaha-sec/bash-apocalypse★ 0githubgithub.com/Industri4l-H3ll-Xpl0it3rs/CVE-2014-6271-Shellshock★ 0githubgithub.com/internero/debian-lenny-bash_3.2.52-cve-2014-6271★ 0githubgithub.com/Sindayifu/CVE-2019-14287-CVE-2014-6271★ 0githubgithub.com/mritunjay-k/CVE-2014-6271★ 0githubgithub.com/0xBlackash/CVE-2014-6271★ 0githubgithub.com/ambjlou/it355-lab4-enterprise-lan-security★ 0githubgithub.com/Vaibhav91one/shellshock-cve-lab★ 0githubgithub.com/teedeedubya/bash-fix-exploit★ 0githubgithub.com/woltage/CVE-2014-6271★ 0githubgithub.com/ariarijp/vagrant-shellshock★ 0githubgithub.com/u20024804/bash-3.2-fixed-CVE-2014-6271★ 0githubgithub.com/cved-sources/cve-2014-6271★ 0githubgithub.com/CyberCTF/vulhub-bash-cve-2014-6271★ 0githubgithub.com/jblaine/cookbook-bash-CVE-2014-6271★ 0githubgithub.com/dlitz/bash-cve-2014-6271-fixes★ 0githubgithub.com/u20024804/bash-4.2-fixed-CVE-2014-6271★ 0githubgithub.com/Aruthw/CVE-2014-6271★ 0githubgithub.com/FilipStudeny/-CVE-2014-6271-Shellshock-Remote-Command-Injection-★ 0githubgithub.com/Brandaoo/CVE-2014-6271★ 0githubgithub.com/moften/CVE-2014-6271★ 0githubgithub.com/rsherstnev/CVE-2014-6271★ 0githubgithub.com/Dilith006/CVE-2014-6271★ 0githubgithub.com/huanlu/cve-2014-6271-huan-lu★ 0githubgithub.com/kelleykong/cve-2014-6271-mengjia-kong★ 0githubgithub.com/FacundoMfernandez/pentesting-obioba★ 0githubgithub.com/wenyu1999/bash-shellshock★ 0githubgithub.com/anujbhan/shellshock-victim-host★ 0githubgithub.com/DrHaitham/CVE-2014-6271-Shellshock-★ 0githubgithub.com/hanmin0512/CVE-2014-6271_pwnable★ 0githubgithub.com/ajansha/shellshock★ 0githubgithub.com/kaleth4/-CVE-2014-6271★ 0githubgithub.com/kaleth4/CVE-2014-6271★ 0githubgithub.com/RAJMadhusankha/Shellshock-CVE-2014-6271-Exploitation-and-Analysis★ 0githubgithub.com/cyberharsh/Shellbash-CVE-2014-6271★ 0vulncheckvulncheck.com/xdb/8d2b021f02a5no verificadocve_referencewww.exploit-db.com/exploits/40619/no verificadocve_referencewww.exploit-db.com/exploits/40938/no verificadocve_referencewww.exploit-db.com/exploits/42938/no verificadovulncheckvulncheck.com/xdb/e150360b38d0no verificadocve_referencepacketstormsecurity.com/files/161107/SonicWall-SSL-VPN-Shellshock-Remote-Code-Execution.htmlno verificadocve_referencewww.exploit-db.com/exploits/34879/no verificadocve_referencewww.exploit-db.com/exploits/37816/no verificadocve_referencewww.exploit-db.com/exploits/38849/no verificadocve_referencewww.exploit-db.com/exploits/39918/no verificadovulncheckvulncheck.com/xdb/5f01521408f7no verificadovulncheckvulncheck.com/xdb/7de685550961no verificadovulncheckvulncheck.com/xdb/7deee0fd9deeno verificadovulncheckvulncheck.com/xdb/06510b11bc7fno verificadovulncheckvulncheck.com/xdb/ea6ebbb2e818no verificadovulncheckvulncheck.com/xdb/a6a6593727f9no verificadovulncheckvulncheck.com/xdb/38bec3f859fbno verificadovulncheckvulncheck.com/xdb/bb5d1b3fecc3no verificadovulncheckvulncheck.com/xdb/0c87a5624456no verificadovulncheckvulncheck.com/xdb/5df8e24bf0a1no verificadovulncheckvulncheck.com/xdb/4d2e86dbfb5eno verificadovulncheckvulncheck.com/xdb/b6fa067a48a7no verificadovulncheckvulncheck.com/xdb/576415daacbano verificadovulncheckvulncheck.com/xdb/bf54ee1b08d5no verificadovulncheckvulncheck.com/xdb/819c1fcf3fa1no verificadovulncheckvulncheck.com/xdb/1b466fc06fc0no verificadovulncheckvulncheck.com/xdb/177e5ecfe706no verificadovulncheckvulncheck.com/xdb/b4b5de984e30no verificadovulncheckvulncheck.com/xdb/e8cd174acc84no verificadovulncheckvulncheck.com/xdb/fbb4b4bb3cedno verificadovulncheckvulncheck.com/xdb/990c93705921no verificadovulncheckvulncheck.com/xdb/95ad8f7d9c11no verificadovulncheckvulncheck.com/xdb/04807f4a086eno verificadovulncheckvulncheck.com/xdb/9c92078dc7f6no verificadovulncheckvulncheck.com/xdb/f04bc714ad93no verificadovulncheckvulncheck.com/xdb/3af8913bb29eno verificadovulncheckvulncheck.com/xdb/91302a8a527cno verificadovulncheckvulncheck.com/xdb/e57812c06cafno verificadovulncheckvulncheck.com/xdb/18c86f55b23dno verificadovulncheckvulncheck.com/xdb/462fc384771eno verificadovulncheckvulncheck.com/xdb/fa1741b5fe55no verificadovulncheckvulncheck.com/xdb/137b7b5051c2no verificadovulncheckvulncheck.com/xdb/7f347ea4e4c6no verificadovulncheckvulncheck.com/xdb/4b6744519444no verificadovulncheckvulncheck.com/xdb/2ffa4dfd961ano verificadovulncheckvulncheck.com/xdb/b572ab83cdb5no verificadovulncheckvulncheck.com/xdb/4a31a0cc5806no verificadovulncheckvulncheck.com/xdb/9550fc6e89edno verificadovulncheckvulncheck.com/xdb/1b15435d492fno verificadovulncheckvulncheck.com/xdb/6af12f28ca11no verificadovulncheckvulncheck.com/xdb/87352658799bno verificadovulncheckvulncheck.com/xdb/eb9720b691f3no verificadovulncheckvulncheck.com/xdb/771d67861982no verificadovulncheckvulncheck.com/xdb/ea7dfb5a79c0no verificadovulncheckvulncheck.com/xdb/89cf85aa3c3dno verificadovulncheckvulncheck.com/xdb/37913b9c97afno verificadovulncheckvulncheck.com/xdb/8cb6b0e4bfd9no verificadovulncheckvulncheck.com/xdb/a69624ba8529no verificadovulncheckvulncheck.com/xdb/1d5c31767173no verificadovulncheckvulncheck.com/xdb/daaa4adc42e7no verificadovulncheckvulncheck.com/xdb/e8c47c4cdbc6no verificadovulncheckvulncheck.com/xdb/fc729b077d75no verificadovulncheckvulncheck.com/xdb/9267e8f27a58no verificadovulncheckvulncheck.com/xdb/26a44b1809c1no verificadovulncheckvulncheck.com/xdb/a4dc40b36d10no verificadocve_referencepacketstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.htmlno verificadocve_referencepacketstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.htmlno verificadocve_referencepacketstormsecurity.com/files/128573/Apache-mod_cgi-Remote-Command-Execution.htmlno verificadocve_referencepacketstormsecurity.com/files/137376/IPFire-Bash-Environment-Variable-Injection-Shellshock.htmlno verificadovulncheckvulncheck.com/xdb/a5f2b3ac9e77no verificadovulncheckvulncheck.com/xdb/799f163f1193no verificadovulncheckvulncheck.com/xdb/6eefe54f4c54no verificadovulncheckvulncheck.com/xdb/909ab6e757c3no verificadovulncheckvulncheck.com/xdb/9a279bc7adaano verificadovulncheckvulncheck.com/xdb/b2a3981383e1no verificadovulncheckvulncheck.com/xdb/536bb897776bno verificadovulncheckvulncheck.com/xdb/04b439ea4e9dno verificado
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.