Gravedad: Cr¨ªtico
  Identificadores de CVE : CVE-2014-7187
  Fecha recomendada: 28 de septiembre de 2014

  Descripci¨®n

Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via deeply nested for loops, aka the "word_lineno" issue.

  Revelaci¨®n de la informaci¨®n

Apply associated live casino online DPI Rules.

  Soluciones

  live casino online Deep Security DPI Rule Number: 1006261
  live casino online Deep Security DPI Rule Name: 1006261 - Identified Suspicious Bash ShellShock Attack

  Software y versi¨®n afectados

  • gnu bash 1.14.0
  • gnu bash 1.14.1
  • gnu bash 1.14.2
  • gnu bash 1.14.3
  • gnu bash 1.14.4
  • gnu bash 1.14.5
  • gnu bash 1.14.6
  • gnu bash 1.14.7
  • gnu bash 2.0
  • gnu bash 2.01
  • gnu bash 2.01.1
  • gnu bash 2.02
  • gnu bash 2.02.1
  • gnu bash 2.03
  • gnu bash 2.04
  • gnu bash 2.05
  • gnu bash 3.0
  • gnu bash 3.0.16
  • gnu bash 3.1
  • gnu bash 3.2
  • gnu bash 3.2.48
  • gnu bash 4.0
  • gnu bash 4.1
  • gnu bash 4.2
  • gnu bash 4.3

  La otra informaci¨®n

  • GNU Bash redir_stack Remote Code Execution Vulnerability
  • GNU Bash Environment Variable Command Injection Vulnerability (CVE-2014-6277)
  • Bash Vulnerability Shellshock (CVE-2014-6271)
  • Bash Vulnerability Shellshock (CVE-2014-7169)