Another Major Vulnerability Bashes Systems
Summary: Cisco Talos reported that on 24 September the Bash shell vulnerability CVE-2014-6271 was disclosed, allowing remote code execution because Bash executes code contained in environment variables when a shell is initiated, potentially across a privilege boundary. The flaw affects Bash versions up to and including 4.3, touching many Linux implementations and devices that include Bash for scripting, and Talos observed exploitation in the wild, with indications that at least some activity was an automated attack seeking to install DDoS tools.
Key Takeaway: Because the vulnerability lets almost any tool or malware sample be downloaded and executed, the automated attack already installing DDoS tools is only one of the payloads an intruder could deliver to affected Linux systems and embedded devices.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2014-6271
- Related
- CVE-2014-6271: GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Known Exploited Vulnerabilities · Jan 28, 2022Palo Alto Networks Addresses Bash Vulnerability Shellshock: Mitigation for CVE-2014-6271 Cyber Risks ·Shellshock - Update Bash Immediately! Cyber Risks ·