Forest Global Training Partners

Cyber Risks · Unit 42 Palo Alto Networks

Palo Alto Networks Addresses Bash Vulnerability Shellshock: Mitigation for CVE-2014-6271

Summary: On September 24, multiple Linux vendors disclosed CVE-2014-6271, a flaw in Bash found by Stephane Chazelas of SeeByte, Ltd., which causes the shell to execute code appended after a function definition in an environment variable. Palo Alto Networks issued an emergency IPS content release with Signature ID 36729, and said all PAN-OS and Panorama versions include the vulnerable Bash but are only exploitable by authenticated users.

Bottom line: Every Bash version stretching back over two decades is vulnerable, so well-maintained systems get patched while the dusty system in the networking closet may never be - and mass scanning of the Internet for vulnerable hosts was already underway at disclosure.

Read the original at Unit 42 Palo Alto Networks ↗

Topics
Vulnerabilities & Patching
Mentions
CVE-2014-6271
Related