Description
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271.
Recommended action
Apply updates per vendor instructions.
CISA remediation due date for U.S. federal agencies: 28 Jul 2022.
Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.