Back to the CVE list
CVE-2014-6278 CISA KEV · Actively exploited

bash: incorrect parsing of function definitions with nested command substitutions

CVSS score

7.5

EPSS probability

%99.7

Risk score

15.0

Published

12 y ago

OverviewPublic Exploits (5)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

E
Sun Secure Global Desktop and Oracle Global Desktop 4.61.915 - Command Injection (Shellshock)
Exploit-DB

Sun Secure Global Desktop and Oracle Global Desktop 4.61.915 - Command Injection (Shellshock)

Exploit referenceSource updated: 06.06.2016 00:00:00
E
Cisco UCS Manager 2.1(1b) - Remote Command Injection (Shellshock)
Exploit-DB

Cisco UCS Manager 2.1(1b) - Remote Command Injection (Shellshock)

Exploit referenceSource updated: 16.03.2016 00:00:00
E
Apache mod_cgi - 'Shellshock' Remote Command Injection
Exploit-DB

Apache mod_cgi - 'Shellshock' Remote Command Injection

Exploit referenceSource updated: 06.10.2014 00:00:00
E
GNU bash 4.3.11 - Environment Variable dhclient
Exploit-DB

GNU bash 4.3.11 - Environment Variable dhclient

Exploit referenceSource updated: 02.10.2014 00:00:00
E
dhclient 4.1 - Bash Environment Variable Command Injection (Shellshock)
Exploit-DB

dhclient 4.1 - Bash Environment Variable Command Injection (Shellshock)

Exploit referenceSource updated: 29.09.2014 00:00:00

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2014-6278"