|
Description
|
|
A vulnerability has been reported in GNU Bash, which can be exploited by malicious people to compromise a vulnerable system.
The vulnerability is caused due to an error when parsing shell function definitions passed via environment variables and can be exploited to e.g. execute arbitrary shell commands via a specially crafted environment variable value passed to a CGI script via certain HTTP headers.
Note: Reportedly, this is currently being exploited in limited attacks in the wild.
The vulnerability is reported in versions 3.0 through 4.3.
|
