Showing posts with label correction of vulnerabilities. Show all posts
Showing posts with label correction of vulnerabilities. Show all posts

Friday, 26 September 2014

In the bash shell was discovered a critical vulnerability

Existed for 22 years flaw allows to remote code execution. 
In the command shell bash, which is  popular in Linux sphere, was discovered a critical vulnerability that allows to remote code execution. According to the scale of the National Institute of Standards and Technology (NIST) it got 10 points.
Vulnerability CVE-2014-6271 is related to incorrect processing of environment variables and function definitions. It is worth noting that in the currently used versions of bash environment variable name and function is the same. In this case, the function definition begins with the characters () {.