bash segfaults after applying the shellshock vulnerability fix

Solution In Progress - Updated -

Issue

  • bash segfaults after applying the shellshock vulnerability fix
# bash -c "f() { x() { _;}; x() { _;} <<a; }"
Segmentation fault (core dumped)
  • bash segfaults or crashes while running the shellshock vulnerability check script posted in shellshocker.net
bash-4.1$ curl https://shellshocker.net/shellshock_test.sh | bash
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
101  2533  101  2533    0     0   5542      0 --:--:-- --:--:-- --:--:-- 34229
CVE-2014-6271 (original shellshock): not vulnerable
CVE-2014-6277 (segfault): not vulnerable
CVE-2014-6278 (Florian's patch): not vulnerable
CVE-2014-7169 (taviso bug): not vulnerable
CVE-2014-7186 (redir_stack bug): not vulnerable
CVE-2014-7187 (nested loops off by one): not vulnerable
CVE-2014-//// (exploit 3 on http://shellshocker.net/): not vulnerable

Environment

  • Red Hat Enterprise Linux 5,6,7
  • Red Hat Enterprise Linux ELS 4

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content