bash segfaults after applying the shellshock vulnerability fix
Issue
- bash segfaults after applying the shellshock vulnerability fix
# bash -c "f() { x() { _;}; x() { _;} <<a; }"
Segmentation fault (core dumped)
- bash segfaults or crashes while running the shellshock vulnerability check script posted in shellshocker.net
bash-4.1$ curl https://shellshocker.net/shellshock_test.sh | bash
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
101 2533 101 2533 0 0 5542 0 --:--:-- --:--:-- --:--:-- 34229
CVE-2014-6271 (original shellshock): not vulnerable
CVE-2014-6277 (segfault): not vulnerable
CVE-2014-6278 (Florian's patch): not vulnerable
CVE-2014-7169 (taviso bug): not vulnerable
CVE-2014-7186 (redir_stack bug): not vulnerable
CVE-2014-7187 (nested loops off by one): not vulnerable
CVE-2014-//// (exploit 3 on http://shellshocker.net/): not vulnerable
Environment
- Red Hat Enterprise Linux 5,6,7
- Red Hat Enterprise Linux ELS 4
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.