bash segfaults after applying the shellshock vulnerability fix

Solution In Progress - Updated -

Issue

  • bash segfaults after applying the shellshock vulnerability fix
# bash -c "f() { x() { _;}; x() { _;} <<a; }"
Segmentation fault (core dumped)
  • bash segfaults or crashes while running the shellshock vulnerability check script posted in shellshocker.net
bash-4.1$ curl https://shellshocker.net/shellshock_test.sh | bash
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
101  2533  101  2533    0     0   5542      0 --:--:-- --:--:-- --:--:-- 34229
CVE-2014-6271 (original shellshock): not vulnerable
CVE-2014-6277 (segfault): not vulnerable
CVE-2014-6278 (Florian's patch): not vulnerable
CVE-2014-7169 (taviso bug): not vulnerable
CVE-2014-7186 (redir_stack bug): not vulnerable
CVE-2014-7187 (nested loops off by one): not vulnerable
CVE-2014-//// (exploit 3 on http://shellshocker.net/): not vulnerable

Environment

  • Red Hat Enterprise Linux 5,6,7
  • Red Hat Enterprise Linux ELS 4

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In