Skip to content

Product

ibm software defined network for virtual environments vulnerabilities

2 published CVES affecting ibm software defined network for virtual environments, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
2
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
2

Latest ibm software defined network for virtual environments CVEs

Newest publication first

  1. CVE-2014-7169 GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possi...

    Published
    CriticalCVSS 9.8 EPSS 99.9% CISA KEV added 2022-01-28 Exploited in the wild Public exploit PoC

    GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vect...

  2. CVE-2014-6271 GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as...

    Published
    CriticalCVSS 9.8 EPSS 100.0% CISA KEV added 2022-01-28 Exploited in the wild Framework module Public exploit PoC

    GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.