CyberSecBulletin

Mageia vulnerabilities

We track 2 vulnerabilities in Mageia products. 2 are rated high or critical, and 2 have been exploited in real attacks. The most recent was published on September 25, 2014.

2vulnerabilities
2critical
0high
2exploited
9.8average CVSS score

Latest Mageia vulnerabilities

  • 9.8 Critical severity

    GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Exploited

    CVE-2014-7169GNUEPSS 99.9%

    GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as

  • 9.8 Critical severity

    GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Exploited

    CVE-2014-6271GNUEPSS 100%

    GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature