Shellshock (bug perangkat lunak)

Shellshock
pengidentifikasi CVECVE-2014-6271 (initial),
CVE-2014-6277,
CVE-2014-6278,
CVE-2014-7169,
CVE-2014-7186,
CVE-2014-7187
Tanggal ditemukan12 September 2014; 10 tahun lalu (2014-09-12)
Tanggal ditambal24 September 2014; 10 tahun lalu (2014-09-24)
PenemuStéphane Chazelas
Perangkat lunak yang terpengaruhBash (1.0.3–4.3)

Shellshock, lebih dikenal sebagai Bashdoor,[1] adalah keluarga kekutu keamanan[2] di syel Unix Bash, yang pertama diungkapkan pada 24 September 2014. Shellshock dapat memungkinkan penyerang menyebabkan Bash mengeksekusi perintah sewenang-wenang dan mendapatkan akses tidak sah ke banyak Internet- menghadapi layanan, seperti server web, yang menggunakan Bash untuk memproses permintaan.[3] ke banyak layanan yang terhubung ke Internet, seperti server web, yang menggunakan Bash untuk memproses permintaan.

Pada 12 September 2014, Stéphane Chazelas memberi tahu pengelola Bash, Chet Ramey[1] tentang penemuan bug aslinya, yang disebutnya "Bashdoor". Bekerja sama dengan pakar keamanan, Tn. Chazelas mengembangkan tambalan[1] (memperbaiki) untuk masalah tersebut, yang saat itu telah diberi pengidentifikasi kerentanan CVE-2014-6271.[4] Keberadaan kekutu diumumkan ke publik pada 2014-09-24, ketika pembaruan Bash dengan perbaikan siap didistribusikan.[5]

Bug yang ditemukan Chazelas menyebabkan Bash mengeksekusi perintah secara tidak sengaja ketika perintah digabungkan ke akhir definisi fungsi yang disimpan dalam nilai variabel lingkungan.[1][6] Dalam beberapa hari setelah publikasi, berbagai kerentanan terkait ditemukan (CVE-2014-6277, CVE-2014-6278, CVE-2014-7169, CVE-2014-7186 and CVE-2014-7187). Ramey mengatasinya dengan serangkaian tambalan lebih lanjut.[7][8]

Referensi

  1. ^ a b c d Perlroth, Nicole (25 September 2014). "Security Experts Expect 'Shellshock' Software Bug in Bash to Be Significant". New York Times. Diakses tanggal 25 September 2014. 
  2. ^ Although described in some sources as a "virus," Shellshock is instead a design flaw in a program that comes with some operating systems. See => Staff (25 September 2014). "What does the "Shellshock" bug affect?". The Safe Mac. Diakses tanggal 27 September 2014. 
  3. ^ Seltzer, Larry (29 September 2014). "Shellshock makes Heartbleed look insignificant". ZDNet. Diakses tanggal 29 September 2014. 
  4. ^ Florian Weimer (24 September 2014). "Re: CVE-2014-6271: remote code execution through bash". http://seclists.org/oss-sec/2014/q3/650. 
  5. ^ Florian Weimer (24 September 2014). "Re: CVE-2014-6271: remote code execution through bash". http://seclists.org/oss-sec/2014/q3/666. 
  6. ^ Leyden, John (24 September 2014). "Patch Bash NOW: 'Shell Shock' bug blasts OS X, Linux systems wide open". The Register. Diakses tanggal 25 September 2014. 
  7. ^ Saarinen, Juha (29 September 2014). "Further flaws render Shellshock patch ineffective". iTnews. Diakses tanggal 29 September 2014. 
  8. ^ Vaughan-Nichols, Steven (27 September 2014). "Shellshock: Better 'bash' patches now available". ZDNet. Diakses tanggal 29 September 2014. 

Read other articles:

Dutch cavalry charge during the Second Bone War vteDutch colonial campaigns17th century Bantam (1601) Amboina (1605) Malacca (1606) Cape Rachado (1606) Mozambique (1607) Mozambique (1608) Banda Islands (1609–21) Johor (1613) Macau (1622) Pescadores (1622–24) Salvador (1624) Persian Gulf (1625) Salvador (1625) Elmina (1625) Cuba (1628) Batavia (1628–29) Recife (1630) Abrolhos (1631) Liaoluo Bay (1633) Taiwan (1635–36) Brazil (1636) Liuqiu Island (1636) Porto Calvo (1637) Elmina (1637) Vie…

土库曼斯坦总统土库曼斯坦国徽土库曼斯坦总统旗現任谢尔达尔·别尔德穆哈梅多夫自2022年3月19日官邸阿什哈巴德总统府(Oguzkhan Presidential Palace)機關所在地阿什哈巴德任命者直接选举任期7年,可连选连任首任萨帕尔穆拉特·尼亚佐夫设立1991年10月27日 土库曼斯坦土库曼斯坦政府与政治 国家政府 土库曼斯坦宪法 国旗 国徽 国歌 立法機關(英语:National Council of Turkmenistan) 土…

1930 Broadway three-act play written in blank verse by Maxwell Anderson Elizabeth the QueenFirst edition 1930Written byMaxwell AndersonDate premieredNovember 27, 1930Place premieredGuild TheatreNew York CityOriginal languageEnglishGenreDramaSettingvarious parts of Whitehall palace Elizabeth the Queen was a 1930 Broadway three-act play written in blank verse by Maxwell Anderson, produced by the Theatre Guild, directed by Philip Moeller and with scenic and costume design by Lee Simonson. It ran fo…

此条目序言章节没有充分总结全文内容要点。 (2019年3月21日)请考虑扩充序言,清晰概述条目所有重點。请在条目的讨论页讨论此问题。 哈萨克斯坦總統哈薩克總統旗現任Қасым-Жомарт Кемелұлы Тоқаев卡瑟姆若马尔特·托卡耶夫自2019年3月20日在任任期7年首任努尔苏丹·纳扎尔巴耶夫设立1990年4月24日(哈薩克蘇維埃社會主義共和國總統) 哈萨克斯坦 哈萨克斯坦政府與…

This is the list of cathedrals in Denmark sorted by denomination. St. Canute's Cathedral in Odense. Lutheran Cathedrals of the Danish National Church: St. Budolfi Cathedral in Aalborg Aarhus Cathedral in Århus Cathedral of Our Lady in Copenhagen Haderslev Cathedral in Haderslev Maribo Cathedral in Maribo St. Canute's Cathedral in Odense Cathedral of Our Lady Mary in Ribe Roskilde Cathedral in Roskilde Our Lady Cathedral in Viborg Saint Olaf's Cathedral in Helsingør Cathedral of Our Saviour in …

Cuisine of the Goan Catholic community Rice-Curry-Fish (Xit-Koddi-Nustem), the staple food of the Goan Catholics Pomfret fish pan-fried in Rechado masala Goan Catholic Cuisine is the cuisine of the Goan Catholic community and is largely influenced by Portuguese cuisine.[1] Due to over 450 years of Portuguese rule, the cuisine of Goan Catholics is dominated by ingredients and techniques of Portuguese cuisine like deep-frying, oven-baking, pork, vinegar, egg-based desserts, alcohol, etc. N…

Canadian newspaper of Halifax The CoastTypeAlternative weeklyFormatTabloidOwner(s)Overstory Media GroupPublisherChristine OreskovichEditorKyle ShawFounded1993LanguageEnglishHeadquarters2309 Maynard StreetHalifax, NS B3K 3T8CanadaCirculation22,961[1]Websitethecoast.ca The Coast is a free alternative weekly newspaper in Halifax, Nova Scotia, Canada. The paper distributes 24,000 copies per week throughout the Halifax Regional Municipality. The paper is owned by Overstory Media Group.[2&…

Albania Estación miembro Final Nacional Festivali I Këngës Apariciones 21 (2024) Primera aparición 2004 Mejor resultado Final 5.º 2012 Semifinal 2.º 2012 Peor resultado Final 22.º 2023 Semifinal 17.º 2007 Enlaces externos Sitio oficial de RTSH Página de Albania en Eurovision.tv Albania ha participado en el Festival de la Canción de Eurovisión un total de diecisiete ocasiones, desde su debut en la edición de 2004, en la que Anjeza Shahini terminó en séptimo lugar con la canción «T…

Constitutional provision requiring annual sittings of Parliament Canadian Charterof Rights and Freedoms Part of the Constitution Act, 1982 Preamble Guarantee of Rights and Freedoms 1 Fundamental Freedoms 2 Democratic Rights 3, 4, 5 Mobility Rights 6 Legal Rights 7, 8, 9, 10, 11, 12, 13, 14 Equality Rights 15 Official Languages of Canada 16, 16.1, 17, 18, 19, 20, 21, 22 Minority Language Education Rights 23 Enforcement 24 General 25, 26, 27, 28, 29, 30, 31 Application 32, 33 Citation 34 vte Under…

Zahid MuñozDatos personalesNombre completo Zahid Yibram Muñoz LópezNacimiento Tepatitlán, Jalisco29 de enero de 2001 (23 años)País MéxicoNacionalidad(es) MexicanaAltura 1,83 m (6′ 0″)Carrera deportivaDeporte FútbolClub profesionalDebut deportivo 2019(C. A. Zacatepec)Club F. C. JuárezLiga Primera División de MéxicoPosición CentrocampistaDorsal(es) -Trayectoria C. A. Zacatepec (2019-20) C. D. Guadalajara (2020-21) C. A. San Luis (2021-22) C. D. Guadalajara (2022-23) → F…

Part of a series onForced labour and slavery Contemporary Child labour Child soldiers Conscription Debt Forced marriage Bride buying Child marriage Wife selling Forced prostitution Human trafficking Peonage Penal labour Contemporary Africa 21st-century jihadism Sexual slavery Wage slavery Historical Antiquity Egypt Babylonia Greece Rome Medieval Europe Ancillae Black Sea slave trade Byzantine Empire Kholop Prague slave trade Serfs History In Russia Emancipation Thrall Venetian slave trade Balkan…

LighthouseBooby Island Light Booby Island Lighthouse and one of the deteriorated cottagesLocationBooby Island, Queensland, AustraliaCoordinates10°36′15″S 141°54′40″E / 10.60423°S 141.91107°E / -10.60423; 141.91107TowerConstructed1890 Constructiontimber frame clad with galvanised iron[4]Automated1992 Height59 feet (18 m)[1]Shapeconical tower with balcony and lanternMarkingswhite (tower), red (dome) Heritagelisted on the Q…

هذه المقالة يتيمة إذ تصل إليها مقالات أخرى قليلة جدًا. فضلًا، ساعد بإضافة وصلة إليها في مقالات متعلقة بها. (مارس 2019) فيليكس فلوريس معلومات شخصية الميلاد 29 يناير 1976 (48 سنة)  خوانا دياز  [لغات أخرى]‏  الطول 170 سنتيمتر  الجنسية بورتوريكو  الحياة العملية المهنة ملا…

Voce principale: Campionato mondiale di calcio 2006. Finale del campionato mondiale di calcio 2006Una fase di gioco su palla ferma: di spalle i francesi Thuram e Zidane, sulla destra gli italiani Totti e ToniInformazioni generaliSport Calcio CompetizioneCampionato mondiale di calcio 2006 Data9 luglio 2006 CittàBerlino ImpiantoStadio Olimpico Spettatori69 000 Dettagli dell'incontro Italia Francia 1(5) 1(3) (dopo i tiri di rigore) ArbitroHoracio Elizondo, Luis Medina Cantalejo, Victoriano Gi…

American record label Not to be confused with Deaf Jam, Def Comedy Jam, or Def Poetry Jam. Def Jam RecordingsParent companyUniversal Music Group (UMG)Founded1984; 40 years ago (1984)[1]Founder Rick Rubin[1] Russell Simmons Distributor(s)Universal Music Group (International)0207 Def Jam/EMI (United Kingdom)Island Def Jam (France)UMe (Reissues)Def Jam Africa (South Africa and Nigeria)GenreVarious, predominantly on Hip hop and R&BCountry of originUnited StatesL…

Pour les articles homonymes, voir Loi française pour l'égalité des chances et LEC. La loi pour l'égalité des chances (loi n° 2006-396 du 31 mars 2006), instaure en France diverses mesures relatives à l'emploi et à l'éducation, proposées par le ministre de l'emploi, de la cohésion sociale et du logement, Jean-Louis Borloo[1],[2]. Elle a été annoncée par Matignon comme réponse aux révoltes sociales de l’automne 2005 dans les banlieues françaises. L'amendement le plus polémique …

Ilustrasi Kikimora oleh Ivan Bilibin, 1934. Kikimora (bahasa Rusia: кики́мора) adalah makhluk perempuan dalam mitologi Slavia. Kikimora termasuk dalam makhluk penghun rumah dan kadang-kadang dikatakan menikah dengan Domovoi. Kikimora biasanya tinggal di balik kompor atau di gudang bawah tanah. Jika para pekerja yang membangun rumah merasa tidak senang pada pemlik rumah maka mereka bisa mengundang Kikimora untuk menghantui rumah itu dengan cara menaruh sebuah boneka mirip Kikimora di…

عين جيفالتسميةالاسم الرسمي עין גב (بالعبرية) موقع الويب eingev.co.il التقديمتاريخ التأسيس 1937 تقسيم إداريالبلد إسرائيل[1] التقسيم الأعلى مجلس إقليمي غور الأردن خصائص جغرافيةالارتفاع −210 م السكانعدد السكان 638 (2015)680 (2018) معلومات أخرىمنطقة زمنية ت ع م+02:00 الرمز البريدي 1494000 رمز جيو…

1995 2011 Élections sénatoriales de 2004 dans le Val-d'Oise 26 septembre 2004 Type d’élection Élections sénatoriales Postes à élire 5 sièges de sénateur Le Val-d'Oise de toutes nos forces – Nelly Olin Liste Union pour un mouvement populaire0 Voix 694 33,08 %  Sénateurs élus 2 Rassemblement pour le Progrès – Bernard Angels Liste Parti socialiste0 Voix 550 26,22 %  Sénateurs élus 2  1 Rassemblement Citoyen et Républicain…

Operation in computer graphics A color spectrum image with an alpha channel that falls off to zero at its base, where it is blended with the background color. In computer graphics, alpha compositing or alpha blending is the process of combining one image with a background to create the appearance of partial or full transparency.[1] It is often useful to render picture elements (pixels) in separate passes or layers and then combine the resulting 2D images into a single, final image called…