Boletines de Vulnerabilidades

Security Bulletin: Vulnerabilities in Bash affect certain Intel Xeon Phi PCIe cards supported in IBM System x servers (CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277, CVE-20


Información sobre el sistema

   
Software afectado IBM

Descripción

Six Bash vulnerabilities were disclosed in September 2014. This bulletin addresses the vulnerabilities that have been referred to as "Bash Bug" or "Shellshock" and two memory corruption vulnerabilities. Bash is used by Intel MPSS (Manycore Platform Software Stack) used with the Intel Xeon Phi PCIe cards resold by IBM that are supported in IBM System x servers. CVE(s): CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277 and CVE-2014-6278 Affected

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_vulnerabilities_in_bash_affect_certain_intel_xeon_phi_pcie_cards_supported_in_ibm_system_x_servers_cve_2014_6271_cve_2014_7169_cve_2014_7186_cve_2014_7187_cve_2014_6277_cve_2014_

Identificadores estándar

Propiedad Valor
CVE

Histórico de versiones

Versión Comentario Fecha
1.0 Advisory issued 2014-11-07

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT