Contributions by Angela Golla, Infogram Deputy Editor
Oracle Security Alert for CVE-2014-7169
Security Alert CVE-2014-7169 addresses a publicly disclosed vulnerability affecting GNU Bash. GNU Bash
is a popular open source command line shell incorporated into Linux and other
widely used operating systems. This vulnerability affects multiple Oracle
products. This vulnerability may be remotely exploitable without authentication,
i.e. it may be exploited over a network without the need for a username and
password. A remote user can exploit this vulnerability to execute arbitrary code
on systems that are running affected versions of Bash.
Oracle is still investigating this issue and will provide fixes for affected
products as soon as they have been fully tested and determined to provide
effective mitigation against the vulnerability.
The fixes that are available for immediate application by customers
are listed in the Patch Availability Table. This Security
Alert will be updated when fixes are available for additional affected Oracle
products without sending additional emails to customers. Customers should check
this page for updates.
Due to the severity, public disclosure, and reports of active
exploitation of CVE-2014-7169, Oracle strongly recommends that customers apply
the fixes provided by this Security Alert as soon as they are released by
Oracle.
Official, Youbetcha Legalese
This blog is provided for information purposes only and the contents hereof are subject to change without notice. This blog contains links to articles, sites, blogs, that are created by entities other than Oracle. These links may contain advice, information, and opinion that is incorrect or untested. This blog, links, and other materials contained or referenced in this blog are not warranted to be error-free, nor are they subject to any other warranties or conditions, whether expressed orally or implied in law, including implied warranties and conditions of merchantability or fitness for a particular purpose. We specifically disclaim any liability with respect to this blog, links and other materials contained or referenced in this blog, and no contractual obligations are formed either directly or indirectly by this blog, link or other materials. This blog may not be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without our prior written permission. The opinions and recommendations contained in this blog(including links) do not represent the position of Oracle Corporation.
Oracle, JD Edwards, PeopleSoft, and Siebel are registered trademarks of Oracle Corporation and/or its affiliates. Other names may be trademarks of their respective owners.
No comments:
Post a Comment