Forum Discussion

Craig_C_'s avatar
Craig_C_
Icon for Nimbostratus rankNimbostratus
Sep 24, 2014

Has anyone written an iRule to filter CVE-2014-6271?

CVE-2014-6271 was made public today, potentially wreaking havoc on apache/bash. Has anyone written an iRule to filter this vulnerability from HTTP GET requests?  
application delivery
devops
iRules
John_W__Adams_1's avatar
John_W__Adams_1
Icon for Nimbostratus rankNimbostratus
Jan 20, 2015

We've found that on BIG-IP 9.3.1 Build 37.1, when this iRule tries to load from bigip.conf, it fails and must be reloaded manually.

 

Has anyone else seen this? Has anyone figured out how to make it load correctly?