CVE-2014-6271 Shellshocked

It's a good thing we are naming all of our vulnerabilities now; it's easier to keep track of them. I haven't seen an official designation for CVE-2014-6271, but Shellshock seems appropriate. This ...

Published Sep 25, 2014

Version 1.0

Jeff_Costlow_10

Historic F5 Account

Joined January 26, 2005

Jeff_Costlow_10

Historic F5 Account

Joined January 26, 2005

Sam_Pickles_110

Icon for Nimbostratus rank

Nimbostratus

Sep 25, 2014

Johny, a custom signature may be used in ASM to block Shellshock: https://auraredeye.zendesk.com/entries/56168065-Shellshock-CVE-2014-6271-Mitigation-Custom-ASM-signature This has been working well for us in production so far; we've blocked a lot of attempts particularly over the past 24 hours.