ACCESS Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

Alcatel-Lucent Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

Apple Inc. Affected

Notified: September 25, 2014 Updated: October 01, 2014

Status

Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Vendor References

http://support.apple.com/kb/ht6495

AT&T Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

Avaya, Inc. Affected

Notified: September 25, 2014 Updated: September 29, 2014

Status

Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

See the following URL for more information from the vendor.

Vendor References

https://downloads.avaya.com/css/P8/documents/100183009

Addendum

The Avaya Communications Server (CS) 1000 Rls 6 has been reported to be vulnerable.

Barracuda Networks Affected

Notified: September 25, 2014 Updated: September 27, 2014

Status

Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Vendor References

https://www.barracuda.com/support/techalerts

Belkin, Inc. Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

Blue Coat Systems Affected

Notified: September 25, 2014 Updated: September 27, 2014

Status

Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Vendor References

https://kb.bluecoat.com/index?page=content&id=SA82

CA Technologies Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

CentOS Affected

Updated: September 27, 2014

Status

Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Vendor References

http://lists.centos.org/pipermail/centos/2014-September/146099.html

Check Point Software Technologies Affected

Notified: September 25, 2014 Updated: September 27, 2014

Status

Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Vendor References

Cisco Systems, Inc. Affected

Notified: September 25, 2014 Updated: September 26, 2014

Statement Date: September 26, 2014

Status

Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Vendor References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bash

Cray Inc. Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

Cygwin Affected

Updated: September 26, 2014

Status

Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Addendum

https://cygwin.com/ml/cygwin-announce/2014-09/msg00033.html

Debian GNU/Linux Affected

Notified: September 25, 2014 Updated: September 27, 2014

Statement Date: September 25, 2014

Status

Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Vendor References

Dell Computer Corporation, Inc. Affected

Updated: September 27, 2014

Status

Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Vendor References

https://support.software.dell.com/k1000/kb/133191

Addendum

Dell KACE systems use Bash.

D-Link Systems, Inc. Affected

Notified: September 25, 2014 Updated: October 07, 2014

Status

Affected

Vendor Statement

All D-Link Devices and Software have been cleared and are not affected by this vulnerability. All D-Link Services have been audited for the use of bash shell implementations. Based on the results of the audit we have applied appropriate updates, if needed, to close this potential vulnerability. D-Link continues to monitor CERT incase of further issues are reported about the Bash Shell. (Edited: 10/06/2014 15:52 PST)

Vendor Information

Please contact at: security@dlink.com

Vendor References

http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10044

DragonFly BSD Project Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

EMC Corporation Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

Engarde Secure Linux Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

Enterasys Networks Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

Ericsson Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

eSoft, Inc. Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

Extreme Networks Affected

Notified: September 25, 2014 Updated: October 01, 2014

Status

Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Vendor References

http://learn.extremenetworks.com/rs/extreme/images/VN-2014-001-%20GNU%20Bash%20Threats%20-CVE-2014-7169%20rev01.pdf

F5 Networks, Inc. Affected

Notified: September 25, 2014 Updated: September 26, 2014

Status

Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Vendor References

http://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html

Fedora Project Affected

Notified: September 25, 2014 Updated: September 27, 2014

Status

Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Vendor References

http://fedoramagazine.org/shellshock-update-bash-packages-that-resolve-cve-2014-6271-and-cve-2014-7169-available/

FireEye Affected

Updated: October 02, 2014

Status

Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Vendor References

http://www.fireeye.com/resources/pdfs/support-notices/FireEye-Statement-About-Bash-Shellshock-Vulnerability-CVE-2014-6271-and-CVE-2014-7169.pdf

Force10 Networks, Inc. Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

Fortinet, Inc. Affected

Notified: September 25, 2014 Updated: September 26, 2014

Status

Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Vendor References

http://www.fortiguard.com/advisory/FG-IR-14-030/

Foundry Networks, Inc. Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

FreeBSD Project Not Affected

Notified: September 25, 2014 Updated: September 26, 2014

Statement Date: September 25, 2014

Status

Not Affected

Vendor Statement

Currently we have already patched CVE-2014-6271 and CVE-2014-7169 in the FreeBSD ports tree, making it no longer vulnerable to these two issues. We will patch the new issues once the fix is validated. The FreeBSD base system do not use bash at all and is therefore not affected.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Vendor References

https://svnweb.freebsd.org/ports?view=revision&revision=369341

Addendum

FreeBSD has disabled function importing by default in the Bash port.

Fujitsu Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

Gentoo Linux Affected

Notified: September 25, 2014 Updated: September 27, 2014

Status

Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Vendor References

http://www.gentoo.org/security/en/glsa/glsa-201409-09.xml

Global Technology Associates, Inc. Not Affected

Notified: September 25, 2014 Updated: October 01, 2014

Status

Not Affected

Vendor Statement

GTA firewalls running any version of GB-OS are not vulnerable to the "shellshock" exploit.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

GNU Bash Affected

Updated: September 25, 2014

Status

Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Vendor References

http://ftp.gnu.org/gnu/bash/bash-4.3-patches/

Google Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

Hewlett-Packard Company Affected

Notified: September 25, 2014 Updated: September 29, 2014

Status

Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

See the following URL for more information from the vendor.

Vendor References

http://alerts.hp.com/r?2.1.3KT.2ZR.15ee22.L8mgqE..N.ghvS.8f9A.bW89MQ%5f%5fDBOSFQK0

Hitachi Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

IBM Corporation Affected

Notified: September 25, 2014 Updated: September 27, 2014

Status

Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Vendor References

Addendum

AIX Toolbox for Linux Applications provides Bash and is vulnerable. IBM HTTP Server (IHS) is based on Apache and may act as an attack vector, depending on configuration.

IBM Corporation (zseries) Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

IBM eServer Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

Infoblox Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

Intel Corporation Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

Intoto Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

Juniper Networks, Inc. Affected

Notified: September 25, 2014 Updated: September 25, 2014

Statement Date: September 25, 2014

Status

Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Vendor References

http://kb.juniper.net/JSA10648

m0n0wall Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

Mageia Affected

Updated: September 27, 2014

Status

Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Vendor References

http://advisories.mageia.org/MGASA-2014-0388.html

Mandriva S. A. Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

McAfee Affected

Notified: September 25, 2014 Updated: October 07, 2014

Status

Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Vendor References

https://kc.mcafee.com/corporate/index?page=content&id=SB10085

Microsoft Corporation Not Affected

Notified: September 25, 2014 Updated: October 10, 2014

Status

Not Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Monroe Electronics Affected

Updated: October 02, 2014

Status

Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Vendor References

Addendum

DASDEC-1EN running software version 2.0-2 reported to be vulnerable: http://seclists.org/fulldisclosure/2014/Sep/107.

MontaVista Software, Inc. Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

Mozilla Unknown

Notified: October 27, 2014 Updated: October 27, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

NEC Corporation Affected

Notified: September 25, 2014 Updated: October 07, 2014

Status

Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Vendor References

http://jpn.nec.com/security-info/av14-003.html

NetApp Affected

Updated: September 29, 2014

Status

Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

See the following URL for more information from the vendor

Vendor References

https://library.netapp.com/ecm/ecm_get_file/ECMP1655016

NetBSD Not Affected

Notified: September 25, 2014 Updated: September 26, 2014

Status

Not Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Vendor References

http://pkgsrc.se/files.php?messageId=20140925202832.9AD9C98@cvs.netbsd.org

netfilter Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

NIKSUN Affected

Notified: November 10, 2014 Updated: November 11, 2014

Status

Affected

Vendor Statement

Information contained below is subject to change due to the evolving nature of CVE-reported information & available fixes. "ShellShock" CVE-2014-6271 & CVE-2014-7169 are now resolved in software patches made available via NIKSUN SupportNet. NIKSUN has now produced software updates for all supported product lines. We continue to observe activity on the NSON (NIKSUN Security Observation Network) to produce current threat detections â€“ more signatures may be released as we continuously observe behavior globally. Current signatures should be downloaded & installed, available via SupportNet, to get the most out of your NIKSUN security products. The BASH component defect affecting the community-at-large is serious, but unlike the Heartbleed defect, which generically affected many publically available products in exactly the same way, Shellshock requires a specific set of conditions to exist for exploitation. NIKSUN is both a contributor to the open source community as well as a consumer and is leveraging those relationships to bring this issue to a satisfactory close. "ShellShock" CVE-2014-6271 & CVE-2014-7169 are now resolved in software patches made available via NIKSUN SupportNet. NIKSUN has now produced software updates for all supported product lines, with additional work in progress on breaking CVEs related to ShellShock exposed in the last few days â€“ software currently in a quality assurance cycle will become available this week for remaining CVEs associated with ShellShock now that the global community has agreed on a sustainable, supportable fix. We continue to observe activity on the NSON (NIKSUN Security Observation Network) to produce current threat detections with more signatures released as we continuously observe behavior globally. Current signatures should be downloaded & installed, available via SupportNet, to get the most out of your NIKSUN security products. NIKSUN is committed to providing a rapid resolution to this issue while ensuring quality, stability & completeness of a fix. The list below is not a fully comprehensive version list NIKOS Appliance 4.3.2.0 NIKOS Appliance 4.3.1.2 NIKOS Appliance 4.4.1.1 NIKOS Appliance 4.4.1.2 NIKOS Appliance 4.5.0.0_9 NIKOS Appliance 4.5.0.1 NetOmni 4.3.1.2 NetOmni 4.3.2.0 NetOmni 4.4.1.1 NetOmni 4.4.1.2 NetOmni 4.5.0.0 NetOmni 4.5.0.1 NetOmni 4.5.1.0

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Nokia Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

Novell, Inc. Affected

Notified: September 25, 2014 Updated: September 27, 2014

Status

Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Vendor References

http://support.novell.com/security/cve/CVE-2014-6271.html

OpenBSD Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

Openwall GNU/*/Linux Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

Oracle Corporation Affected

Notified: September 25, 2014 Updated: September 29, 2014

Status

Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Vendor References

Addendum

Solaris includes Bash and Oracle Linux is based on Red Hat Linux.

Palo Alto Networks Affected

Notified: September 25, 2014 Updated: September 29, 2014

Status

Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Vendor References

http://securityadvisories.paloaltonetworks.com/

Addendum

See PAN-SA-2012-000{2,3,4,5}. Please use CVE.

Peplink Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

Q1 Labs Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

QNAP Security Affected

Updated: April 14, 2015

Status

Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Vendor References

https://www.qnap.com/i/en/news/con_show.php?op=showone&cid=360

QNX Software Systems Inc. Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

Quagga Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

Red Hat, Inc. Affected

Notified: September 25, 2014 Updated: September 25, 2014

Status

Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Vendor References

SafeNet Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

Slackware Linux Inc. Affected

Notified: September 25, 2014 Updated: September 25, 2014

Statement Date: September 25, 2014

Status

Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Vendor References

http://www.slackware.com/security/viewer.php?l=slackware-security&y=2014&m=slackware-security.522193

SmoothWall Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

Snort Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

Sony Corporation Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

Sophos, Inc. Affected

Updated: September 27, 2014

Status

Affected

Vendor Statement

As far as we are aware, none of Sophos's Linux or UNIX products use Bash in a way that would allow this vulnerability to be exploited with data supplied by an attacker from outside.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Vendor References

Sourcefire Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

Spyrus Unknown

Notified: November 19, 2014 Updated: November 19, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

Stonesoft Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

SUSE Linux Affected

Notified: September 25, 2014 Updated: September 29, 2014

Status

Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Vendor References

Symantec Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

The SCO Group Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

TippingPoint Technologies Inc. Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

Trend Micro Affected

Updated: September 27, 2014

Status

Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Vendor References

http://esupport.trendmicro.com/solution/en-US/1105233.aspx

Turbolinux Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

Ubuntu Affected

Notified: September 25, 2014 Updated: September 27, 2014

Status

Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Vendor References

http://www.ubuntu.com/usn/usn-2362-1/

Unisys Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

VMware Affected

Notified: September 25, 2014 Updated: September 27, 2014

Status

Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Vendor References

http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2090740

Vyatta Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

Watchguard Technologies, Inc. Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

Wind River Systems, Inc. Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

Xirrus Affected

Updated: October 01, 2014

Status

Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Vendor References

http://cdn.xirrus.com/pdf/Statement-on-ShellShock.pdf

ZyXEL Unknown

Notified: September 25, 2014 Updated: September 25, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.