Systems & Memory
Shellshock
The nickname for CVE-2014-6271, a Bash flaw where text after an exported function in an environment variable was run as commands.
In more detail
Services that passed outside input into environment variables before starting Bash, such as CGI web scripts, let remote visitors run commands. The first fix was incomplete, leading to a second identifier, CVE-2014-7169.
