2

To know if you are vulnerable, you can run:

env X="() { :;} ; echo busted" /bin/sh -c "echo completed"
env X="() { :;} ; echo busted" `which bash` -c "echo completed"

If you see "busted" then you are vulnerable.

Is there a patch yet?

ONeZetty
  • 613

0 Answers0