Problemunvalidated
bash initializes, initialize_shell_variables() in variables.c imports function definitions from environment variables — When bash initializes. Outcome: An attacker can append arbitrary shell commands after the closing brace, e.g., VAR='() { :;}; /usr/bin/id', and they will be executed.
724717a3-44fb-4fe6-a72e-b79dc8d1a203
bash initializes, initialize_shell_variables() in variables.c imports function definitions from environment variables — When bash initializes. Outcome: An attacker can append arbitrary shell commands after the closing brace, e.g., VAR='() { :;}; /usr/bin/id', and they will be executed.