4

We have tons of vmware hosted servers in our DMZ environment, with the recent shellshock bash bug, what do I need to do to protect our environment?

Overachiever
  • 143
  • 1
  • 4
  • 1
    The question is not whether VMWare is affected, but whether the apps you run in your VM guests are. You should check what depends on Bash or what runs shell scripts in general in each of your VMs that accept public connections and make use of untrusted data to run scripts of any kind. – Steve Dodier-Lazaro Sep 25 '14 at 21:28
  • Here is a link to VMWare KB addressing: http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2090740 – Mike Fair Sep 29 '14 at 22:14

1 Answers1

5

The vSECR Team has been actively investigating CVE-2014-6271 aka “Shell Shock” and its impact on their products. Currently VMware has determined that ESXi is not affected and neither are Windows based products including vCenter for Windows. Investigation into other products is ongoing.

For now you are probably safe, but stay tuned! Check http://www.vmware.com/company/news/releases often

Kamic
  • 693
  • 2
  • 5
  • 20