We have tons of vmware hosted servers in our DMZ environment, with the recent shellshock bash bug, what do I need to do to protect our environment?

  • 1
    The question is not whether VMWare is affected, but whether the apps you run in your VM guests are. You should check what depends on Bash or what runs shell scripts in general in each of your VMs that accept public connections and make use of untrusted data to run scripts of any kind. Sep 25, 2014 at 21:28
  • Here is a link to VMWare KB addressing: kb.vmware.com/selfservice/microsites/…
    – Mike Fair
    Sep 29, 2014 at 22:14

1 Answer 1


The vSECR Team has been actively investigating CVE-2014-6271 aka “Shell Shock” and its impact on their products. Currently VMware has determined that ESXi is not affected and neither are Windows based products including vCenter for Windows. Investigation into other products is ongoing.

For now you are probably safe, but stay tuned! Check http://www.vmware.com/company/news/releases often


Not the answer you're looking for? Browse other questions tagged or ask your own question.