ansible_shellshock_test.yml

- name: Ensure bash is not vulnerable CVE-2014-6271
  command: env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
  register: shellshock
  failed_when: "'vulnerable' in shellshock.stdout"
  tags:
    - CVE
    - CVE-2014-6271  

- name: Ensure bash is not vulnerable CVE-2014-7186
  command: bash -c 'true <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF' || echo "CVE-2014-7186 vulnerable, redir_stack"
  register: shellshock
  failed_when: "'vulnerable' in shellshock.stdout"
  tags:
    - CVE
    - CVE-2014-7186

- name: Ensure bash is not vulnerable CVE-2014-7187
  command: (for x in {1..200} ; do echo "for x$x in ; do :"; done; for x in {1..200} ; do echo done ; done) | bash || echo "CVE-2014-7187 vulnerable, word_lineno"
  register: shellshock
  failed_when: "'vulnerable' in shellshock.stdout"
  tags:
    - CVE
    - CVE-2014-7187