TI-2017-13391 CVE-2017-18206 · GHSA-vpqc-mgq5-m5xg
In utils.c in zsh before 5.4, symlink expansion had a buffer overflow.
Priority MEDIUM 48
In utils.c in zsh before 5.4, symlink expansion had a buffer overflow.
RHSA-2018:1932
zsh security update
Released 2018-06-19 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) zsh-4.3.11-8.el6
- Red Hat Enterprise Linux Desktop Optional (v. 6) zsh-html-4.3.11-8.el6
- Red Hat Enterprise Linux HPC Node (v. 6) zsh-4.3.11-8.el6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) zsh-html-4.3.11-8.el6
- Red Hat Enterprise Linux Server (v. 6) zsh-4.3.11-8.el6
- Red Hat Enterprise Linux Server Optional (v. 6) zsh-html-4.3.11-8.el6
- Red Hat Enterprise Linux Workstation (v. 6) zsh-4.3.11-8.el6
- Red Hat Enterprise Linux Workstation Optional (v. 6) zsh-html-4.3.11-8.el6
Fixes 4 records
TI-2014-08228 CVE-2014-10072 · GHSA-qgqf-33rj-w264
In utils.c in zsh before 5.0.6, there is a buffer overflow when scanning very long directory paths for symbolic links.
Priority MEDIUM 47
In utils.c in zsh before 5.0.6, there is a buffer overflow when scanning very long directory paths for symbolic links.
TI-2018-01019 CVE-2018-1100 · GHSA-hwhr-jcvf-mgf3
Buffer overflow in zsh
Priority LOW 35
zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the utils.c:checkmailpath function.
TI-2018-01002 CVE-2018-1083 · GHSA-pqpc-3fmx-3wqw
Buffer overflow in zsh
Priority LOW 35
Zsh before version 5.4.2-test-1 is vulnerable to a buffer overflow in the shell autocomplete functionality.