TI-2017-13391 CVE-2017-18206 · GHSA-vpqc-mgq5-m5xg
In utils.c in zsh before 5.4, symlink expansion had a buffer overflow.
Priority MEDIUM 48
In utils.c in zsh before 5.4, symlink expansion had a buffer overflow.
RHSA-2018:3073
zsh security and bug fix update
Released 2018-10-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) zsh-5.0.2-31.el7
- Red Hat Enterprise Linux Client Optional (v. 7) zsh-html-5.0.2-31.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) zsh-5.0.2-31.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) zsh-html-5.0.2-31.el7
- Red Hat Enterprise Linux Server (v. 7) zsh-5.0.2-31.el7
- Red Hat Enterprise Linux Server Optional (v. 7) zsh-html-5.0.2-31.el7
- Red Hat Enterprise Linux Workstation (v. 7) zsh-5.0.2-31.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) zsh-html-5.0.2-31.el7
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) zsh-5.0.2-31.el7
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) zsh-html-5.0.2-31.el7
Fixes 8 records
TI-2014-08228 CVE-2014-10072 · GHSA-qgqf-33rj-w264
In utils.c in zsh before 5.0.6, there is a buffer overflow when scanning very long directory paths for symbolic links.
Priority MEDIUM 47
In utils.c in zsh before 5.0.6, there is a buffer overflow when scanning very long directory paths for symbolic links.
TI-2014-08227 CVE-2014-10071 · GHSA-fw6p-93fm-p636
In exec.c in zsh before 5.0.7, there is a buffer overflow for very long fds in the ">& fd" syntax.
Priority MEDIUM 47
In exec.c in zsh before 5.0.7, there is a buffer overflow for very long fds in the ">& fd" syntax.
TI-2017-13390 CVE-2017-18205 · GHSA-r2ph-r5g8-q5vv
In builtin.c in zsh before 5.4, when sh compatibility mode is used, there is a NULL…
Priority LOW 39
In builtin.c in zsh before 5.4, when sh compatibility mode is used, there is a NULL pointer dereference during processing of the cd command with no argument if HOME is not set.
TI-2018-05457 CVE-2018-7549 · GHSA-mfcw-g327-phj2
In params.c in zsh through 5.4.2, there is a crash during a copy of an empty hash table, as demonstrated by typeset -p.
Priority LOW 38
In params.c in zsh through 5.4.2, there is a crash during a copy of an empty hash table, as demonstrated by typeset -p.
TI-2018-01019 CVE-2018-1100 · GHSA-hwhr-jcvf-mgf3
Buffer overflow in zsh
Priority LOW 35
zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the utils.c:checkmailpath function.
TI-2018-01002 CVE-2018-1083 · GHSA-pqpc-3fmx-3wqw
Buffer overflow in zsh
Priority LOW 35
Zsh before version 5.4.2-test-1 is vulnerable to a buffer overflow in the shell autocomplete functionality.
TI-2018-00991 CVE-2018-1071 · GHSA-xc49-qj7m-vpp4
Stack-based buffer overflow in zsh
Priority LOW 25
zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the exec.c:hashcmd() function.