TI-2017-13391 CVE-2017-18206 · GHSA-vpqc-mgq5-m5xg
In utils.c in zsh before 5.4, symlink expansion had a buffer overflow.
Priority MEDIUM 48
In utils.c in zsh before 5.4, symlink expansion had a buffer overflow.
zsh
Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
zsh records in CISA KEVNo zsh vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
13 records
TI-2018-09527 CVE-2018-13259 · GHSA-8vj4-q4ww-8jf3
Improper input validation in zsh before 5.6
Priority MEDIUM 47
An issue was discovered in zsh before 5.6.
TI-2018-05456 CVE-2018-7548 · GHSA-52h6-vcv4-gr3c
In subst.c in zsh through 5.4.2, there is a NULL pointer dereference when using ${(PA)...} on an empty array result.
Priority MEDIUM 47
In subst.c in zsh through 5.4.2, there is a NULL pointer dereference when using ${(PA)...} on an empty array result.
TI-2018-00459 CVE-2018-0502 · GHSA-m962-vg7f-29fx
Improper input validation in zsh before 5.6
Priority MEDIUM 47
An issue was discovered in zsh before 5.6.
TI-2014-08227 CVE-2014-10071 · GHSA-fw6p-93fm-p636
In exec.c in zsh before 5.0.7, there is a buffer overflow for very long fds in the ">& fd" syntax.
Priority MEDIUM 47
In exec.c in zsh before 5.0.7, there is a buffer overflow for very long fds in the ">& fd" syntax.
TI-2016-08755 CVE-2016-10714 · GHSA-86jf-f87h-wc84
In zsh before 5.3, an off-by-one error resulted in undersized buffers that were intended to support PATH_MAX characters.
Priority MEDIUM 46
In zsh before 5.3, an off-by-one error resulted in undersized buffers that were intended to support PATH_MAX characters.
TI-2021-20533 CVE-2021-45444 · GHSA-735j-r9q6-48mw
In zsh before 5.8.1, an attacker can achieve code execution if they control a command…
Priority LOW 38
In zsh before 5.8.1, an attacker can achieve code execution if they control a command output inside the prompt, as demonstrated by a %F argument.
TI-2018-05457 CVE-2018-7549 · GHSA-mfcw-g327-phj2
In params.c in zsh through 5.4.2, there is a crash during a copy of an empty hash table, as demonstrated by typeset -p.
Priority LOW 38
In params.c in zsh through 5.4.2, there is a crash during a copy of an empty hash table, as demonstrated by typeset -p.
TI-2019-14464 CVE-2019-20044 · GHSA-gwf9-995r-26hx
In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by…
Priority LOW 35
In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option.
TI-2018-01019 CVE-2018-1100 · GHSA-hwhr-jcvf-mgf3
Buffer overflow in zsh
Priority LOW 35
zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the utils.c:checkmailpath function.
TI-2018-01002 CVE-2018-1083 · GHSA-pqpc-3fmx-3wqw
Buffer overflow in zsh
Priority LOW 35
Zsh before version 5.4.2-test-1 is vulnerable to a buffer overflow in the shell autocomplete functionality.
TI-2018-00991 CVE-2018-1071 · GHSA-xc49-qj7m-vpp4
Stack-based buffer overflow in zsh
Priority LOW 25
zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the exec.c:hashcmd() function.
TI-2007-05924 CVE-2007-6209 · GHSA-jvq3-qvh3-fg4x
Util/difflog.pl in zsh 4.3.4 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
Priority LOW 21
Util/difflog.pl in zsh 4.3.4 allows local users to overwrite arbitrary files via a symlink attack on temporary files.