Zsh Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Zsh Project records in CISA KEV

No Zsh Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Zsh 3 records MEDIUM

Records

3 records in Zsh · all components

TI-2014-08228 CVE-2014-10072 · GHSA-qgqf-33rj-w264

In utils.c in zsh before 5.0.6, there is a buffer overflow when scanning very long directory paths for symbolic links.

MEDIUM 47

In utils.c in zsh before 5.0.6, there is a buffer overflow when scanning very long directory paths for symbolic links.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02586 Published 2018-02-27 Partial fix CWE-119

TI-2017-13390 CVE-2017-18205 · GHSA-r2ph-r5g8-q5vv

In builtin.c in zsh before 5.4, when sh compatibility mode is used, there is a NULL…

LOW 39

In builtin.c in zsh before 5.4, when sh compatibility mode is used, there is a NULL pointer dereference during processing of the cd command with no argument if HOME is not set.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.02043 Published 2018-02-27 Partial fix CWE-476

TI-2014-08226 CVE-2014-10070 · GHSA-4x2g-x3r2-29r6

zsh before 5.0.7 allows evaluation of the initial values of integer variables imported…

LOW 35

zsh before 5.0.7 allows evaluation of the initial values of integer variables imported from the environment (instead of treating them as literal numbers).

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00487 Published 2018-02-27 Will not fix CWE-264

Open these records in search →

Critical	1
High	2
Medium	0
Low	0
No CVSS	0