{"id":"CVE-2019-20044","aliases":["ALPINE-CVE-2019-20044","ALSA-2020:0903","CLSA-2022-1648138003","CLSA-2025-1761673667","DEBIAN-CVE-2019-20044","DLA-2117-1","DLA-2470-1","EUVD-2019-10600","GHSA-gwf9-995r-26hx","MGASA-2020-0107","RHSA-2020:0853","RHSA-2020:0892","RHSA-2020:0903","RHSA-2020:0978","RLSA-2020:0903","SUSE-SU-2022:0732-1","SUSE-SU-2022:0733-1","SUSE-SU-2022:0735-1","SUSE-SU-2022:14910-1","UBUNTU-CVE-2019-20044","USN-5325-1","openSUSE-SU-2022:0735-1","openSUSE-SU-2024:11543-1"],"status":"published","title":"In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no...","description":"In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh fails to overwrite the saved uid, so the original privileges can be restored by executing MODULE_PATH=/dir/with/module zmodload with a module that calls setuid().","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00476,"percentile":0.41368,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-273"],"published":"2020-02-24T00:00:00Z","modified":"2026-10-29T11:00:07Z","fixes":[{"ecosystem":"Alpine:v3.12","package":"zsh","fixed_in":["5.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"zsh","fixed_in":["5.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"zsh","fixed_in":["5.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"zsh","fixed_in":["5.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"zsh","fixed_in":["5.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"zsh","fixed_in":["5.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"zsh","fixed_in":["5.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"zsh","fixed_in":["5.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"zsh","fixed_in":["5.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"zsh","fixed_in":["5.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"zsh","fixed_in":["5.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"zsh","fixed_in":["5.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"zsh","fixed_in":["5.8-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"zsh-html","fixed_in":["5.5.1-6.el8_1.2"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"zsh","fixed_in":["5.7.1-1+deb10u1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"zsh-common","fixed_in":["5.7.1-1+deb10u1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"zsh-dev","fixed_in":["5.7.1-1+deb10u1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"zsh-doc","fixed_in":["5.7.1-1+deb10u1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"zsh-static","fixed_in":["5.7.1-1+deb10u1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"zsh","fixed_in":["5.8-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"zsh","fixed_in":["5.8-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"zsh","fixed_in":["5.8-1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"zsh","fixed_in":["5.0.7-5+deb8u1"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"zsh","fixed_in":["5.7.1-1.1.mga7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"zsh","fixed_in":["0:5.0.2-34.el7_7.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"zsh-debuginfo","fixed_in":["0:5.0.2-34.el7_7.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"zsh-html","fixed_in":["0:5.0.2-34.el7_7.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"zsh","fixed_in":["0:5.0.2-34.el7_7.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"zsh-debuginfo","fixed_in":["0:5.0.2-34.el7_7.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"zsh-html","fixed_in":["0:5.0.2-34.el7_7.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"zsh","fixed_in":["0:5.0.2-34.el7_7.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"zsh-debuginfo","fixed_in":["0:5.0.2-34.el7_7.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"zsh-html","fixed_in":["0:5.0.2-34.el7_7.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"zsh","fixed_in":["0:5.0.2-34.el7_7.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"zsh-debuginfo","fixed_in":["0:5.0.2-34.el7_7.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"zsh-html","fixed_in":["0:5.0.2-34.el7_7.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"zsh","fixed_in":["0:4.3.11-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"zsh-debuginfo","fixed_in":["0:4.3.11-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"zsh-html","fixed_in":["0:4.3.11-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"zsh","fixed_in":["0:4.3.11-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"zsh-debuginfo","fixed_in":["0:4.3.11-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"zsh-html","fixed_in":["0:4.3.11-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"zsh","fixed_in":["0:4.3.11-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"zsh-debuginfo","fixed_in":["0:4.3.11-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"zsh-html","fixed_in":["0:4.3.11-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"zsh","fixed_in":["0:4.3.11-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"zsh-debuginfo","fixed_in":["0:4.3.11-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"zsh-html","fixed_in":["0:4.3.11-11.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"zsh-html","fixed_in":["0:5.5.1-6.el8_1.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"zsh","fixed_in":["0:5.5.1-6.el8_1.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"zsh-debuginfo","fixed_in":["0:5.5.1-6.el8_1.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"zsh-debugsource","fixed_in":["0:5.5.1-6.el8_1.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"zsh-html","fixed_in":["0:5.5.1-6.el8_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::baseos","package":"zsh","fixed_in":["0:5.5.1-6.el8_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::baseos","package":"zsh-debuginfo","fixed_in":["0:5.5.1-6.el8_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::baseos","package":"zsh-debugsource","fixed_in":["0:5.5.1-6.el8_0.2"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"zsh","fixed_in":["0:5.5.1-6.el8_1.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"zsh","fixed_in":["5.1.1-1ubuntu2.3+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"zsh","fixed_in":["5.4.2-3ubuntu3.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.12","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"zsh-html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.1-6.el8_1.2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1-1ubuntu2.3+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"zsh-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1-1ubuntu2.3+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"zsh-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1-1ubuntu2.3+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"zsh-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1-1ubuntu2.3+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"zsh-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1-1ubuntu2.3+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.1-1+deb10u1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"zsh-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.1-1+deb10u1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"zsh-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.1-1+deb10u1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"zsh-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.1-1+deb10u1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"zsh-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.1-1+deb10u1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.7-5+deb8u1"}]}],"versions":["5.0.7-5"]},{"source":"osv","ecosystem":"Debian:9","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.1-4+deb9u1"}]}],"versions":["5.3.1-4"],"bundled":7},{"source":"osv","ecosystem":"Mageia:7","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.1-1.1.mga7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.2-34.el7_7.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"zsh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.2-34.el7_7.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"zsh-html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.2-34.el7_7.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.2-34.el7_7.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"zsh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.2-34.el7_7.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"zsh-html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.2-34.el7_7.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.2-34.el7_7.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"zsh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.2-34.el7_7.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"zsh-html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.2-34.el7_7.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.2-34.el7_7.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"zsh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.2-34.el7_7.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"zsh-html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.2-34.el7_7.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.11-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"zsh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.11-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"zsh-html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.11-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.11-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"zsh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.11-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"zsh-html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.11-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.11-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"zsh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.11-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"zsh-html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.11-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.11-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"zsh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.11-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"zsh-html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.11-11.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"zsh-html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.1-6.el8_1.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.1-6.el8_1.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"zsh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.1-6.el8_1.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"zsh-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.1-6.el8_1.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"zsh-html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.1-6.el8_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::baseos","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.1-6.el8_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::baseos","package":"zsh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.1-6.el8_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::baseos","package":"zsh-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.1-6.el8_0.2"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.1-6.el8_1.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-3.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-3.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-3.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-3.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.5-6.19.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.5-6.19.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.5-6.19.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.5-6.19.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.5-6.19.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.5-6.19.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.5-6.19.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.5-6.19.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.5-6.19.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.5-6.19.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.5-6.19.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.5-6.19.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.5-6.19.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-7.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-7.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-7.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-7.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-7.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-7.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-7.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-7.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-7.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-7.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-7.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-7.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-7.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-7.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-7.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-7.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-7.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.6-67.9.8.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.6-67.9.8.1"}]}],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1-1ubuntu2.3+esm1"}]}],"versions":["5.1.1-1ubuntu1","5.1.1-1ubuntu2","5.1.1-1ubuntu2.1","5.1.1-1ubuntu2.2","5.1.1-1ubuntu2.3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.2-3ubuntu3.2"}]}],"versions":["5.2-5ubuntu1","5.4.2-3ubuntu1","5.4.2-3ubuntu2","5.4.2-3ubuntu3","5.4.2-3ubuntu3.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8-6build1","5.8-10","5.8.1-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1-1ubuntu2.3+esm1"}]}],"versions":["5.1.1-1ubuntu1","5.1.1-1ubuntu2","5.1.1-1ubuntu2.1","5.1.1-1ubuntu2.2","5.1.1-1ubuntu2.3"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.2-3ubuntu3.2"}]}],"versions":["5.2-5ubuntu1","5.4.2-3ubuntu1","5.4.2-3ubuntu2","5.4.2-3ubuntu3","5.4.2-3ubuntu3.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-3ubuntu1.1"}]}],"versions":["5.7.1-1ubuntu2","5.8-2ubuntu2","5.8-3ubuntu1"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-7.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"zsh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-7.7"}]}],"bundled":6}],"products":[{"vendor":"apple","product":"ipados"},{"vendor":"apple","product":"iphone_os"},{"vendor":"apple","product":"mac_os_x"},{"vendor":"apple","product":"tvos"},{"vendor":"apple","product":"watchos"},{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"zsh","product":"zsh"}],"references":[{"url":"http://zsh.sourceforge.net/releases.html","tags":["x_refsource_MISC","x_transferred","Release Notes","Third Party Advisory","advisory","article"]},{"url":"https://github.com/XMB5/zsh-privileged-upgrade","tags":["x_refsource_MISC","x_transferred","Broken Link","package"]},{"url":"https://www.zsh.org/mla/zsh-announce/141","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory","advisory","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/03/msg00004.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FP64FFIZI2CKQOEAOI5A72PVQULE7ZZC/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PN5V7MPHRRP7QNHOEK56S7QGRU53WUN6/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/202003-55","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://support.apple.com/kb/HT211170","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://support.apple.com/kb/HT211175","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://support.apple.com/kb/HT211171","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://support.apple.com/kb/HT211168","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://seclists.org/fulldisclosure/2020/May/49","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://seclists.org/fulldisclosure/2020/May/55","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://seclists.org/fulldisclosure/2020/May/53","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://seclists.org/fulldisclosure/2020/May/59","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://support.apple.com/HT211168","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://support.apple.com/HT211170","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://support.apple.com/HT211171","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://support.apple.com/HT211175","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/12/msg00000.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-20044","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FP64FFIZI2CKQOEAOI5A72PVQULE7ZZC/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PN5V7MPHRRP7QNHOEK56S7QGRU53WUN6/"},{"url":"https://github.com/advisories/GHSA-gwf9-995r-26hx"},{"url":"https://security.alpinelinux.org/vuln/CVE-2019-20044","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2019-20044","tags":["report"]},{"url":"https://errata.cloudlinux.com/ubuntu16_04/CLSA-2022-1648138003","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2025-1761673667.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-20044","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0107.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=26252","tags":["report"]},{"url":"https://www.debian.org/lts/security/2020/dla-2117","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0853","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1804859","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0853.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-20044","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-20044","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0892","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0892.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0903","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0903.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0978","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0978.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2020:0903","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220732-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1163882","tags":["report"]},{"url":"https://bugzilla.suse.com/1196435","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-45444","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220733-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1089030","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1100","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220735-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-202214910-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1082885","tags":["report"]},{"url":"https://bugzilla.suse.com/1082975","tags":["report"]},{"url":"https://bugzilla.suse.com/1082977","tags":["report"]},{"url":"https://bugzilla.suse.com/1082991","tags":["report"]},{"url":"https://bugzilla.suse.com/1082998","tags":["report"]},{"url":"https://bugzilla.suse.com/1083002","tags":["report"]},{"url":"https://bugzilla.suse.com/1083250","tags":["report"]},{"url":"https://bugzilla.suse.com/1084656","tags":["report"]},{"url":"https://bugzilla.suse.com/1087026","tags":["report"]},{"url":"https://bugzilla.suse.com/1107294","tags":["report"]},{"url":"https://bugzilla.suse.com/1107296","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2014-10070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-10071","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-10072","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10714","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1071","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1083","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-13259","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7549","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2019-20044","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5325-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-45444","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BYQO6XCA5HFPKOF2ANXLGSZGFT63LHPA/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2019-20044","description":"In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh fails to overwrite the saved uid, so the original privileges can be restored by executing MODULE_PATH=/dir/with/module zmodload with a module that calls setuid().","status":"published","published":"2020-02-24T13:09:43Z","modified":"2024-08-05T02:32:10.48Z","updated_at":"2026-11-02T14:20:17.11067Z"}],"euvd":[{"id":"EUVD-2019-10600","description":"In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh fails to overwrite the saved uid, so the original privileges can be restored by executing MODULE_PATH=/dir/with/module zmodload with a module that calls setuid().","status":"published","published":"2020-02-24T13:09:43Z","modified":"2024-08-05T02:32:10Z","updated_at":"2026-11-03T02:40:23.251012Z"}],"ghsa":[{"id":"GHSA-gwf9-995r-26hx","title":"In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no...","description":"In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh fails to overwrite the saved uid, so the original privileges can be restored by executing MODULE_PATH=/dir/with/module zmodload with a module that calls setuid().","status":"published","published":"2022-05-24T17:09:32Z","modified":"2023-02-02T05:01:14Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-273"],"updated_at":"2026-11-02T14:51:08.679679Z"}],"nvd":[{"id":"CVE-2019-20044","description":"In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh fails to overwrite the saved uid, so the original privileges can be restored by executing MODULE_PATH=/dir/with/module zmodload with a module that calls setuid().","status":"published","published":"2020-02-24T14:15:11.667Z","modified":"2026-06-17T02:29:53.25Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-273"],"updated_at":"2026-11-02T14:05:43.875329Z"}],"osv":[{"id":"ALPINE-CVE-2019-20044","description":"In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh fails to overwrite the saved uid, so the original privileges can be restored by executing MODULE_PATH=/dir/with/module zmodload with a module that calls setuid().","status":"published","published":"2020-02-24T14:15:11.667Z","modified":"2026-09-21T06:17:52.510838894Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:47.663013Z"},{"id":"CVE-2019-20044","description":"In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh fails to overwrite the saved uid, so the original privileges can be restored by executing MODULE_PATH=/dir/with/module zmodload with a module that calls setuid().","status":"published","published":"2020-02-24T14:15:11.667Z","modified":"2026-04-16T04:30:32.770468102Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:12.010761Z"},{"id":"DEBIAN-CVE-2019-20044","description":"In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh fails to overwrite the saved uid, so the original privileges can be restored by executing MODULE_PATH=/dir/with/module zmodload with a module that calls setuid().","status":"published","published":"2020-02-24T14:15:11.667Z","modified":"2026-09-21T07:03:17.096518807Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:32.221385Z"},{"id":"RHSA-2020:0853","title":"Red Hat Security Advisory: zsh security update","status":"published","published":"2024-09-16T03:37:46Z","modified":"2026-06-26T10:46:33Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:0892","title":"Red Hat Security Advisory: zsh security update","status":"published","published":"2024-09-16T03:38:02Z","modified":"2026-06-26T10:46:35Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:0903","title":"Red Hat Security Advisory: zsh security update","status":"published","published":"2024-09-16T03:37:54Z","modified":"2026-06-26T12:22:08.60863475Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:0978","title":"Red Hat Security Advisory: zsh security update","status":"published","published":"2024-09-16T03:38:11Z","modified":"2026-06-26T12:22:08.49631118Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RLSA-2020:0903","title":"Important: zsh security update","description":"The zsh shell is a command interpreter usable as an interactive login shell and as a shell script command processor. Zsh resembles the ksh shell (the Korn shell), but includes many enhancements. Zsh supports command-line editing, built-in spelling correction, programmable command completion, shell functions (with autoloading), a history mechanism, and more.\n\nSecurity Fix(es):\n\n* zsh: insecure dropping of privileges when unsetting PRIVILEGED option (CVE-2019-20044)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2020-03-19T10:45:02Z","modified":"2026-02-05T06:45:12.747824Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2019-20044","description":"In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh fails to overwrite the saved uid, so the original privileges can be restored by executing MODULE_PATH=/dir/with/module zmodload with a module that calls setuid().","status":"published","published":"2020-02-24T14:15:00Z","modified":"2026-04-22T12:16:44.787971Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:21.213407Z"},{"id":"ALSA-2020:0903","title":"Important: zsh security update","description":"The zsh shell is a command interpreter usable as an interactive login shell and as a shell script command processor. Zsh resembles the ksh shell (the Korn shell), but includes many enhancements. Zsh supports command-line editing, built-in spelling correction, programmable command completion, shell functions (with autoloading), a history mechanism, and more.\n\nSecurity Fix(es):\n\n* zsh: insecure dropping of privileges when unsetting PRIVILEGED option (CVE-2019-20044)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2020-03-19T10:45:02Z","modified":"2026-10-29T11:00:07.762126893Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"CLSA-2022-1648138003","title":"Fix CVE(s): CVE-2019-20044, CVE-2021-45444","description":"\n   * SECURITY UPDATE: Regain dropped privileges\n     - debian/patches/CVE-2019-20044-pre.patch: change the order of the calls to\n       setgid (this should go first) and setuid in Src/options.c.\n     - debian/patches/CVE-2019-20044-1.patch: add extra checks to drop privileges\n       securely in Src/options.c.\n     - debian/patches/CVE-2019-20044-2.patch: add Src/openssh_bsd_setres_id.c\n       and its object file to Src/zsh.mdd, fix some of the checks from the\n       previous patch in Src/options.c, update compatibility wrappers in\n       Src/zsh_system.h, update the uid/gid methods in AC_CHECK_FUNCS in\n       configure.ac and add a test in Test/E01options.ztst.\n     - debian/patches/CVE-2019-20044-3.patch: improve Src/options.c changes from\n       above two patches.\n     - debian/patches/CVE-2019-20044-4.patch: clean up white spaces in\n       Src/options.c.\n     - debian/patches/CVE-2019-20044-5.patch: add privileged tests to\n       Test/P01privileged.ztst, remove the notes on privileged test in\n       Test/E01options.ztst and add the prilived tests to the Test/README.\n     - CVE-2019-20044\n   * SECURITY UPDATE: Arbitrary code execution\n     - debian/patches/CVE-2021-45444.patch: save PROMPTSUBST option before\n       the call to promptexpand() in b/Src/prompt.c and restore after it is\n       executed.\n     - CVE-2021-45444","status":"published","published":"2022-03-24T16:06:43Z","modified":"2026-06-04T10:03:48.315303Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"CLSA-2025-1761673667","title":"Fix CVE(s): CVE-2019-20044","description":"   * SECURITY UPDATE: insecure privilege dropping vulnerability\n     - debian/patches/CVE-2019-20044-*.patch: improve error handling in\n       setopt command, add OpenSSH-based setresuid/setresgid wrappers,\n       simplify and secure privilege dropping logic, add comprehensive\n       tests for PRIVILEGED option\n     - CVE-2019-20044","status":"published","published":"2025-10-28T17:47:51Z","modified":"2026-06-04T10:04:00.956924Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"DLA-2117-1","title":"zsh - security update","status":"published","published":"2020-02-24T00:00:00Z","modified":"2026-03-09T01:20:09.967999Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DLA-2470-1","title":"zsh - security update","status":"published","published":"2020-11-30T00:00:00Z","modified":"2026-03-09T01:20:23.585073Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"MGASA-2020-0107","title":"Updated zsh packages fix security vulnerability","description":"Updated zsh packages fix security vulnerability:\n\nA privilege escalation vulnerability was discovered in zsh, whereby a\nuser could regain a formerly elevated privelege level even when such\nan action should not be permitted (CVE-2019-20044).\n","status":"published","published":"2020-02-29T13:42:35Z","modified":"2026-04-16T04:43:36.106866963Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2022:0735-1","title":"Security update for zsh","description":"This update for zsh fixes the following issues:\n\n- CVE-2021-45444: Fixed a vulnerability where arbitrary shell commands could be \n  executed related to prompt expansion (bsc#1196435).\n- CVE-2019-20044: Fixed a vulnerability where shell privileges would not be\n  properly dropped when unsetting the PRIVILEGED option (bsc#1163882).\n","status":"published","published":"2022-03-04T13:50:08Z","modified":"2026-02-04T04:40:49.687641Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"openSUSE-SU-2024:11543-1","title":"zsh-5.8-7.7 on GA media","description":"These are all security issues fixed in the zsh-5.8-7.7 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:46:50.299155Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2022:0732-1","title":"Security update for zsh","description":"This update for zsh fixes the following issues:\n\n- CVE-2021-45444: Fixed a vulnerability where arbitrary shell commands could be \n  executed related to prompt expansion (bsc#1196435).\n- CVE-2019-20044: Fixed a vulnerability where shell privileges would not be\n  properly dropped when unsetting the PRIVILEGED option (bsc#1163882).\n","status":"published","published":"2022-03-04T13:47:38Z","modified":"2026-02-04T04:30:34.327672Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:0733-1","title":"Security update for zsh","description":"This update for zsh fixes the following issues:\n\n- CVE-2021-45444: Fixed a vulnerability where arbitrary shell commands could be \n  executed related to prompt expansion (bsc#1196435).\n- CVE-2019-20044: Fixed a vulnerability where shell privileges would not be\n  properly dropped when unsetting the PRIVILEGED option (bsc#1163882).\n- CVE-2018-1100: Fixed a potential code execution via a stack-based buffer\n  overflow in utils.c:checkmailpath() (bsc#1089030).\n","status":"published","published":"2022-03-04T13:48:03Z","modified":"2026-02-04T03:43:56.312149Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:0735-1","title":"Security update for zsh","description":"This update for zsh fixes the following issues:\n\n- CVE-2021-45444: Fixed a vulnerability where arbitrary shell commands could be \n  executed related to prompt expansion (bsc#1196435).\n- CVE-2019-20044: Fixed a vulnerability where shell privileges would not be\n  properly dropped when unsetting the PRIVILEGED option (bsc#1163882).\n","status":"published","published":"2022-03-04T13:51:25Z","modified":"2026-02-04T03:20:16.747552Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:14910-1","title":"Security update for zsh","description":"This update for zsh fixes the following issues:\n\n- CVE-2019-20044: Fixed an insecure dropping of privileges when unsetting\n  the PRIVILEGED option (bsc#1163882).\n- CVE-2018-13259: Fixed an unexpected truncation of long shebang lines (bsc#1107294).\n- CVE-2018-7549: Fixed a crash when an empty hash table (bsc#1082991).\n- CVE-2018-1083: Fixed a stack-based buffer overflow when using tab completion\n  on directories with long names (bsc#1087026).\n- CVE-2018-1071: Fixed a stack-based buffer overflow when executing certain\n  commands (bsc#1084656).\n- CVE-2018-0502: Fixed a mishandling of shebang lines (bsc#1107296).\n- CVE-2017-18206: Fixed a buffer overflow related to symlink processing (bsc#1083002).\n- CVE-2017-18205: Fixed an application crash when using cd with no\n  arguments (bsc#1082998).\n- CVE-2016-10714: Fixed a potential application crash when handling maximum\n  length paths (bsc#1083250).\n- CVE-2014-10072: Fixed a buffer overflow when scanning very long directory\n  paths for symbolic links (bsc#1082975).\n- CVE-2014-10071: Fixed a buffer overflow when redirecting output to a long\n  file descriptor (bsc#1082977).\n- CVE-2014-10070: Fixed a privilege escalation vulnerability via environment\n  variables (bsc#1082885).\n","status":"published","published":"2022-03-14T16:25:48Z","modified":"2026-02-04T02:44:38.670339Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"USN-5325-1","title":"zsh vulnerabilities","description":"Sam Foxman discovered that Zsh incorrectly handled certain inputs.\nAn attacker could possibly use this issue to regain dropped privileges.\n(CVE-2019-20044)\n\nIt was discovered that Zsh incorrectly handled certain inputs.\nAn attacker could possibly use this issue to execute arbitrary code.\n(CVE-2021-45444)\n","status":"published","published":"2022-03-14T17:30:22Z","modified":"2026-06-25T13:31:03.330017772Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}