Zsh vulnerabilities

Products

• Zsh 13

Newest

• zsh, apple mac os x, macos +2 more +4 more In zsh before 5.8.1, an attacker can achieve code execution if they control a command output... CVE-2021-45444 Fix available 7.8 HighFebruary 13, 2022
• zsh, apple ipados, iphone os +5 more +7 more In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no... CVE-2019-20044 Fix available 7.8 HighFebruary 24, 2020
• zsh, canonical ubuntu linux +1 more An issue was discovered in zsh before 5.6. Shebang lines exceeding 64 characters were truncated,... CVE-2018-13259 Fix available 9.8 CriticalSeptember 5, 2018
• zsh, canonical ubuntu linux +1 more An issue was discovered in zsh before 5.6. The beginning of a #! script file was mishandled,... CVE-2018-0502 Fix available 9.8 CriticalSeptember 5, 2018
• zsh, canonical ubuntu linux, redhat enterprise linux desktop +2 more +4 more zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the utils.c... CVE-2018-1100 Fix available 7.8 HighApril 11, 2018
• zsh, canonical ubuntu linux, debian linux +3 more +5 more Zsh before version 5.4.2-test-1 is vulnerable to a buffer overflow in the shell autocomplete... CVE-2018-1083 Fix available 7.8 HighMarch 26, 2018
• zsh, canonical ubuntu linux, debian linux +3 more +5 more zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the exec.c:hashcmd()... CVE-2018-1071 Fix available 5.5 MediumMarch 9, 2018
• zsh, canonical ubuntu linux +1 more In subst.c in zsh through 5.4.2, there is a NULL pointer dereference when using ${(PA)...} on an... CVE-2018-7548 Fix available 9.8 CriticalFebruary 27, 2018
• zsh, canonical ubuntu linux, redhat enterprise linux desktop +2 more +4 more In params.c in zsh through 5.4.2, there is a crash during a copy of an empty hash table, as... CVE-2018-7549 Fix available 7.5 HighFebruary 27, 2018
• zsh, canonical ubuntu linux +1 more In utils.c in zsh before 5.4, symlink expansion had a buffer overflow. CVE-2017-18206 Fix available 9.8 CriticalFebruary 27, 2018
• zsh, canonical ubuntu linux +1 more In zsh before 5.3, an off-by-one error resulted in undersized buffers that were intended to... CVE-2016-10714 Fix available 9.8 CriticalFebruary 27, 2018
• zsh, canonical ubuntu linux +1 more In exec.c in zsh before 5.0.7, there is a buffer overflow for very long fds in the ">& fd" syntax. CVE-2014-10071 Fix available 9.8 CriticalFebruary 27, 2018
• zsh Util/difflog.pl in zsh 4.3.4 allows local users to overwrite arbitrary files via a symlink attack... CVE-2007-6209 Fix available 4.6 MediumDecember 4, 2007