Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2017-18205

zsh: NULL dereference in cd in sh compatibility mode under given circumstances

In builtin.c in zsh before 5.4, when sh compatibility mode is used, there is a NULL pointer dereference during processing of the cd command with no argument if HOME is not set.

CVSS 3.0 · 8.1 High EPSS 2.0% KEV · Not listed
Vendors
Redhat Zsh Project
Products
Enterprise Linux Zsh
CVE-2014-10072

zsh: buffer overflow when scanning very long directory paths for symbolic links

In utils.c in zsh before 5.0.6, there is a buffer overflow when scanning very long directory paths for symbolic links.

CVSS 3.0 · 9.8 Critical EPSS 2.6% KEV · Not listed
Vendors
Redhat Zsh Project
Products
Enterprise Linux Zsh
CVE-2014-10070

zsh: privilege escalation via environment variables

zsh before 5.0.7 allows evaluation of the initial values of integer variables imported from the environment (instead of treating them as literal numbers). That could allow local privilege escalation, under some specific and atypical conditions where zsh is being invoked in privilege-elevation contexts when the environment has not been properly sanitized, such as when zsh is invoked by sudo on systems where "env_reset" has been disabled.

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Zsh Project
Products
Zsh