ZS
Product
Zsh
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 5Medium 1Low 0
Watch
Add Zsh to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-13259 | 9.8 | Sep 5 | An issue was discovered in zsh before 5.6 Affected: before 5.6 |
| CVE-2018-0502 | 9.8 | Sep 5 | An issue was discovered in zsh before 5.6 Affected: before 5.6 |
| CVE-2018-7548 | 9.8 | Feb 27 | In subst.c in zsh through 5.4.2, there is a NULL pointer dereference when using ${(PA)...} on an empty array result Affected: through 5.4.2 |
| CVE-2017-18206 | 9.8 | Feb 27 | In utils.c in zsh before 5.4, symlink expansion had a buffer overflow Affected: before 5.4 |
| CVE-2016-10714 | 9.8 | Feb 27 | In zsh before 5.3, an off-by-one error resulted in undersized buffers that were intended to support PATH_MAX characters Affected: before 5.3 |
| CVE-2014-10071 | 9.8 | Feb 27 | In exec.c in zsh before 5.0.7, there is a buffer overflow for very long fds in the ">& fd" syntax Affected: before 5.0.7 |
Showing 6