ZS
Vendor
Zsh
13
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2021-45444 | ZS Zsh Zsh | 7.8 | Feb 14 | In zsh before 5.8.1, an attacker can achieve code execution if they control a command output inside the prompt, as demonstrated by a %F argument |
| CVE-2019-20044 | ZS Zsh Zsh | 7.8 | Feb 24 | In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option |
| CVE-2018-13259 | ZS Zsh Zsh | 9.8 | Sep 5 | An issue was discovered in zsh before 5.6 |
| CVE-2018-0502 | ZS Zsh Zsh | 9.8 | Sep 5 | An issue was discovered in zsh before 5.6 |
| CVE-2018-1100 | ZS Zsh Zsh | 7.8 | Apr 11 | zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the utils.c:checkmailpath function |
| CVE-2018-1083 | ZS Zsh Zsh | 7.8 | Mar 28 | Zsh before version 5.4.2-test-1 is vulnerable to a buffer overflow in the shell autocomplete functionality |
| CVE-2018-1071 | ZS Zsh Zsh | 5.5 | Mar 9 | zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the exec.c:hashcmd() function |
| CVE-2018-7549 | ZS Zsh Zsh | 7.5 | Feb 27 | In params.c in zsh through 5.4.2, there is a crash during a copy of an empty hash table, as demonstrated by typeset -p |
| CVE-2018-7548 | ZS Zsh Zsh | 9.8 | Feb 27 | In subst.c in zsh through 5.4.2, there is a NULL pointer dereference when using ${(PA)...} on an empty array result |
| CVE-2017-18206 | ZS Zsh Zsh | 9.8 | Feb 27 | In utils.c in zsh before 5.4, symlink expansion had a buffer overflow |
| CVE-2016-10714 | ZS Zsh Zsh | 9.8 | Feb 27 | In zsh before 5.3, an off-by-one error resulted in undersized buffers that were intended to support PATH_MAX characters |
| CVE-2014-10071 | ZS Zsh Zsh | 9.8 | Feb 27 | In exec.c in zsh before 5.0.7, there is a buffer overflow for very long fds in the ">& fd" syntax |
| CVE-2007-6209 | ZS Zsh Zsh | – | Dec 4 | Util/difflog.pl in zsh 4.3.4 allows local users to overwrite arbitrary files via a symlink attack on temporary files |