zsh project vulnerabilities

Products

• zsh 3

Latest zsh project CVEs

Newest publication first

1. CVE-2017-18205 In builtin.c in zsh before 5.4, when sh compatibility mode is used, there is a NULL pointer dereference during processing of the cd command with no argument if HOME is not set.

   Published 2018-02-27

   High·CVSS 8.1 EPSS 2.0%

   In builtin.c in zsh before 5.4, when sh compatibility mode is used, there is a NULL pointer dereference during processing of the cd command with no argument if HOME is not set.

2. CVE-2014-10072 In utils.c in zsh before 5.0.6, there is a buffer overflow when scanning very long directory paths for symbolic links.

   Published 2018-02-27

   Critical·CVSS 9.8 EPSS 2.6%

   In utils.c in zsh before 5.0.6, there is a buffer overflow when scanning very long directory paths for symbolic links.

3. CVE-2014-10070 zsh before 5.0.7 allows evaluation of the initial values of integer variables imported from the environment (instead of treating them as literal numbers). That could allow local privilege escalation,....

   Published 2018-02-27

   High·CVSS 7.8 EPSS 0.49%

   zsh before 5.0.7 allows evaluation of the initial values of integer variables imported from the environment (instead of treating them as literal numbers). That could allow local privilege escalation, under some specific and atypical conditions where zsh is being invoked in privil...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.