Linux Distros Unpatched Vulnerability : CVE-2014-10070

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - zsh before 5.0.7 allows evaluation of the initial values of integer variables imported from the environment instead of treating them as literal numbers. That...

Linux Distros Unpatched Vulnerability : CVE-2018-1083

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Zsh before version 5.4.2-test-1 is vulnerable to a buffer overflow in the shell autocomplete functionality. A local unprivileged user can create a specially...

Amazon Linux 2022 : zsh, zsh-html (ALAS2022-2022-034)

It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-034 advisory. A vulnerability was found in zsh in the parsecolorchar function of prompt.c file. This flaw allows an attacker to perform code execution if they control a command output inside the prompt, as stated by ...

OESA-2024-2238 xterm security update

The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals. Security Fixes: xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the...

OESA-2024-2239 xterm security update

The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals. Security Fixes: xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the...

OESA-2024-2237 xterm security update

The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals. Security Fixes: xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the...

RHSA-2022:2120 Red Hat Security Advisory: zsh security update

Bulletin has no description...

RHSA-2020:0978 Red Hat Security Advisory: zsh security update

Bulletin has no description...

RHSA-2020:0892 Red Hat Security Advisory: zsh security update

Bulletin has no description...

RHSA-2020:0903 Red Hat Security Advisory: zsh security update

Bulletin has no description...

RHSA-2020:0853 Red Hat Security Advisory: zsh security update

Bulletin has no description...

RHSA-2019:2017 Red Hat Security Advisory: zsh security and bug fix update

Bulletin has no description...

RHSA-2018:1932 Red Hat Security Advisory: zsh security update

Bulletin has no description...

RHSA-2018:3073 Red Hat Security Advisory: zsh security and bug fix update

Bulletin has no description...

Photon OS 3.0: Zsh PHSA-2022-3.0-0376

An update of the zsh package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-3.0-0376. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20405...

Photon OS 2.0: Zsh PHSA-2018-2.0-0037

An update of the zsh package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0037. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20306...

Photon OS 4.0: Zsh PHSA-2022-4.0-0169

An update of the zsh package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0169. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20340...

Photon OS 2.0: Zsh PHSA-2019-2.0-0167

An update of the zsh package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0167. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20285...

Zsh: Prompt Expansion Vulnerability

Background A shell designed for interactive use, although it is also a powerful scripting language. Description Multiple vulnerabilities have been discovered in Zsh. Please review the CVE identifiers referenced below for details. Impact A vulnerability in prompt expansion could be exploited throu...

GLSA-202407-01 : Zsh: Prompt Expansion Vulnerability

The remote host is affected by the vulnerability described in GLSA-202407-01 Zsh: Prompt Expansion Vulnerability Multiple vulnerabilities have been discovered in Zsh. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly fro...