CVE-2014-10071: Improper Restriction of Operations within the Bounds of a Memory Buffer

In exec.c in zsh before 5.0.7, there is a buffer overflow for very long fds in the "& fd" syntax...

CVE-2017-18206: Improper Restriction of Operations within the Bounds of a Memory Buffer

In utils.c in zsh before 5.4, symlink expansion had a buffer overflow...

CVE-2017-18205: NULL Pointer Dereference

In builtin.c in zsh before 5.4, when sh compatibility mode is used, there is a NULL pointer dereference during processing of the cd command with no argument if HOME is not set...

PT-2018-18152

Name of the Vulnerable Software and Affected Versions zsh versions 5.4.2 and earlier Description The issue is related to a crash that occurs during the copy of an empty hash table in the zsh shell. This can be demonstrated using the typeset -p command. Recommendations For zsh versions 5.4.2 and...

PT-2018-18151

Name of the Vulnerable Software and Affected Versions zsh versions prior to 5.4.2 Description The issue arises from a NULL pointer dereference when using $PA... on an empty array result in the subst.c file of zsh. Recommendations For versions prior to 5.4.2, update to version 5.4.2 or later to...

UBUNTU-CVE-2018-7549

In params.c in zsh through 5.4.2, there is a crash during a copy of an empty hash table, as demonstrated by typeset -p...

UBUNTU-CVE-2014-10070

zsh before 5.0.7 allows evaluation of the initial values of integer variables imported from the environment instead of treating them as literal numbers. That could allow local privilege escalation, under some specific and atypical conditions where zsh is being invoked in privilege-elevation...

UBUNTU-CVE-2016-10714

In zsh before 5.3, an off-by-one error resulted in undersized buffers that were intended to support PATHMAX characters...

UBUNTU-CVE-2014-10071

In exec.c in zsh before 5.0.7, there is a buffer overflow for very long fds in the "& fd" syntax...

CVE-2014-10072

In utils.c in zsh before 5.0.6, there is a buffer overflow when scanning very long directory paths for symbolic links...

CVE-2018-7548: NULL Pointer Dereference

In subst.c in zsh through 5.4.2, there is a NULL pointer dereference when using $PA... on an empty array result...

UBUNTU-CVE-2014-10072

In utils.c in zsh before 5.0.6, there is a buffer overflow when scanning very long directory paths for symbolic links...

PT-2017-4059

Name of the Vulnerable Software and Affected Versions zsh versions 5.4.2 and earlier Description The issue is related to a stack-based buffer overflow in the checkmailpath function, located in utils.c. This could allow a local attacker to execute arbitrary code in the context of another user,...

PT-2017-4060

Name of the Vulnerable Software and Affected Versions zsh versions 5.4.2 and earlier Description The issue is related to a stack-based buffer overflow in the exec.c:hashcmd function. This could allow a local attacker to cause a denial of service. The vulnerability is associated with the hashcmd...

PT-2018-6734

Name of the Vulnerable Software and Affected Versions: zsh versions prior to 5.4 Description: The issue occurs in sh compatibility mode when processing the cd command without an argument if the HOME variable is not set, resulting in a NULL pointer dereference. Recommendations: For versions prior ...

PT-2018-6735

Name of the Vulnerable Software and Affected Versions: zsh versions prior to 5.4 Description: The issue is related to a buffer overflow in symlink expansion in the utils.c file of zsh. Recommendations: For versions prior to 5.4, update to version 5.4 or later to resolve the issue...

PT-2017-4093

Name of the Vulnerable Software and Affected Versions Zsh versions prior to 5.4.2-test-1 Description The issue is related to a buffer overflow in the shell autocomplete functionality. A local unprivileged user can create a specially crafted directory path, leading to code execution in the context...

openSUSE Security Update : the_silver_searcher (openSUSE-2017-850)

This update for thesilversearcher to version 2.0.0 fixes a minor security issue and includes various improvements. New and updated functionality : - New and updated support for various file types - Performance improvements, including faster substring search - Add --print-all-files options to prin...

Inspector - Privilege Escalation Unix Helper

Inspector is a python script for help in privilege escalation, for linux environement. After starting, this script search the kernel version and check if is exploit exists, load file history bash,zsh,mysql... and load list of programs loaded with root user. Download on server wget...

PT-2018-4883

Name of the Vulnerable Software and Affected Versions zsh versions prior to 5.3 Description An off-by-one error in zsh resulted in undersized buffers that were intended to support PATH MAX characters. Recommendations For versions prior to 5.3, update to version 5.3 or later to resolve the issue...