Search

Find a vulnerability

Search criteria

    3 vulnerabilities by zsh

    CVE-2018-1100 (GCVE-0-2018-1100)

    Vulnerability from cvelistv5 – Published: 2018-04-11 19:00 – Updated: 2024-08-05 03:51
    VLAI
    Summary
    zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the utils.c:checkmailpath function. A local attacker could exploit this to execute arbitrary code in the context of another user.
    Severity
    No CVSS data available.
    CWE
    Assigner
    redhat CNA
    References
    URL Tags
    https://sourceforge.net/p/zsh/code/ci/31f72205630… x_refsource_CONFIRM
    https://usn.ubuntu.com/3764-1/ vendor-advisoryx_refsource_UBUNTU
    https://security.gentoo.org/glsa/201805-10 vendor-advisoryx_refsource_GENTOO
    https://access.redhat.com/errata/RHSA-2018:1932 vendor-advisoryx_refsource_REDHAT
    https://bugzilla.redhat.com/show_bug.cgi?id=1563395 x_refsource_CONFIRM
    https://access.redhat.com/errata/RHSA-2018:3073 vendor-advisoryx_refsource_REDHAT
    https://lists.debian.org/debian-lts-announce/2020… mailing-listx_refsource_MLIST
    Impacted products
    Vendor Product Version
    zsh zsh Affected: through 5.4.2
    		Create a notification for this product.
    Date Public
    2018-04-07 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T03:51:48.499Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://sourceforge.net/p/zsh/code/ci/31f72205630687c1cef89347863aab355296a27f/"
          },
          {
            "name": "USN-3764-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3764-1/"
          },
          {
            "name": "GLSA-201805-10",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201805-10"
          },
          {
            "name": "RHSA-2018:1932",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1932"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1563395"
          },
          {
            "name": "RHSA-2018:3073",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3073"
          },
          {
            "name": "[debian-lts-announce] 20201201 [SECURITY] [DLA 2470-1] zsh security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/12/msg00000.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "zsh",
          "vendor": "zsh",
          "versions": [
            {
              "status": "affected",
              "version": "through 5.4.2"
            }
          ]
        }
      ],
      "datePublic": "2018-04-07T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the utils.c:checkmailpath function. A local attacker could exploit this to execute arbitrary code in the context of another user."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-120",
              "description": "CWE-120-\u003eCWE-121",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-12-01T06:06:15.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://sourceforge.net/p/zsh/code/ci/31f72205630687c1cef89347863aab355296a27f/"
        },
        {
          "name": "USN-3764-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3764-1/"
        },
        {
          "name": "GLSA-201805-10",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201805-10"
        },
        {
          "name": "RHSA-2018:1932",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1932"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1563395"
        },
        {
          "name": "RHSA-2018:3073",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3073"
        },
        {
          "name": "[debian-lts-announce] 20201201 [SECURITY] [DLA 2470-1] zsh security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/12/msg00000.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2018-1100",
    "datePublished": "2018-04-11T19:00:00.000Z",
    "dateReserved": "2017-12-04T00:00:00.000Z",
    "dateUpdated": "2024-08-05T03:51:48.499Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2018-1083 (GCVE-0-2018-1083)

    Vulnerability from cvelistv5 – Published: 2018-03-28 13:00 – Updated: 2024-09-16 18:13
    VLAI
    Summary
    Zsh before version 5.4.2-test-1 is vulnerable to a buffer overflow in the shell autocomplete functionality. A local unprivileged user can create a specially crafted directory path which leads to code execution in the context of the user who tries to use autocomplete to traverse the before mentioned path. If the user affected is privileged, this leads to privilege escalation.
    Severity
    No CVSS data available.
    CWE
    Assigner
    redhat CNA
    References
    URL Tags
    https://usn.ubuntu.com/3608-1/ vendor-advisoryx_refsource_UBUNTU
    http://www.securityfocus.com/bid/103572 vdb-entryx_refsource_BID
    https://security.gentoo.org/glsa/201805-10 vendor-advisoryx_refsource_GENTOO
    https://sourceforge.net/p/zsh/code/ci/259ac472eac… x_refsource_CONFIRM
    https://access.redhat.com/errata/RHSA-2018:1932 vendor-advisoryx_refsource_REDHAT
    https://bugzilla.redhat.com/show_bug.cgi?id=1557382 x_refsource_CONFIRM
    https://lists.debian.org/debian-lts-announce/2018… mailing-listx_refsource_MLIST
    https://access.redhat.com/errata/RHSA-2018:3073 vendor-advisoryx_refsource_REDHAT
    https://lists.debian.org/debian-lts-announce/2020… mailing-listx_refsource_MLIST
    Impacted products
    Vendor Product Version
    zsh zsh Affected: before zsh 5.4.2-test-1
    		Create a notification for this product.
    Date Public
    2018-03-26 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T03:51:48.910Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-3608-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3608-1/"
          },
          {
            "name": "103572",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/103572"
          },
          {
            "name": "GLSA-201805-10",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201805-10"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://sourceforge.net/p/zsh/code/ci/259ac472eac291c8c103c7a0d8a4eaf3c2942ed7"
          },
          {
            "name": "RHSA-2018:1932",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1932"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1557382"
          },
          {
            "name": "[debian-lts-announce] 20180331 [SECURITY] [DLA 1335-1] zsh security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/03/msg00038.html"
          },
          {
            "name": "RHSA-2018:3073",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3073"
          },
          {
            "name": "[debian-lts-announce] 20201201 [SECURITY] [DLA 2470-1] zsh security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/12/msg00000.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "zsh",
          "vendor": "zsh",
          "versions": [
            {
              "status": "affected",
              "version": "before zsh 5.4.2-test-1"
            }
          ]
        }
      ],
      "datePublic": "2018-03-26T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Zsh before version 5.4.2-test-1 is vulnerable to a buffer overflow in the shell autocomplete functionality. A local unprivileged user can create a specially crafted directory path which leads to code execution in the context of the user who tries to use autocomplete to traverse the before mentioned path. If the user affected is privileged, this leads to privilege escalation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-120",
              "description": "CWE-120-\u003eCWE-121",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-12-01T06:06:17.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "USN-3608-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3608-1/"
        },
        {
          "name": "103572",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/103572"
        },
        {
          "name": "GLSA-201805-10",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201805-10"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://sourceforge.net/p/zsh/code/ci/259ac472eac291c8c103c7a0d8a4eaf3c2942ed7"
        },
        {
          "name": "RHSA-2018:1932",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1932"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1557382"
        },
        {
          "name": "[debian-lts-announce] 20180331 [SECURITY] [DLA 1335-1] zsh security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/03/msg00038.html"
        },
        {
          "name": "RHSA-2018:3073",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3073"
        },
        {
          "name": "[debian-lts-announce] 20201201 [SECURITY] [DLA 2470-1] zsh security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/12/msg00000.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "DATE_PUBLIC": "2018-03-26T00:00:00",
          "ID": "CVE-2018-1083",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "zsh",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "before zsh 5.4.2-test-1"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "zsh"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Zsh before version 5.4.2-test-1 is vulnerable to a buffer overflow in the shell autocomplete functionality. A local unprivileged user can create a specially crafted directory path which leads to code execution in the context of the user who tries to use autocomplete to traverse the before mentioned path. If the user affected is privileged, this leads to privilege escalation."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-120-\u003eCWE-121"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "USN-3608-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3608-1/"
            },
            {
              "name": "103572",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/103572"
            },
            {
              "name": "GLSA-201805-10",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201805-10"
            },
            {
              "name": "https://sourceforge.net/p/zsh/code/ci/259ac472eac291c8c103c7a0d8a4eaf3c2942ed7",
              "refsource": "CONFIRM",
              "url": "https://sourceforge.net/p/zsh/code/ci/259ac472eac291c8c103c7a0d8a4eaf3c2942ed7"
            },
            {
              "name": "RHSA-2018:1932",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1932"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1557382",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1557382"
            },
            {
              "name": "[debian-lts-announce] 20180331 [SECURITY] [DLA 1335-1] zsh security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/03/msg00038.html"
            },
            {
              "name": "RHSA-2018:3073",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3073"
            },
            {
              "name": "[debian-lts-announce] 20201201 [SECURITY] [DLA 2470-1] zsh security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/12/msg00000.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2018-1083",
    "datePublished": "2018-03-28T13:00:00.000Z",
    "dateReserved": "2017-12-04T00:00:00.000Z",
    "dateUpdated": "2024-09-16T18:13:29.080Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2018-1071 (GCVE-0-2018-1071)

    Vulnerability from cvelistv5 – Published: 2018-03-09 15:00 – Updated: 2024-08-05 03:51
    VLAI
    Summary
    zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the exec.c:hashcmd() function. A local attacker could exploit this to cause a denial of service.
    Severity
    No CVSS data available.
    CWE
    Assigner
    redhat CNA
    References
    URL Tags
    https://bugzilla.redhat.com/show_bug.cgi?id=1553531 x_refsource_CONFIRM
    https://usn.ubuntu.com/3608-1/ vendor-advisoryx_refsource_UBUNTU
    http://www.securityfocus.com/bid/103359 vdb-entryx_refsource_BID
    https://security.gentoo.org/glsa/201805-10 vendor-advisoryx_refsource_GENTOO
    https://lists.debian.org/debian-lts-announce/2018… mailing-listx_refsource_MLIST
    https://access.redhat.com/errata/RHSA-2018:3073 vendor-advisoryx_refsource_REDHAT
    https://lists.debian.org/debian-lts-announce/2020… mailing-listx_refsource_MLIST
    Impacted products
    Vendor Product Version
    zsh zsh Affected: 5.4.2
    		Create a notification for this product.
    Date Public
    2018-03-08 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T03:51:48.907Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1553531"
          },
          {
            "name": "USN-3608-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3608-1/"
          },
          {
            "name": "103359",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/103359"
          },
          {
            "name": "GLSA-201805-10",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201805-10"
          },
          {
            "name": "[debian-lts-announce] 20180331 [SECURITY] [DLA 1335-1] zsh security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/03/msg00038.html"
          },
          {
            "name": "RHSA-2018:3073",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3073"
          },
          {
            "name": "[debian-lts-announce] 20201201 [SECURITY] [DLA 2470-1] zsh security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/12/msg00000.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "zsh",
          "vendor": "zsh",
          "versions": [
            {
              "status": "affected",
              "version": "5.4.2"
            }
          ]
        }
      ],
      "datePublic": "2018-03-08T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the exec.c:hashcmd() function. A local attacker could exploit this to cause a denial of service."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-121",
              "description": "CWE-121",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-12-01T06:06:18.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1553531"
        },
        {
          "name": "USN-3608-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3608-1/"
        },
        {
          "name": "103359",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/103359"
        },
        {
          "name": "GLSA-201805-10",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201805-10"
        },
        {
          "name": "[debian-lts-announce] 20180331 [SECURITY] [DLA 1335-1] zsh security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/03/msg00038.html"
        },
        {
          "name": "RHSA-2018:3073",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3073"
        },
        {
          "name": "[debian-lts-announce] 20201201 [SECURITY] [DLA 2470-1] zsh security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/12/msg00000.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2018-1071",
    "datePublished": "2018-03-09T15:00:00.000Z",
    "dateReserved": "2017-12-04T00:00:00.000Z",
    "dateUpdated": "2024-08-05T03:51:48.907Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}