CVE-2018-1100

Mô tả

Tham khảo

• access.redhat.com/errata/RHSA-2018:1932 · Third Party Advisory
• access.redhat.com/errata/RHSA-2018:3073 · Third Party Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• lists.debian.org/debian-lts-announce/2020/12/msg00000.html
• security.gentoo.org/glsa/201805-10 · Third Party Advisory
• sourceforge.net/p/zsh/code/ci/31f72205630687c1cef89347863aab355296a27f · Patch
• usn.ubuntu.com/3764-1 · Third Party Advisory

Lỗ hổng khác của zsh

• CVE-2021-45444CAO 7.8In zsh before 5.8.1, an attacker can achieve code execution if they control a command output inside the prompt, as demonstrated by a %F argu…
• CVE-2019-20044CAO 7.8In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh fails to overwrite th…
• CVE-2018-13259NGHIÊM TRỌNG 9.8An issue was discovered in zsh before 5.6. Shebang lines exceeding 64 characters were truncated, potentially leading to an execve call to a …
• CVE-2018-0502NGHIÊM TRỌNG 9.8An issue was discovered in zsh before 5.6. The beginning of a #! script file was mishandled, potentially leading to an execve call to a prog…
• CVE-2018-1083CAO 7.8Zsh before version 5.4.2-test-1 is vulnerable to a buffer overflow in the shell autocomplete functionality. A local unprivileged user can cr…