zsh records
13 published records for vendor zsh.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-20 Improper Input Validation3
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer2
- CWE-189 Numeric Errors1
- CWE-121 Stack-based Buffer Overflow1
- CWE-264 Permissions, Privileges, and Access Controls1
The weakness classes this vendor ships most often: where to look.
CWEAll records
13 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2017-18206No exploit | In utils.c in zsh before 5.4, symlink expansion had a buffer overflow.zsh · zsh · CWE-119 | Critical9.8 | — | 3.1% | Feb 27, 2018 |
40Plan | CVE-2018-13259No exploit | An issue was discovered in zsh before 5.6.zsh · zsh · CWE-20 | Critical9.8 | — | 2.7% | Sep 5, 2018 |
40Plan | CVE-2014-10071No exploit | In exec.c in zsh before 5.0.7, there is a buffer overflow for very long fds in the ">& fd" syntax.zsh · zsh · CWE-119 | Critical9.8 | — | 2.7% | Feb 27, 2018 |
40Plan | CVE-2018-7548No exploit | In subst.c in zsh through 5.4.2, there is a NULL pointer dereference when using ${(PA)...} on an empty array result.zsh · zsh · CWE-476 | Critical9.8 | — | 2.5% | Feb 27, 2018 |
40Plan | CVE-2018-0502No exploit | An issue was discovered in zsh before 5.6.zsh · zsh · CWE-20 | Critical9.8 | — | 2.4% | Sep 5, 2018 |
40Plan | CVE-2016-10714No exploit | In zsh before 5.3, an off-by-one error resulted in undersized buffers that were intended to support PATH_MAX characters.zsh · zsh · CWE-189 | Critical9.8 | — | 2.1% | Feb 27, 2018 |
32Monitor | CVE-2021-45444No exploit | In zsh before 5.8.1, an attacker can achieve code execution if they control a command output inside the prompt, as demonstrated by a %F arguzsh · zsh | High7.8 | — | 1.9% | Feb 14, 2022 |
31Monitor | CVE-2018-7549No exploit | In params.c in zsh through 5.4.2, there is a crash during a copy of an empty hash table, as demonstrated by typeset -p.zsh · zsh · CWE-20 | High7.5 | — | 2.5% | Feb 27, 2018 |
31Monitor | CVE-2018-1083No exploit | Zsh before version 5.4.2-test-1 is vulnerable to a buffer overflow in the shell autocomplete functionality.zsh · zsh · CWE-120 | High7.8 | — | 0.5% | Mar 28, 2018 |
31Monitor | CVE-2018-1100No exploit | zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the utils.c:checkmailpath function.zsh · zsh · CWE-120 | High7.8 | — | 0.5% | Apr 11, 2018 |
31Monitor | CVE-2019-20044No exploit | In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option.zsh · zsh · CWE-273 | High7.8 | — | 0.4% | Feb 24, 2020 |
22Monitor | CVE-2018-1071No exploit | zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the exec.c:hashcmd() function.zsh · zsh · CWE-121 | Medium5.5 | — | 0.4% | Mar 9, 2018 |
18Monitor | CVE-2007-6209No exploit | Util/difflog.pl in zsh 4.3.4 allows local users to overwrite arbitrary files via a symlink attack on temporary files.zsh · zsh · CWE-264 | Medium4.6 | — | 0.3% | Dec 3, 2007 |
- CVE-2017-1820640Plan
In utils.c in zsh before 5.4, symlink expansion had a buffer overflow.
CriticalCVSS 9.8No exploitEPSS 3%zsh · zshFeb 27, 2018
- CVE-2018-1325940Plan
An issue was discovered in zsh before 5.6.
CriticalCVSS 9.8No exploitEPSS 2%zsh · zshSep 5, 2018
- CVE-2014-1007140Plan
In exec.c in zsh before 5.0.7, there is a buffer overflow for very long fds in the ">& fd" syntax.
CriticalCVSS 9.8No exploitEPSS 2%zsh · zshFeb 27, 2018
- CVE-2018-754840Plan
In subst.c in zsh through 5.4.2, there is a NULL pointer dereference when using ${(PA)...} on an empty array result.
CriticalCVSS 9.8No exploitEPSS 2%zsh · zshFeb 27, 2018
- CVE-2018-050240Plan
An issue was discovered in zsh before 5.6.
CriticalCVSS 9.8No exploitEPSS 2%zsh · zshSep 5, 2018
- CVE-2016-1071440Plan
In zsh before 5.3, an off-by-one error resulted in undersized buffers that were intended to support PATH_MAX characters.
CriticalCVSS 9.8No exploitEPSS 2%zsh · zshFeb 27, 2018
- CVE-2021-4544432Monitor
In zsh before 5.8.1, an attacker can achieve code execution if they control a command output inside the prompt, as demonstrated by a %F argu
HighCVSS 7.8No exploitEPSS 1%zsh · zshFeb 14, 2022
- CVE-2018-754931Monitor
In params.c in zsh through 5.4.2, there is a crash during a copy of an empty hash table, as demonstrated by typeset -p.
HighCVSS 7.5No exploitEPSS 2%zsh · zshFeb 27, 2018
- CVE-2018-108331Monitor
Zsh before version 5.4.2-test-1 is vulnerable to a buffer overflow in the shell autocomplete functionality.
HighCVSS 7.8No exploitEPSS 0%zsh · zshMar 28, 2018
- CVE-2018-110031Monitor
zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the utils.c:checkmailpath function.
HighCVSS 7.8No exploitEPSS 0%zsh · zshApr 11, 2018
- CVE-2019-2004431Monitor
In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option.
HighCVSS 7.8No exploitEPSS 0%zsh · zshFeb 24, 2020
- CVE-2018-107122Monitor
zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the exec.c:hashcmd() function.
MediumCVSS 5.5No exploitEPSS 0%zsh · zshMar 9, 2018
- CVE-2007-620918Monitor
Util/difflog.pl in zsh 4.3.4 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
MediumCVSS 4.6No exploitEPSS 0%zsh · zshDec 3, 2007