Unscored DLA-1335-1 2 CVEs

zsh - security update

Published Mar 31, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 7	zsh	4.3.17-1+deb7u2

Vulnerabilities 2

Unscored —

CVE-2018-1071

zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the exec.c:hashcmd() function. A local atta…

zsh zsh zsh zsh Debian Ubuntu Alpine

Mar 9, 2018
Unscored —

CVE-2018-1083

Zsh before version 5.4.2-test-1 is vulnerable to a buffer overflow in the shell autocomplete functionality. A local unp…

zsh zsh zsh zsh Debian Ubuntu Alpine

Mar 28, 2018