Skip to content
OpenAdvisories
Medium ELSA-2018-3073 8 CVEs

Moderate: zsh security and bug fix update (Oracle Linux 7)

Published Nov 5, 2018 · Updated Nov 5, 2018

Ecosystem: Oracle Linux

Summary

[5.0.2-31]
- fix defects detected by Coverity related to CVE-2017-18206 and CVE-2018-1083

[5.0.2-30]
- fix stack-based buffer overflow in utils.c:checkmailpath() (CVE-2018-1100)
- fix stack-based buffer overflow in gen_matches_files() (CVE-2018-1083)
- fix stack-based buffer overflow in exec.c:hashcmd() (CVE-2018-1071)
- avoid crash when copying empty hash table (CVE-2018-7549)
- fix buffer overrun in xsymlinks (CVE-2017-18206)
- fix NULL dereference in cd (CVE-2017-18205)
- fix buffer overflow when scanning very long path for symlinks (CVE-2014-10072)
- fix buffer overflow for very long fds in >& fd syntax (CVE-2014-10071)

[5.0.2-29]
- fix crash while inputting long multi-line strings (#1492595)

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 7 zsh 0:5.0.2-31.el7
Oracle Linux · 7 zsh-html 0:5.0.2-31.el7

Vulnerabilities 8

  • Unscored —
    CVE-2014-10071

    In exec.c in zsh before 5.0.7, there is a buffer overflow for very long fds in the ">& fd" syntax.

    zsh zsh Debian Ubuntu
  • Unscored —
    CVE-2014-10072

    In utils.c in zsh before 5.0.6, there is a buffer overflow when scanning very long directory paths for symbolic links.

    zsh zsh Debian Ubuntu
  • Unscored —
    CVE-2017-18205

    In builtin.c in zsh before 5.4, when sh compatibility mode is used, there is a NULL pointer dereference during processi…

    zsh zsh Debian Ubuntu
  • Unscored —
    CVE-2017-18206

    In utils.c in zsh before 5.4, symlink expansion had a buffer overflow.

    zsh zsh Debian Ubuntu
  • Unscored —
    CVE-2018-1071

    zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the exec.c:hashcmd() function. A local atta…

    zsh zsh zsh zsh Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-1083

    Zsh before version 5.4.2-test-1 is vulnerable to a buffer overflow in the shell autocomplete functionality. A local unp…

    zsh zsh zsh zsh Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-1100

    zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the utils.c:checkmailpath function. A local…

    zsh zsh zsh zsh Debian Ubuntu
  • Unscored —
    CVE-2018-7549

    In params.c in zsh through 5.4.2, there is a crash during a copy of an empty hash table, as demonstrated by typeset -p.

    zsh zsh Debian Ubuntu