Skip to content
OpenAdvisories
Unscored RHSA-2018:3073 8 CVEs

Red Hat Security Advisory: zsh security and bug fix update

Published Sep 16, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::client zsh 0:5.0.2-31.el7
Red Hat · RHEL 7 enterprise_linux:7::client zsh-debuginfo 0:5.0.2-31.el7
Red Hat · RHEL 7 enterprise_linux:7::client zsh-html 0:5.0.2-31.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode zsh 0:5.0.2-31.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode zsh-debuginfo 0:5.0.2-31.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode zsh-html 0:5.0.2-31.el7
Red Hat · RHEL 7 enterprise_linux:7::server zsh 0:5.0.2-31.el7
Red Hat · RHEL 7 enterprise_linux:7::server zsh-debuginfo 0:5.0.2-31.el7
Red Hat · RHEL 7 enterprise_linux:7::server zsh-html 0:5.0.2-31.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation zsh 0:5.0.2-31.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation zsh-debuginfo 0:5.0.2-31.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation zsh-html 0:5.0.2-31.el7

Vulnerabilities 8

  • Unscored —
    CVE-2014-10071

    In exec.c in zsh before 5.0.7, there is a buffer overflow for very long fds in the ">& fd" syntax.

    zsh zsh Debian Ubuntu
  • Unscored —
    CVE-2014-10072

    In utils.c in zsh before 5.0.6, there is a buffer overflow when scanning very long directory paths for symbolic links.

    zsh zsh Debian Ubuntu
  • Unscored —
    CVE-2017-18205

    In builtin.c in zsh before 5.4, when sh compatibility mode is used, there is a NULL pointer dereference during processi…

    zsh zsh Debian Ubuntu
  • Unscored —
    CVE-2017-18206

    In utils.c in zsh before 5.4, symlink expansion had a buffer overflow.

    zsh zsh Debian Ubuntu
  • Unscored —
    CVE-2018-1071

    zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the exec.c:hashcmd() function. A local atta…

    zsh zsh zsh zsh Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-1083

    Zsh before version 5.4.2-test-1 is vulnerable to a buffer overflow in the shell autocomplete functionality. A local unp…

    zsh zsh zsh zsh Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-1100

    zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the utils.c:checkmailpath function. A local…

    zsh zsh zsh zsh Debian Ubuntu
  • Unscored —
    CVE-2018-7549

    In params.c in zsh through 5.4.2, there is a crash during a copy of an empty hash table, as demonstrated by typeset -p.

    zsh zsh Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.6_release_notes/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1549836
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1549855
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1549858
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1549861
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1549862
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1553531
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1557382
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1563395
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3073.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-10071
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-10071
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-10071
  • report
    https://access.redhat.com/security/cve/CVE-2014-10072
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-10072
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-10072
  • report
    https://access.redhat.com/security/cve/CVE-2017-18205
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-18205
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-18205
  • report
    https://access.redhat.com/security/cve/CVE-2017-18206
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-18206
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-18206
  • report
    https://access.redhat.com/security/cve/CVE-2018-1071
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-1071
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-1071
  • report
    https://access.redhat.com/security/cve/CVE-2018-1083
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-1083
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-1083
  • report
    https://access.redhat.com/security/cve/CVE-2018-1100
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-1100
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-1100
  • report
    https://access.redhat.com/security/cve/CVE-2018-7549
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-7549
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-7549