Skip to content
OpenAdvisories
Unscored USN-3593-1 7 CVEs

zsh vulnerabilities

Published Mar 8, 2018 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Zsh incorrectly handled certain enviroment variables.
An attacker could possibly use this issue to gain privileged access to the
system. This issue only affected Ubuntu 14.04 LTS. (CVE-2014-10070)

It was discovered that Zsh incorrectly handled certain inputs.
An attacker could possibly use this to execute arbitrary code. This
issue only affected Ubuntu 14.04 LTS. (CVE-2014-10071)

It was discovered that Zsh incorrectly handled some symbolic links.
An attacker could possibly use this to execute arbitrary code. This issue
only affected Ubuntu 14.04 LTS. (CVE-2014-10072)

It was discovered that Zsh incorrectly handled certain errors. An attacker
could possibly use this issue to cause a denial of service. (CVE-2016-10714)

It was discovered that Zsh incorrectly handled certain commands. An attacker
could possibly use this to execute arbitrary code. (CVE-2017-18205)

It was discovered that Zsh incorrectly handled certain symlinks. An attacker
could possibly use this to execute arbitrary code. This issue only affected
Ubuntu 16.04 LTS and Ubuntu 17.10. (CVE-2017-18206)

It was discovered that Zsh incorrectly handled certain inputs. An attacker could
possible use to execute arbitrary code. This issue only affected Ubuntu 17.10.
(CVE-2018-7548)

It was discovered that Zsh incorrectly handled certain inputs. An attacker
could possibly use this to cause a denial of service. (CVE-2018-7549)

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS zsh 5.0.2-3ubuntu6.1
Ubuntu · 16.04 LTS 16.04:LTS zsh 5.1.1-1ubuntu2.1

Vulnerabilities 7

  • Unscored —
    CVE-2014-10070

    zsh before 5.0.7 allows evaluation of the initial values of integer variables imported from the environment (instead of…

    zsh zsh Debian Ubuntu
  • Unscored —
    CVE-2014-10071

    In exec.c in zsh before 5.0.7, there is a buffer overflow for very long fds in the ">& fd" syntax.

    zsh zsh Debian Ubuntu
  • Unscored —
    CVE-2014-10072

    In utils.c in zsh before 5.0.6, there is a buffer overflow when scanning very long directory paths for symbolic links.

    zsh zsh Debian Ubuntu
  • Unscored —
    CVE-2016-10714

    In zsh before 5.3, an off-by-one error resulted in undersized buffers that were intended to support PATH_MAX characters.

    zsh zsh Debian Ubuntu
  • Unscored —
    CVE-2017-18205

    In builtin.c in zsh before 5.4, when sh compatibility mode is used, there is a NULL pointer dereference during processi…

    zsh zsh Debian Ubuntu
  • Unscored —
    CVE-2017-18206

    In utils.c in zsh before 5.4, symlink expansion had a buffer overflow.

    zsh zsh Debian Ubuntu
  • Unscored —
    CVE-2018-7549

    In params.c in zsh through 5.4.2, there is a crash during a copy of an empty hash table, as demonstrated by typeset -p.

    zsh zsh Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2014-10070
  • report
    https://ubuntu.com/security/CVE-2014-10071
  • report
    https://ubuntu.com/security/CVE-2014-10072
  • report
    https://ubuntu.com/security/CVE-2016-10714
  • report
    https://ubuntu.com/security/CVE-2017-18205
  • report
    https://ubuntu.com/security/CVE-2017-18206
  • report
    https://ubuntu.com/security/CVE-2018-7548
  • report
    https://ubuntu.com/security/CVE-2018-7549