pkg:Debian/zsh

所有已知漏洞

• CRITICAL9.8CVE-2018-13259An issue was discovered in zsh before 5.6.
  from 0, < 5.6-1
• CRITICAL9.8CVE-2018-0502An issue was discovered in zsh before 5.6.
  from 0, < 5.6-1
• CRITICAL9.8CVE-2018-7548In subst.c in zsh through 5.4.2, there is a NULL pointer dereference when using ${(PA)...} on an empty array result.
  from 0, < 5.5-1
• CRITICAL9.8CVE-2017-18206zsh - security update
  from 0, < 5.3.1-4+deb9u1
• CRITICAL9.8CVE-2017-18206zsh - security update
  from 0, < 5.4.1-1
• CRITICAL9.8CVE-2016-10714In zsh before 5.3, an off-by-one error resulted in undersized buffers that were intended to support PATH_MAX characters.
  from 0, < 5.3-1
• CRITICAL9.8CVE-2014-10072In utils.c in zsh before 5.0.6, there is a buffer overflow when scanning very long directory paths for symbolic links.
  from 0, < 5.0.6-1
• CRITICAL9.8CVE-2014-10071In exec.c in zsh before 5.0.7, there is a buffer overflow for very long fds in the ">& fd" syntax.
  from 0, < 5.0.7-3
• HIGH8.1CVE-2017-18205In builtin.c in zsh before 5.4, when sh compatibility mode is used, there is a NULL pointer dereference during processing of the cd command…
  from 0, < 5.4.1-1
• HIGH7.8CVE-2021-45444zsh - security update
  from 0, < 5.7.1-1+deb10u1
• HIGH7.8CVE-2021-45444zsh - security update
  from 0, < 5.8-6+deb11u1
• HIGH7.8CVE-2021-45444zsh - security update
  from 0, < 5.3.1-4+deb9u5
• HIGH7.8CVE-2019-20044zsh - security update
  from 0, < 5.0.7-5+deb8u1
• HIGH7.8CVE-2019-20044zsh - security update
  from 0, < 5.8-1
• HIGH7.8CVE-2018-1100zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the utils.c:checkmailpath function.
  from 0, < 5.5-1
• HIGH7.8CVE-2018-1083Zsh before version 5.4.2-test-1 is vulnerable to a buffer overflow in the shell autocomplete functionality.
  from 0, < 5.4.2-4
• HIGH7.8CVE-2014-10070zsh - security update
  from 0, < 5.0.7-3
• HIGH7.8CVE-2014-10070zsh - security update
  from 0, < 4.3.17-1+deb7u1
• HIGH7.5CVE-2018-7549In params.c in zsh through 5.4.2, there is a crash during a copy of an empty hash table, as demonstrated by typeset -p.
  from 0, < 5.5-1
• MEDIUM5.5CVE-2018-1071zsh - security update
  from 0, < 4.3.17-1+deb7u2
• MEDIUM5.5CVE-2018-1071zsh - security update
  from 0, < 5.4.2-4
• —CVE-2007-6209Util/difflog.pl in zsh 4.3.4 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
  from 0, < 4.3.4-dev-3-2