CVE-2014-10071
Fixed in a distro release EPSS 3%
In exec.c in zsh before 5.0.7, there is a buffer overflow for very long fds in the ">& fd" syntax.
Products: zsh, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | zsh | 5.0.7-3 |
| Debian 13 | zsh | 5.0.7-3 |
| Debian 14 | zsh | 5.0.7-3 |
| Debian 7 | zsh | 4.3.17-1+deb7u1 |
| Red Hat Enterprise Linux 7 | zsh | 0:5.0.2-31.el7 |
| Red Hat Enterprise Linux 7 | zsh-debuginfo | 0:5.0.2-31.el7 |
| Red Hat Enterprise Linux 7 | zsh-html | 0:5.0.2-31.el7 |
| SUSE Linux Enterprise Desktop 12 SP3 | zsh | 5.0.5-6.7.2 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | zsh | 4.3.6-67.9.8.1 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | zsh | 4.3.6-67.9.8.1 |
| SUSE Linux Enterprise Server 12 SP3 | zsh | 5.0.5-6.7.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | zsh | 5.0.5-6.7.2 |
| Ubuntu 14.04 LTS | zsh | 5.0.2-3ubuntu6.1 |
| Ubuntu 16.04 LTS | zsh | 5.1.1-1ubuntu2.1 |