CVE-2018-1071
Fixed in a distro release EPSS <1%
zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the exec.c:hashcmd() function. A local attacker could exploit this to cause a denial of service.
Products: zsh
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | zsh | 5.4.2-r1 |
| Alpine 3.11 | zsh | 5.4.2-r1 |
| Alpine 3.12 | zsh | 5.4.2-r1 |
| Alpine 3.13 | zsh | 5.4.2-r1 |
| Alpine 3.14 | zsh | 5.4.2-r1 |
| Alpine 3.15 | zsh | 5.4.2-r1 |
| Alpine 3.16 | zsh | 5.4.2-r1 |
| Alpine 3.17 | zsh | 5.4.2-r1 |
| Alpine 3.18 | zsh | 5.4.2-r1 |
| Alpine 3.19 | zsh | 5.4.2-r1 |
| Alpine 3.20 | zsh | 5.4.2-r1 |
| Alpine 3.21 | zsh | 5.4.2-r1 |
| Alpine 3.22 | zsh | 5.4.2-r1 |
| Alpine 3.23 | zsh | 5.4.2-r1 |
| Alpine 3.24 | zsh | 5.4.2-r1 |
| Alpine 3.4 | zsh | 5.2-r2 |
| Alpine 3.5 | zsh | 5.2-r4 |
| Alpine 3.6 | zsh | 5.3.1-r1 |
| Alpine 3.7 | zsh | 5.4.2-r1 |
| Alpine 3.8 | zsh | 5.4.2-r1 |
| Alpine 3.9 | zsh | 5.4.2-r1 |
| Amazon Linux 2 | zsh | 5.5.1-1.amzn2 |
| Amazon Linux 2 | zsh-html | 5.5.1-1.amzn2 |
| Arch Linux | zsh | 5.5-1 |
| Debian 12 | zsh | 5.4.2-4 |
| Debian 13 | zsh | 5.4.2-4 |
| Debian 14 | zsh | 5.4.2-4 |
| Debian 7 | zsh | 4.3.17-1+deb7u2 |
| Debian 9 | zsh | 5.3.1-4+deb9u1 |
| Red Hat Enterprise Linux 7 | zsh | 0:5.0.2-31.el7 |
| Red Hat Enterprise Linux 7 | zsh-debuginfo | 0:5.0.2-31.el7 |
| Red Hat Enterprise Linux 7 | zsh-html | 0:5.0.2-31.el7 |
| SUSE Linux Enterprise Desktop 12 SP3 | zsh | 5.0.5-6.7.2 |
| SUSE Linux Enterprise Module for Basesystem 15 | zsh | 5.5-3.3.15 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | zsh | 4.3.6-67.9.8.1 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | zsh | 4.3.6-67.9.8.1 |
| SUSE Linux Enterprise Server 12 SP3 | zsh | 5.0.5-6.7.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | zsh | 5.0.5-6.7.2 |
| Ubuntu 14.04 LTS | zsh | 5.0.2-3ubuntu6.2 |
| Ubuntu 16.04 LTS | zsh | 5.1.1-1ubuntu2.2 |
| openSUSE Tumbleweed | zsh | 5.8-7.7 |