5.5

CVE-2018-1071

zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the exec.c:hashcmd() function. A local attacker could exploit this to cause a denial of service.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zsh ≫ Zsh Version <= 5.4.2
Debian ≫ Debian Linux Version 7.0
Canonical ≫ Ubuntu Linux Version 14.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 16.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 17.10
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.43% 0.357
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NIST 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:N/A:P
CWE-121 Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://access.redhat.com/errata/RHSA-2018:3073
Third Party Advisory
https://security.gentoo.org/glsa/201805-10
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/12/msg00000.html
http://www.securityfocus.com/bid/103359
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1553531
Third Party Advisory
Issue Tracking
https://lists.debian.org/debian-lts-announce/2018/03/msg00038.html
Third Party Advisory
Mailing List
https://usn.ubuntu.com/3608-1/
Third Party Advisory