7.8

CVE-2019-20044

In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh fails to overwrite the saved uid, so the original privileges can be restored by executing MODULE_PATH=/dir/with/module zmodload with a module that calls setuid().
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zsh ≫ Zsh Version < 5.8
   Apple ≫ macOS Version-
   Linux ≫ Linux Kernel Version-
Fedoraproject ≫ Fedora Version30
Fedoraproject ≫ Fedora Version31
Debian ≫ Debian Linux Version8.0
Debian ≫ Debian Linux Version9.0
Apple ≫ iPadOS Version < 13.5
Apple ≫ iPhone OS Version < 13.5
Apple ≫ macOS X Version < 10.15.5
Apple ≫ macOS X Version >= 10.13.0 < 10.13.6
Apple ≫ macOS X Version >= 10.14.0 < 10.14.6
Apple ≫ macOS X Version >= 10.15 < 10.15.5
Apple ≫ macOS X Version10.13.6 Update-
Apple ≫ macOS X Version10.13.6 Updatesecurity_update_2018-002
Apple ≫ macOS X Version10.13.6 Updatesecurity_update_2018-003
Apple ≫ macOS X Version10.13.6 Updatesecurity_update_2019-001
Apple ≫ macOS X Version10.13.6 Updatesecurity_update_2019-002
Apple ≫ macOS X Version10.13.6 Updatesecurity_update_2019-003
Apple ≫ macOS X Version10.13.6 Updatesecurity_update_2019-004
Apple ≫ macOS X Version10.13.6 Updatesecurity_update_2019-005
Apple ≫ macOS X Version10.13.6 Updatesecurity_update_2019-006
Apple ≫ macOS X Version10.13.6 Updatesecurity_update_2019-007
Apple ≫ macOS X Version10.13.6 Updatesecurity_update_2020-001
Apple ≫ macOS X Version10.13.6 Updatesecurity_update_2020-002
Apple ≫ macOS X Version10.14.6 Update-
Apple ≫ macOS X Version10.14.6 Updatesecurity_update_2019-001
Apple ≫ macOS X Version10.14.6 Updatesecurity_update_2019-002
Apple ≫ macOS X Version10.14.6 Updatesecurity_update_2019-004
Apple ≫ macOS X Version10.14.6 Updatesecurity_update_2019-005
Apple ≫ macOS X Version10.14.6 Updatesecurity_update_2019-006
Apple ≫ macOS X Version10.14.6 Updatesecurity_update_2019-007
Apple ≫ macOS X Version10.14.6 Updatesecurity_update_2020-001
Apple ≫ macOS X Version10.14.6 Updatesecurity_update_2020-002
Apple ≫ tvOS Version < 13.4.5
Apple ≫ watchOS Version < 6.2.5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.5% 0.385
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-273 Improper Check for Dropped Privileges

The product attempts to drop privileges but does not check or incorrectly checks to see if the drop succeeded.

https://support.apple.com/kb/HT211168
Third Party Advisory
https://support.apple.com/kb/HT211170
Third Party Advisory
https://support.apple.com/kb/HT211171
Third Party Advisory
https://support.apple.com/kb/HT211175
Third Party Advisory
http://zsh.sourceforge.net/releases.html
Third Party Advisory
Release Notes
https://lists.debian.org/debian-lts-announce/2020/12/msg00000.html
Third Party Advisory
Mailing List
http://seclists.org/fulldisclosure/2020/May/49
Third Party Advisory
Mailing List
http://seclists.org/fulldisclosure/2020/May/53
Third Party Advisory
Mailing List
http://seclists.org/fulldisclosure/2020/May/55
Third Party Advisory
Mailing List
http://seclists.org/fulldisclosure/2020/May/59
Third Party Advisory
Mailing List
https://github.com/XMB5/zsh-privileged-upgrade
Broken Link
https://lists.debian.org/debian-lts-announce/2020/03/msg00004.html
Third Party Advisory
Mailing List
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FP64FFIZI2CKQOEAOI5A72PVQULE7ZZC/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PN5V7MPHRRP7QNHOEK56S7QGRU53WUN6/
https://security.gentoo.org/glsa/202003-55
Third Party Advisory
https://support.apple.com/HT211168
Third Party Advisory
https://support.apple.com/HT211170
Third Party Advisory
https://support.apple.com/HT211171
Third Party Advisory
https://support.apple.com/HT211175
Third Party Advisory
https://www.zsh.org/mla/zsh-announce/141
Vendor Advisory
Release Notes