| Max CVSS | 7.5 | Min CVSS | 7.2 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2018-1100 | 7.2 |
zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the utils.c:checkmailpath function. A local attacker could exploit this to execute arbitrary code in the context of another user.
|
13-02-2023 - 04:53 | 11-04-2018 - 19:29 | |
| CVE-2017-18206 | 7.5 |
In utils.c in zsh before 5.4, symlink expansion had a buffer overflow.
|
01-12-2020 - 07:15 | 27-02-2018 - 22:29 | |
| CVE-2018-1083 | 7.2 |
Zsh before version 5.4.2-test-1 is vulnerable to a buffer overflow in the shell autocomplete functionality. A local unprivileged user can create a specially crafted directory path which leads to code execution in the context of the user who tries to
|
01-12-2020 - 07:15 | 28-03-2018 - 13:29 | |
| CVE-2014-10072 | 7.5 |
In utils.c in zsh before 5.0.6, there is a buffer overflow when scanning very long directory paths for symbolic links.
|
31-10-2018 - 10:29 | 27-02-2018 - 22:29 |