Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Buck Evan

#24932de 53,635
9.8CVSS total
Vulnerabilidades · 1
PT-2017-4092
9.8
2017-11-27
Gnu · Zsh · CVE-2018-0502
**Name of the Vulnerable Software and Affected Versions** zsh versions prior to 5.6 **Description** The issue is related to the incorrect handling of a script containing #!. This could potentially allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service. The beginning of a #! script file was mishandled, potentially leading to an execve call to a program named on the second line. **Recommendations** For versions prior to 5.6, update to version 5.6 or later to resolve the issue. As a temporary workaround, consider restricting the execution of scripts containing #! to minimize the risk of exploitation.