PT-2017-4059 · Zsh+5 · Zsh+5

Richard Maciel Costa · Published 2017-12-04 · Updated 2024-06-15 · CVE-2018-1100

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions zsh versions 5.4.2 and earlier

Description The issue is related to a stack-based buffer overflow in the checkmailpath function, located in utils.c. This could allow a local attacker to execute arbitrary code in the context of another user, potentially leading to unauthorized access to confidential data, disruption of data integrity, and denial of service.

Recommendations For zsh versions 5.4.2 and earlier, consider disabling the checkmailpath function as a temporary workaround until a patch is available. Restrict access to sensitive data and ensure proper user privileges to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Memory Corruption

Weakness Enumeration

CWE-120

CWE-787

Related Identifiers

ALT-PU-2018-2144

BDU:2021-01390

CESA-2018_1932

CESA-2018_3073

CVE-2018-1100

DLA-2470-1

OPENSUSE-SU-2018_1893-1

OPENSUSE-SU-2018_2966-1

OPENSUSE-SU-2024:11543-1

RHSA-2018:1932

RHSA-2018:3073

RHSA-2018_1932

RHSA-2018_3073

SUSE-SU-2018:1037-1

SUSE-SU-2018:1874-1

SUSE-SU-2018_1037-1

SUSE-SU-2022:0733-1

SUSE-SU-2022_0733-1

USN-3764-1

Affected Products

Alt Linux

Centos

Red Hat

Suse

Ubuntu

Zsh

References · 103

• https://osv.dev/vulnerability/SUSE-SU-2018:1037-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13259 · Security Note
• https://bdu.fstec.ru/vul/2021-01493 · Security Note
• https://access.redhat.com/errata/RHSA-2018:3073 · Vendor Advisory
• https://security.gentoo.org/glsa/201805-10 · Vendor Advisory
• https://usn.ubuntu.com/3764-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-1100 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7548 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2018-1100 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-2470-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7549 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1071 · Security Note
• https://linux.oracle.com/errata/ELSA-2018-3073.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-1100 · Security Note
• https://access.redhat.com/errata/RHSA-2018:1932 · Vendor Advisory