PT-2017-4093 · Zsh+5 · Zsh+5

Oliver Kiddle · Published 2017-09-04 · Updated 2024-06-15 · CVE-2018-1083

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zsh versions prior to 5.4.2-test-1

Description The issue is related to a buffer overflow in the shell autocomplete functionality. A local unprivileged user can create a specially crafted directory path, leading to code execution in the context of the user who tries to use autocomplete to traverse the mentioned path. If the affected user is privileged, this results in privilege escalation. The exploitation of this issue may allow an attacker to access confidential data, compromise its integrity, and cause a denial of service.

Recommendations For versions prior to 5.4.2-test-1, update to version 5.4.2-test-1 or later to resolve the issue. As a temporary workaround, consider disabling the autocomplete functionality until a patch is available. Restrict access to sensitive directories to minimize the risk of exploitation.

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

CWE-119

Related Identifiers

ALT-PU-2017-2148

BDU:2021-01452

CESA-2018_1932

CESA-2018_3073

CVE-2018-1083

DLA-1335-1

DLA-2470-1

MGASA-2018-0206

OPENSUSE-SU-2018_1093-1

OPENSUSE-SU-2018_1893-1

OPENSUSE-SU-2018_2966-1

OPENSUSE-SU-2024:11543-1

RHSA-2018:1932

RHSA-2018:3073

RHSA-2018_1932

RHSA-2018_3073

SUSE-SU-2018:1072-1

SUSE-SU-2018:1874-1

SUSE-SU-2022:14910-1

SUSE-SU-2022_14910-1

USN-3608-1

Affected Products

Alt Linux

Centos

Red Hat

Suse

Ubuntu

Zsh

References · 124

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13259 · Security Note
• https://access.redhat.com/errata/RHSA-2018:3073 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-01493 · Security Note
• https://ubuntu.com/security/CVE-2018-1083 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-1083 · Security Note
• https://osv.dev/vulnerability/CVE-2018-1083 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2018-1083 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3608-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3608-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2018-0206.html · Security Note
• https://osv.dev/vulnerability/DLA-2470-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-1083 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7549 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1071 · Security Note
• https://security.gentoo.org/glsa/201805-10 · Vendor Advisory