PT-2018-3619 · Zsh+5 · Zsh+5

Daniel Shahaf · Published 2018-07-05 · Updated 2024-06-15 · CVE-2018-13259

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions zsh versions prior to 5.6

Description An issue was discovered in zsh where shebang lines exceeding 64 characters were truncated, potentially leading to an execve call to a program name that is a substring of the intended one. This could allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.

Recommendations For versions prior to 5.6, update to version 5.6 or later to resolve the issue. As a temporary workaround, consider avoiding the use of shebang lines exceeding 64 characters until a patch is available. Restrict access to sensitive data and systems to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2018-2654

BDU:2021-01388

CESA-2019_2017

CVE-2018-13259

DLA-2470-1

OPENSUSE-SU-2018_2741-1

OPENSUSE-SU-2018_2966-1

OPENSUSE-SU-2024:11543-1

RHSA-2019:2017

RHSA-2019_2017

SUSE-SU-2018:2686-1

SUSE-SU-2022:0161-1

SUSE-SU-2022:14910-1

SUSE-SU-2022_14910-1

USN-3764-1

Affected Products

Alt Linux

Centos

Red Hat

Suse

Ubuntu

Zsh

References · 99

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13259 · Security Note
• https://bdu.fstec.ru/vul/2021-01493 · Security Note
• https://errata.altlinux.org/ALT-PU-2018-2654 · Vendor Advisory
• https://usn.ubuntu.com/3764-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-13259 · Security Note
• https://sourceforge.net/p/zsh/code/ci/1c4c7b6a4d17294df028322b70c53803a402233d · Patch
• https://osv.dev/vulnerability/DLA-2470-1 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2019:2017 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1071 · Security Note
• https://osv.dev/vulnerability/USN-3764-1 · Vendor Advisory
• https://zsh.org/mla/zsh-announce/136 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11543-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2018-13259 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18206 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0502 · Security Note