NetSight
IP …
medium5.5

CVE-2018-1071

zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the exec.c:hashcmd() function.

Impact

zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the exec.c:hashcmd() function. A local attacker could exploit this to cause a denial of service.

Affected products

VendorProductAffected versions
ZshZsh
through 5.4.2
DebianDebian Linux
Version 7.0
CanonicalUbuntu Linux
Versions 14.04, 16.04, 17.10
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Workstation
Version 7.0

Weakness classification

CWE-121CWE-787

References