NetSight
IP …
high7.8

CVE-2018-1083

Zsh before version 5.4.2-test-1 is vulnerable to a buffer overflow in the shell autocomplete functionality.

Impact

Zsh before version 5.4.2-test-1 is vulnerable to a buffer overflow in the shell autocomplete functionality. A local unprivileged user can create a specially crafted directory path which leads to code execution in the context of the user who tries to use autocomplete to traverse the before mentioned path. If the user affected is privileged, this leads to privilege escalation.

Affected products

VendorProductAffected versions
ZshZsh
through 5.4.1
CanonicalUbuntu Linux
Versions 14.04, 16.04, 17.10
DebianDebian Linux
Version 7.0
RedhatEnterprise Linux Desktop
Versions 6.0, 7.0
RedhatEnterprise Linux Server
Versions 6.0, 7.0
RedhatEnterprise Linux Workstation
Versions 6.0, 7.0

Weakness classification

CWE-120CWE-119

References