NetSight
IP …
high7.8

CVE-2019-20044

In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option.

Impact

In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh fails to overwrite the saved uid, so the original privileges can be restored by executing MODULE_PATH=/dir/with/module zmodload with a module that calls setuid().

Affected products

VendorProductAffected versions
ZshZsh
before 5.8
FedoraprojectFedora
Versions 30, 31
DebianDebian Linux
Versions 8.0, 9.0
AppleIpados
before 13.5
AppleIphone Os
before 13.5
AppleMac Os X
before 10.15.5
from 10.13.0 before 10.13.6
from 10.14.0 before 10.14.6
from 10.15 before 10.15.5
Versions 10.13.6, 10.14.6
AppleTvos
before 13.4.5
AppleWatchos
before 6.2.5

Weakness classification

CWE-273

References