UbuntuUpdates.org

Bugs fixes in "zsh"

Origin Bug number Title Date fixed
CVE CVE-2018-1083 check bounds on PATH_MAX-sized buffer used for file completion candidates 2018-03-27
CVE CVE-2018-1071 zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the exec.c:hashcmd() function. A local attacker could exploit this to cau 2018-03-27
CVE CVE-2018-1083 check bounds on PATH_MAX-sized buffer used for file completion candidates 2018-03-27
CVE CVE-2018-1071 zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the exec.c:hashcmd() function. A local attacker could exploit this to cau 2018-03-27
CVE CVE-2018-7549 In params.c in zsh through 5.4.2, there is a crash during a copy of an empty hash table, as demonstrated by typeset -p. 2018-03-08
CVE CVE-2017-18206 In utils.c in zsh before 5.4, symlink expansion had a buffer overflow. 2018-03-08
CVE CVE-2017-18205 In builtin.c in zsh before 5.4, when sh compatibility mode is used, there is a NULL pointer dereference during processing of the cd command with no a 2018-03-08
CVE CVE-2016-10714 In zsh before 5.3, an off-by-one error resulted in undersized buffers that were intended to support PATH_MAX characters. 2018-03-08
CVE CVE-2018-7549 In params.c in zsh through 5.4.2, there is a crash during a copy of an empty hash table, as demonstrated by typeset -p. 2018-03-08
CVE CVE-2017-18206 In utils.c in zsh before 5.4, symlink expansion had a buffer overflow. 2018-03-08
CVE CVE-2017-18205 In builtin.c in zsh before 5.4, when sh compatibility mode is used, there is a NULL pointer dereference during processing of the cd command with no a 2018-03-08
CVE CVE-2016-10714 In zsh before 5.3, an off-by-one error resulted in undersized buffers that were intended to support PATH_MAX characters. 2018-03-08
CVE CVE-2018-7549 In params.c in zsh through 5.4.2, there is a crash during a copy of an empty hash table, as demonstrated by typeset -p. 2018-03-08
CVE CVE-2017-18206 In utils.c in zsh before 5.4, symlink expansion had a buffer overflow. 2018-03-08
CVE CVE-2017-18205 In builtin.c in zsh before 5.4, when sh compatibility mode is used, there is a NULL pointer dereference during processing of the cd command with no a 2018-03-08
CVE CVE-2016-10714 In zsh before 5.3, an off-by-one error resulted in undersized buffers that were intended to support PATH_MAX characters. 2018-03-08
CVE CVE-2018-7549 In params.c in zsh through 5.4.2, there is a crash during a copy of an empty hash table, as demonstrated by typeset -p. 2018-03-08
CVE CVE-2017-18206 In utils.c in zsh before 5.4, symlink expansion had a buffer overflow. 2018-03-08
CVE CVE-2017-18205 In builtin.c in zsh before 5.4, when sh compatibility mode is used, there is a NULL pointer dereference during processing of the cd command with no a 2018-03-08
CVE CVE-2016-10714 In zsh before 5.3, an off-by-one error resulted in undersized buffers that were intended to support PATH_MAX characters. 2018-03-08



About   -   Send Feedback to @ubuntu_updates