3 CVEs publicados el 2022-05-13 · CVSS máximo 9.8/10.
Productos afectados (catálogo NVD)
canonical/ubuntu_linuxzsh/zsh
CVEs de este lote
| CVE | Severidad | CVSS | EPSS | Estado | Descripción |
|---|---|---|---|---|---|
| CVE-2017-18206 | CRITICAL | 9.8 | 3.1% | In utils.c in zsh before 5.4, symlink expansion had a buffer overflow. | |
| CVE-2018-0502 | CRITICAL | 9.8 | 2.5% | An issue was discovered in zsh before 5.6. The beginning of a #! script file was mishandled, potentially leading to an execve call to a program named on the second line. | |
| CVE-2018-13259 | CRITICAL | 9.8 | 2.7% | An issue was discovered in zsh before 5.6. Shebang lines exceeding 64 characters were truncated, potentially leading to an execve call to a program name that is a substring of the intended one. |