Zsh Project Zsh
3 CVEs affecting Zsh Project Zsh. Latest disclosed: 2018-02-27. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2014-10072 | Critical | 9.8 | 2018-02-27 | In utils.c in zsh before 5.0.6, there is a buffer overflow when scanning very long directory paths for symbolic links. |
CVE-2017-18205 | High | 8.1 | 2018-02-27 | In builtin.c in zsh before 5.4, when sh compatibility mode is used, there is a NULL pointer dereference during processing of the cd command with no argument if… |
CVE-2014-10070 | High | 7.8 | 2018-02-27 | zsh before 5.0.7 allows evaluation of the initial values of integer variables imported from the environment (instead of treating them as literal numbers). That… |