Lucene search
Redhat.comRH:CVE-2018-13259HistorySep 06, 2018 - 5:49 p.m.
CVE-2018-13259
2018-09-0617:49:30
redhat.com
access.redhat.com
10
EPSS
0.007
Percentile
80.4%
It was discovered that zsh does not properly validate the shebang of input files and it truncates it to the first 64 bytes. A local attacker may use this flaw to make zsh execute a different binary than what is expected, named with a substring of the shebang one.
Related
nessus
nessus
NewStart CGSL CORE 5.04 / MAIN 5.04 : zsh Vulnerability (NS-SA-2019-0200)
2019-10-15 00:00:00
NewStart CGSL CORE 5.05 / MAIN 5.05 : zsh Vulnerability (NS-SA-2019-0247)
2019-12-31 00:00:00
CentOS 7 : zsh (CESA-2019:2017)
2019-08-30 00:00:00
nvd
nvd
CVE-2018-13259
2018-09-05 08:29:00
cve
cve
CVE-2018-13259
2018-09-05 08:29:00
redhat
redhat
(RHSA-2019:2017) Moderate: zsh security and bug fix update
2019-08-06 07:50:39
veracode
veracode
Arbitrary Command Execution
2019-08-08 00:07:10
oraclelinux
oraclelinux
zsh security and bug fix update
2019-08-13 00:00:00
centos
centos
zsh security update
2019-08-30 04:37:53
debiancve
debiancve
CVE-2018-13259
2018-09-05 08:29:00
amazon
amazon
Medium: zsh
2019-09-13 22:56:00
Medium: zsh
2018-10-08 22:18:00
prion
prion
Design/Logic Flaw
2018-09-05 08:29:00
osv
osv
CVE-2018-13259
2018-09-05 08:29:00
zsh-5.8-7.7 on GA media
2024-06-15 00:00:00
zsh - security update
2020-11-30 00:00:00
ubuntucve
ubuntucve
CVE-2018-13259
2018-09-05 00:00:00
cvelist
cvelist
CVE-2018-13259
2018-09-05 07:00:00
gentoo
gentoo
Zsh: User-assisted execution of arbitrary code
2019-03-10 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2018:2686-1)
2021-06-09 00:00:00
Huawei EulerOS: Security Advisory for zsh (EulerOS-SA-2019-2459)
2020-01-23 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:0161-1)
2022-01-25 00:00:00
suse
suse
Security update for zsh (important)
2018-09-17 12:13:49
Security update for zsh (important)
2018-10-02 12:07:57
fedora
fedora
[SECURITY] Fedora 28 Update: zsh-5.5.1-2.fc28
2018-09-11 17:03:55
[SECURITY] Fedora 29 Update: zsh-5.6.2-1.fc29
2018-10-02 19:34:46
[SECURITY] Fedora 27 Update: zsh-5.4.1-4.fc27
2018-09-14 21:54:37
archlinux
archlinux
[ASA-201809-3] zsh: insufficient validation
2018-09-24 00:00:00
ubuntu
ubuntu
Zsh vulnerabilities
2018-09-11 00:00:00
debian
debian
[SECURITY] [DLA 2470-1] zsh security update
2020-12-01 03:35:30
photon
photon