Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-18205

Опубликовано: 27 фев. 2018
Источник: nvd
CVSS3: 8.1
CVSS2: 6.8
EPSS Низкий

Описание

In builtin.c in zsh before 5.4, when sh compatibility mode is used, there is a NULL pointer dereference during processing of the cd command with no argument if HOME is not set.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:zsh_project:zsh:*:*:*:*:*:*:*:*
Версия до 5.4 (исключая)

EPSS

Процентиль: 81%
0.02043
Низкий

8.1 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-476

Связанные уязвимости

CVSS3: 8.1
ubuntu
больше 8 лет назад

In builtin.c in zsh before 5.4, when sh compatibility mode is used, there is a NULL pointer dereference during processing of the cd command with no argument if HOME is not set.

CVSS3: 2
redhat
больше 9 лет назад

In builtin.c in zsh before 5.4, when sh compatibility mode is used, there is a NULL pointer dereference during processing of the cd command with no argument if HOME is not set.

CVSS3: 8.1
debian
больше 8 лет назад

In builtin.c in zsh before 5.4, when sh compatibility mode is used, th ...

CVSS3: 8.1
github
больше 4 лет назад

In builtin.c in zsh before 5.4, when sh compatibility mode is used, there is a NULL pointer dereference during processing of the cd command with no argument if HOME is not set.

CVSS3: 9.8
altlinux
около 9 лет назад

ALT-PU-2017-2148: package `zsh` update to version 5.4.2-alt1

EPSS

Процентиль: 81%
0.02043
Низкий

8.1 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-476