Логотип exploitDog
bind:"BDU:2021-01452" OR bind:"CVE-2018-1083"
Консоль
Логотип exploitDog

exploitDog

bind:"BDU:2021-01452" OR bind:"CVE-2018-1083"

Количество 14

Количество 14

fstec логотип

BDU:2021-01452

больше 8 лет назад

Уязвимость функции автозаполнения оболочки командной оболочки UNIX Zsh, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

CVSS3: 7.8
EPSS: Низкий
ubuntu логотип

CVE-2018-1083

почти 8 лет назад

Zsh before version 5.4.2-test-1 is vulnerable to a buffer overflow in the shell autocomplete functionality. A local unprivileged user can create a specially crafted directory path which leads to code execution in the context of the user who tries to use autocomplete to traverse the before mentioned path. If the user affected is privileged, this leads to privilege escalation.

CVSS3: 7.8
EPSS: Низкий
redhat логотип

CVE-2018-1083

почти 8 лет назад

Zsh before version 5.4.2-test-1 is vulnerable to a buffer overflow in the shell autocomplete functionality. A local unprivileged user can create a specially crafted directory path which leads to code execution in the context of the user who tries to use autocomplete to traverse the before mentioned path. If the user affected is privileged, this leads to privilege escalation.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2018-1083

почти 8 лет назад

Zsh before version 5.4.2-test-1 is vulnerable to a buffer overflow in the shell autocomplete functionality. A local unprivileged user can create a specially crafted directory path which leads to code execution in the context of the user who tries to use autocomplete to traverse the before mentioned path. If the user affected is privileged, this leads to privilege escalation.

CVSS3: 7.8
EPSS: Низкий
debian логотип

CVE-2018-1083

почти 8 лет назад

Zsh before version 5.4.2-test-1 is vulnerable to a buffer overflow in ...

CVSS3: 7.8
EPSS: Низкий
github логотип

GHSA-pqpc-3fmx-3wqw

больше 3 лет назад

Zsh before version 5.4.2-test-1 is vulnerable to a buffer overflow in the shell autocomplete functionality. A local unprivileged user can create a specially crafted directory path which leads to code execution in the context of the user who tries to use autocomplete to traverse the before mentioned path. If the user affected is privileged, this leads to privilege escalation.

CVSS3: 7.8
EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2018:1893-1

больше 7 лет назад

Security update for zsh

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2018:1874-1

больше 7 лет назад

Security update for zsh

EPSS: Низкий
oracle-oval логотип

ELSA-2018-1932

больше 7 лет назад

ELSA-2018-1932: zsh security update (MODERATE)

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2018:2966-1

больше 7 лет назад

Security update for zsh

EPSS: Низкий
oracle-oval логотип

ELSA-2018-3073

больше 7 лет назад

ELSA-2018-3073: zsh security and bug fix update (MODERATE)

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2018:1093-1

почти 8 лет назад

Security update for zsh

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2018:1072-1

почти 8 лет назад

Security update for zsh

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:14910-1

почти 4 года назад

Security update for zsh

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
fstec логотип
BDU:2021-01452

Уязвимость функции автозаполнения оболочки командной оболочки UNIX Zsh, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

CVSS3: 7.8
0%
Низкий
больше 8 лет назад
ubuntu логотип
CVE-2018-1083

Zsh before version 5.4.2-test-1 is vulnerable to a buffer overflow in the shell autocomplete functionality. A local unprivileged user can create a specially crafted directory path which leads to code execution in the context of the user who tries to use autocomplete to traverse the before mentioned path. If the user affected is privileged, this leads to privilege escalation.

CVSS3: 7.8
0%
Низкий
почти 8 лет назад
redhat логотип
CVE-2018-1083

Zsh before version 5.4.2-test-1 is vulnerable to a buffer overflow in the shell autocomplete functionality. A local unprivileged user can create a specially crafted directory path which leads to code execution in the context of the user who tries to use autocomplete to traverse the before mentioned path. If the user affected is privileged, this leads to privilege escalation.

CVSS3: 7.5
0%
Низкий
почти 8 лет назад
nvd логотип
CVE-2018-1083

Zsh before version 5.4.2-test-1 is vulnerable to a buffer overflow in the shell autocomplete functionality. A local unprivileged user can create a specially crafted directory path which leads to code execution in the context of the user who tries to use autocomplete to traverse the before mentioned path. If the user affected is privileged, this leads to privilege escalation.

CVSS3: 7.8
0%
Низкий
почти 8 лет назад
debian логотип
CVE-2018-1083

Zsh before version 5.4.2-test-1 is vulnerable to a buffer overflow in ...

CVSS3: 7.8
0%
Низкий
почти 8 лет назад
github логотип
GHSA-pqpc-3fmx-3wqw

Zsh before version 5.4.2-test-1 is vulnerable to a buffer overflow in the shell autocomplete functionality. A local unprivileged user can create a specially crafted directory path which leads to code execution in the context of the user who tries to use autocomplete to traverse the before mentioned path. If the user affected is privileged, this leads to privilege escalation.

CVSS3: 7.8
0%
Низкий
больше 3 лет назад
suse-cvrf логотип
openSUSE-SU-2018:1893-1

Security update for zsh

больше 7 лет назад
suse-cvrf логотип
SUSE-SU-2018:1874-1

Security update for zsh

больше 7 лет назад
oracle-oval логотип
ELSA-2018-1932

ELSA-2018-1932: zsh security update (MODERATE)

больше 7 лет назад
suse-cvrf логотип
openSUSE-SU-2018:2966-1

Security update for zsh

больше 7 лет назад
oracle-oval логотип
ELSA-2018-3073

ELSA-2018-3073: zsh security and bug fix update (MODERATE)

больше 7 лет назад
suse-cvrf логотип
openSUSE-SU-2018:1093-1

Security update for zsh

почти 8 лет назад
suse-cvrf логотип
SUSE-SU-2018:1072-1

Security update for zsh

почти 8 лет назад
suse-cvrf логотип
SUSE-SU-2022:14910-1

Security update for zsh

почти 4 года назад

Уязвимостей на страницу