CVE-2018-13259: falha em zsh before 5.6
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 2.7%
An issue was discovered in zsh before 5.6. Shebang lines exceeding 64 characters were truncated, potentially leading to an execve call to a program name that is a substring of the intended one.
Produtos afetados
n/a · zsh before 5.6Referências
https://access.redhat.com/errata/RHSA-2019:2017https://bugs.debian.org/908000https://lists.debian.org/debian-lts-announce/2020/12/msg00000.htmlhttps://security.gentoo.org/glsa/201903-02https://sourceforge.net/p/zsh/code/ci/1c4c7b6a4d17294df028322b70c53803a402233dhttps://usn.ubuntu.com/3764-1/https://www.zsh.org/mla/zsh-announce/136