REDHAT-BUG-1563395: Buffer Overflow
Published Apr 3, 2018
·Updated
zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the utils.c:checkmailpath function. A local attacker could exploit this to execute arbitrary code in the context of another user.
Affected Software
1 affected component
Zsh zsh<=5.4.2
Event History
Apr 3, 2018
Data Sourced
via Red Hat·08:27 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of REDHAT-BUG-1563395?
REDHAT-BUG-1563395 is classified as a critical vulnerability due to its potential for arbitrary code execution.
2
How do I fix REDHAT-BUG-1563395?
To fix REDHAT-BUG-1563395, you should update Zsh to version 5.4.3 or later.
3
Who is affected by REDHAT-BUG-1563395?
Users of Zsh versions up to and including 5.4.2 are affected by REDHAT-BUG-1563395.
4
What type of vulnerability is REDHAT-BUG-1563395?
REDHAT-BUG-1563395 is a stack-based buffer overflow vulnerability.
5
Can REDHAT-BUG-1563395 be exploited remotely?
No, REDHAT-BUG-1563395 requires local access to exploit the vulnerability.