Zsh 'exec.c:hashcmd()' Function Local Denial of Service Vulnerability

Bugtraq ID:	103359
Class:	Boundary Condition Error
CVE:	CVE-2018-1071
Remote:	No
Local:	Yes
Published:	Mar 09 2018 12:00AM
Updated:	Mar 09 2018 12:00AM
Credit:	Richard Maciel Costa of Red Hat.
Vulnerable:	Zsh Zsh 5.4.2
Not Vulnerable:

Zsh 'exec.c:hashcmd()' Function Local Denial of Service Vulnerability

Zsh is prone to a local denial-of-service vulnerability.

Attackers can exploit this issue to cause denial-of-service conditions. Due to the nature of this issue, arbitrary code execution may be possible, but this has not been confirmed.

Zsh 5.4.2 is vulnerable; other versions may also be affected.

Zsh 'exec.c:hashcmd()' Function Local Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Zsh 'exec.c:hashcmd()' Function Local Denial of Service Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Zsh 'exec.c:hashcmd()' Function Local Denial of Service Vulnerability

References:

• Bug 1553531 - (CVE-2018-1071) CVE-2018-1071 zsh: Stack-based buffer overflow in (Red Hat Bugzilla)
  
• CVE-2018-1071 (Red Hat Bugzilla)
  
• Zsh Home Page (Zsh)