CVE:CVE-2018-1071
CNNVD:CNNVD-201803-327
Zsh是一款可用作交互式登录的shell及脚本编写的命令解释器。
zsh 5.4.2版本及之前版本存在缓冲区错误漏洞。本地攻击者利用该漏洞造成拒绝服务。
solution:Upgrade zsh zsh to a higher version than 5.4.2,and avoid the version (,5.4.2]; Upgrade debian debian_linux to a higher version than 7.0,and avoid the version 7.0; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,17.10,and avoid the version 14.04,16.04,17.10; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0