CVE-2016-10714: Critical severity suse zsh vulnerability
Published Feb 27, 2018
·Updated
In zsh before 5.3, an off-by-one error resulted in undersized buffers that were intended to support PATHMAX characters.
Affected Software
5 affected componentsFixes available
debian/zsh
5.8-6+deb11u15.9-45.9-8
Zsh zsh<5.3
Canonical Ubuntu Linux=14.04
Canonical Ubuntu Linux=16.04
Canonical Ubuntu Linux=17.10
Remediation
Event History
Feb 27, 2018
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Jan 11, 2024
Data Sourced
via Launchpad·10:15 PM
Description
Sep 14, 2024
Data Sourced
via Ubuntu·06:43 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2016-10714?
CVE-2016-10714 is a vulnerability in zsh before version 5.3 that allows for undersized buffers, potentially leading to a buffer overflow.
2
How severe is CVE-2016-10714?
CVE-2016-10714 has a severity score of 9.8 (Critical).
3
Which software versions are affected by CVE-2016-10714?
Zsh versions before 5.3 are affected by CVE-2016-10714.
4
How can I fix CVE-2016-10714?
To fix CVE-2016-10714, make sure to update zsh to version 5.3 or higher.
5
Where can I find more information about CVE-2016-10714?
You can find more information about CVE-2016-10714 in the references provided: [link1], [link2], [link3].