CVE-2018-13259
Critical
Description
An issue was discovered in zsh before 5.6. Shebang lines exceeding 64 characters were truncated, potentially leading to an execve call to a program name that is a substring of the intended one.
SeverityCritical
CVSS9.8
Exploit probability—
ProductCanonical Ubuntu Linux
PublishedSep 5, 2018
First seenSep 5, 2018
How to fix
Update
- zsh zsh5.6 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| canonical ubuntu_linux | 14.04, 16.04, 18.04 | — |
| zsh zsh | v < 5.6 | 5.6 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.