Vulnerability Description
zsh before 5.0.7 allows evaluation of the initial values of integer variables imported from the environment (instead of treating them as literal numbers). That could allow local privilege escalation, under some specific and atypical conditions where zsh is being invoked in privilege-elevation contexts when the environment has not been properly sanitized, such as when zsh is invoked by sudo on systems where "env_reset" has been disabled.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Zsh Project | Zsh | <= 5.0.6 |
Related Weaknesses (CWE)
References
- http://zsh.sourceforge.net/releases.htmlRelease NotesThird Party Advisory
- https://sourceforge.net/p/zsh/code/ci/546203a770cec329e73781c3c8ab1078390aee72PatchThird Party Advisory
- https://usn.ubuntu.com/3593-1/
- http://zsh.sourceforge.net/releases.htmlRelease NotesThird Party Advisory
- https://sourceforge.net/p/zsh/code/ci/546203a770cec329e73781c3c8ab1078390aee72PatchThird Party Advisory
- https://usn.ubuntu.com/3593-1/
FAQ
What is CVE-2014-10070?
CVE-2014-10070 is a vulnerability with a CVSS score of 7.8 (HIGH). zsh before 5.0.7 allows evaluation of the initial values of integer variables imported from the environment (instead of treating them as literal numbers). That could allow local privilege escalation, ...
How severe is CVE-2014-10070?
CVE-2014-10070 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2014-10070?
Check the references section above for vendor advisories and patch information. Affected products include: Zsh Project Zsh.