Beveiligingsadvies

CVE-2019-20044

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-02-24 13:09:43

Laatst bijgewerkt 2024-08-05 02:32:10

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh fails to overwrite the saved uid, so the original privileges can be restored by executing MODULE_PATH=/dir/with/module zmodload with a module that calls setuid().

← Alle CVE's bekijken Bekijk op cve.org ↗