CVE-2019-20044

In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option

published February 24, 2020

CVSS
—
EPSS
0%
Percentile
41.6
In the wild
Unconfirmed
What it is

In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh fails to overwrite the saved uid, so the original privileges can be restored by executing MODULE_PATH=/dir/with/module zmodload with a module that calls setuid().

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00495 · 41.6th percentile
Published
2020-02-24T13:09Z
EPSS history
Timeline
  • 24 FEB 13:09Z
    In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option
    cvelistv5