CVE-2017-18206

In utils.c in zsh before 5.4, symlink expansion had a buffer overflow.

• CWE-119

• https://access.redhat.com/errata/RHSA-2018:1932Third Party Advisory
• https://access.redhat.com/errata/RHSA-2018:3073Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/12/msg00000.html
• https://security.gentoo.org/glsa/201805-10Third Party Advisory
• https://sourceforge.net/p/zsh/code/ci/c7a9cf465dd620ef48d586026944d9bd7a0d5d6dPatch, Third Party Advisory
• https://usn.ubuntu.com/3593-1/Third Party Advisory
• https://access.redhat.com/errata/RHSA-2018:1932Third Party Advisory
• https://access.redhat.com/errata/RHSA-2018:3073Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/12/msg00000.html
• https://security.gentoo.org/glsa/201805-10Third Party Advisory
• https://sourceforge.net/p/zsh/code/ci/c7a9cf465dd620ef48d586026944d9bd7a0d5d6dPatch, Third Party Advisory
• https://usn.ubuntu.com/3593-1/Third Party Advisory

Published

Feb 27, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-18200The f2fs implementation in the Linux kernel before 4.14 mish…
• CVE-2017-18201An issue was discovered in GNU libcdio before 2.0.0. There i…
• CVE-2017-18202The __oom_reap_task_mm function in mm/oom_kill.c in the Linu…7
• CVE-2017-18203The dm_get_from_kobject function in drivers/md/dm.c in the L…
• CVE-2017-18204The ocfs2_setattr function in fs/ocfs2/file.c in the Linux k…
• CVE-2017-18205In builtin.c in zsh before 5.4, when sh compatibility mode i…
• CVE-2017-18207The Wave_read._read_fmt_chunk function in Lib/wave.py in Pyt…
• CVE-2017-18208The madvise_willneed function in mm/madvise.c in the Linux k…
• CVE-2017-18209In the GetOpenCLCachedFilesDirectory function in magick/open…
• CVE-2017-1821Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-18210In ImageMagick 7.0.7, a NULL pointer dereference vulnerabili…
• CVE-2017-18211In ImageMagick 7.0.7, a NULL pointer dereference vulnerabili…