Daniel Shahaf

An issue was discovered in zsh where shebang lines exceeding 64 characters were truncated, potentially leading to an execve call to a program name that is a substring of the intended one. This could allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.

The issue allows local users to overwrite arbitrary files or kill arbitrary processes via a symlink attack on the file specified by the --pid-file option.

The issue allows remote authenticated users to cause a denial of service, potentially resulting in an assertion failure or out-of-bounds read. This can be achieved by sending a certain request against a revision root, specifically via COPY, DELETE, or MOVE requests.