CVE-2014-10070 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2014-10070 Interim 1 42 2025-03-25T01:29:21Z current 2021-05-30T13:25:39Z 2025-03-25T01:29:21Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2014-10070 zsh before 5.0.7 allows evaluation of the initial values of integer variables imported from the environment (instead of treating them as literal numbers). That could allow local privilege escalation, under some specific and atypical conditions where zsh is being invoked in privilege-elevation contexts when the environment has not been properly sanitized, such as when zsh is invoked by sudo on systems where "env_reset" has been disabled. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2018-April/003957.html E-Mail link for SUSE-SU-2018:1072-1 https://lists.suse.com/pipermail/sle-security-updates/2022-March/010436.html E-Mail link for SUSE-SU-2022:14910-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GK62YTNMQ4SBUW42W4UTPSYBGUSFJAAP/#GK62YTNMQ4SBUW42W4UTPSYBGUSFJAAP E-Mail link for openSUSE-SU-2018:1093-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 Image SLES12-SP4-Azure-BYOS Image SLES12-SP4-EC2-HVM-BYOS Image SLES12-SP4-GCE-BYOS Image SLES12-SP4-OCI-BYOS Image SLES12-SP4-SAP-Azure Image SLES12-SP4-SAP-Azure-BYOS Image SLES12-SP4-SAP-Azure-LI-BYOS-Production Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production Image SLES12-SP4-SAP-EC2-HVM Image SLES12-SP4-SAP-EC2-HVM-BYOS Image SLES12-SP4-SAP-GCE Image SLES12-SP4-SAP-GCE-BYOS Image SLES12-SP4-SAP-OCI-BYOS Image SLES12-SP5-Azure-BYOS Image SLES12-SP5-Azure-Basic-On-Demand Image SLES12-SP5-Azure-HPC-BYOS Image SLES12-SP5-Azure-HPC-On-Demand Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-Azure-SAP-On-Demand Image SLES12-SP5-Azure-Standard-On-Demand Image SLES12-SP5-EC2-BYOS Image SLES12-SP5-EC2-On-Demand Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-EC2-SAP-On-Demand Image SLES12-SP5-GCE-BYOS Image SLES12-SP5-GCE-On-Demand Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-GCE-SAP-On-Demand Image SLES12-SP5-OCI-BYOS-BYOS Image SLES12-SP5-OCI-BYOS-SAP-BYOS Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production SUSE CaaS Platform 4.0 SUSE CaaS Platform 4.5 SUSE Enterprise Storage 6 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Enterprise Storage 7 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise High Performance Computing 12 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise Real Time 15 SP2 SUSE Linux Enterprise Server 11 SP1-TERADATA SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Server 15-ESPOS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server Business Critical Linux 15 SP1 SUSE Linux Enterprise Server Business Critical Linux 15 SP2 SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server Teradata 12 SP3-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Manager Proxy 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Manager Retail Branch Server 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Manager Server 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 zsh zsh-4.3.6-67.9.8.1 zsh-5.0.5-6.7.2 zsh-5.0.5-6.7.2 as a component of Image SLES12-SP4-Azure-BYOS zsh-5.0.5-6.7.2 as a component of Image SLES12-SP4-EC2-HVM-BYOS zsh-5.0.5-6.7.2 as a component of Image SLES12-SP4-GCE-BYOS zsh-5.0.5-6.7.2 as a component of Image SLES12-SP4-OCI-BYOS zsh-5.0.5-6.7.2 as a component of Image SLES12-SP4-SAP-Azure zsh-5.0.5-6.7.2 as a component of Image SLES12-SP4-SAP-Azure-BYOS zsh-5.0.5-6.7.2 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production zsh-5.0.5-6.7.2 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production zsh-5.0.5-6.7.2 as a component of Image SLES12-SP4-SAP-EC2-HVM zsh-5.0.5-6.7.2 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS zsh-5.0.5-6.7.2 as a component of Image SLES12-SP4-SAP-GCE zsh-5.0.5-6.7.2 as a component of Image SLES12-SP4-SAP-GCE-BYOS zsh-5.0.5-6.7.2 as a component of Image SLES12-SP4-SAP-OCI-BYOS zsh-5.0.5-6.7.2 as a component of Image SLES12-SP5-Azure-BYOS zsh-5.0.5-6.7.2 as a component of Image SLES12-SP5-Azure-Basic-On-Demand zsh-5.0.5-6.7.2 as a component of Image SLES12-SP5-Azure-HPC-BYOS zsh-5.0.5-6.7.2 as a component of Image SLES12-SP5-Azure-HPC-On-Demand zsh-5.0.5-6.7.2 as a component of Image SLES12-SP5-Azure-SAP-BYOS zsh-5.0.5-6.7.2 as a component of Image SLES12-SP5-Azure-SAP-On-Demand zsh-5.0.5-6.7.2 as a component of Image SLES12-SP5-Azure-Standard-On-Demand zsh-5.0.5-6.7.2 as a component of Image SLES12-SP5-EC2-BYOS zsh-5.0.5-6.7.2 as a component of Image SLES12-SP5-EC2-On-Demand zsh-5.0.5-6.7.2 as a component of Image SLES12-SP5-EC2-SAP-BYOS zsh-5.0.5-6.7.2 as a component of Image SLES12-SP5-EC2-SAP-On-Demand zsh-5.0.5-6.7.2 as a component of Image SLES12-SP5-GCE-BYOS zsh-5.0.5-6.7.2 as a component of Image SLES12-SP5-GCE-On-Demand zsh-5.0.5-6.7.2 as a component of Image SLES12-SP5-GCE-SAP-BYOS zsh-5.0.5-6.7.2 as a component of Image SLES12-SP5-GCE-SAP-On-Demand zsh-5.0.5-6.7.2 as a component of Image SLES12-SP5-OCI-BYOS-BYOS zsh-5.0.5-6.7.2 as a component of Image SLES12-SP5-OCI-BYOS-SAP-BYOS zsh-5.0.5-6.7.2 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production zsh-5.0.5-6.7.2 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production zsh-5.0.5-6.7.2 as a component of SUSE Linux Enterprise Desktop 12 SP3 zsh-5.0.5-6.7.2 as a component of SUSE Linux Enterprise Desktop 12 SP4 zsh-5.0.5-6.7.2 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 zsh-4.3.6-67.9.8.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 zsh-4.3.6-67.9.8.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA zsh-4.3.6-67.9.8.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA zsh-4.3.6-67.9.8.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS zsh-5.0.5-6.7.2 as a component of SUSE Linux Enterprise Server 12 SP3 zsh-5.0.5-6.7.2 as a component of SUSE Linux Enterprise Server 12 SP4 zsh-5.0.5-6.7.2 as a component of SUSE Linux Enterprise Server 12 SP5 zsh-5.0.5-6.7.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 zsh-5.0.5-6.7.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 zsh as a component of HPE Helion OpenStack 8 zsh as a component of SUSE CaaS Platform 4.0 zsh as a component of SUSE CaaS Platform 4.5 zsh as a component of SUSE Enterprise Storage 6 zsh as a component of SUSE Enterprise Storage 7 zsh as a component of SUSE Linux Enterprise High Performance Computing 12 SP4 zsh as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 zsh as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS zsh as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS zsh as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS zsh as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS zsh as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS zsh as a component of SUSE Linux Enterprise Module for Basesystem 15 zsh as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 zsh as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 zsh as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 zsh as a component of SUSE Linux Enterprise Real Time 15 SP2 zsh as a component of SUSE Linux Enterprise Server 12 SP2 zsh as a component of SUSE Linux Enterprise Server 12 SP2-BCL zsh as a component of SUSE Linux Enterprise Server 12 SP4 zsh as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS zsh as a component of SUSE Linux Enterprise Server 12 SP4-LTSS zsh as a component of SUSE Linux Enterprise Server 12 SP5 zsh as a component of SUSE Linux Enterprise Server 15 SP1-LTSS zsh as a component of SUSE Linux Enterprise Server 15 SP2-LTSS zsh as a component of SUSE Linux Enterprise Server 15-ESPOS zsh as a component of SUSE Linux Enterprise Server 15-LTSS zsh as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 zsh as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP2 zsh as a component of SUSE Linux Enterprise Server Teradata 12 SP3 zsh as a component of SUSE Linux Enterprise Server Teradata 12 SP3-LTSS zsh as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 zsh as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 zsh as a component of SUSE Linux Enterprise Server for SAP Applications 15 zsh as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 zsh as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 zsh as a component of SUSE Manager Proxy 4.1 zsh as a component of SUSE Manager Retail Branch Server 4.1 zsh as a component of SUSE Manager Server 4.1 zsh as a component of SUSE OpenStack Cloud 8 zsh as a component of SUSE OpenStack Cloud 9 zsh as a component of SUSE OpenStack Cloud Crowbar 8 zsh as a component of SUSE OpenStack Cloud Crowbar 9 zsh before 5.0.7 allows evaluation of the initial values of integer variables imported from the environment (instead of treating them as literal numbers). That could allow local privilege escalation, under some specific and atypical conditions where zsh is being invoked in privilege-elevation contexts when the environment has not been properly sanitized, such as when zsh is invoked by sudo on systems where "env_reset" has been disabled. CVE-2014-10070 Image SLES12-SP4-Azure-BYOS:zsh-5.0.5-6.7.2 Image SLES12-SP4-EC2-HVM-BYOS:zsh-5.0.5-6.7.2 Image SLES12-SP4-GCE-BYOS:zsh-5.0.5-6.7.2 Image SLES12-SP4-OCI-BYOS:zsh-5.0.5-6.7.2 Image SLES12-SP4-SAP-Azure:zsh-5.0.5-6.7.2 Image SLES12-SP4-SAP-Azure-BYOS:zsh-5.0.5-6.7.2 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:zsh-5.0.5-6.7.2 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:zsh-5.0.5-6.7.2 Image SLES12-SP4-SAP-EC2-HVM:zsh-5.0.5-6.7.2 Image SLES12-SP4-SAP-EC2-HVM-BYOS:zsh-5.0.5-6.7.2 Image SLES12-SP4-SAP-GCE:zsh-5.0.5-6.7.2 Image SLES12-SP4-SAP-GCE-BYOS:zsh-5.0.5-6.7.2 Image SLES12-SP4-SAP-OCI-BYOS:zsh-5.0.5-6.7.2 Image SLES12-SP5-Azure-BYOS:zsh-5.0.5-6.7.2 Image SLES12-SP5-Azure-Basic-On-Demand:zsh-5.0.5-6.7.2 Image SLES12-SP5-Azure-HPC-BYOS:zsh-5.0.5-6.7.2 Image SLES12-SP5-Azure-HPC-On-Demand:zsh-5.0.5-6.7.2 Image SLES12-SP5-Azure-SAP-BYOS:zsh-5.0.5-6.7.2 Image SLES12-SP5-Azure-SAP-On-Demand:zsh-5.0.5-6.7.2 Image SLES12-SP5-Azure-Standard-On-Demand:zsh-5.0.5-6.7.2 Image SLES12-SP5-EC2-BYOS:zsh-5.0.5-6.7.2 Image SLES12-SP5-EC2-On-Demand:zsh-5.0.5-6.7.2 Image SLES12-SP5-EC2-SAP-BYOS:zsh-5.0.5-6.7.2 Image SLES12-SP5-EC2-SAP-On-Demand:zsh-5.0.5-6.7.2 Image SLES12-SP5-GCE-BYOS:zsh-5.0.5-6.7.2 Image SLES12-SP5-GCE-On-Demand:zsh-5.0.5-6.7.2 Image SLES12-SP5-GCE-SAP-BYOS:zsh-5.0.5-6.7.2 Image SLES12-SP5-GCE-SAP-On-Demand:zsh-5.0.5-6.7.2 Image SLES12-SP5-OCI-BYOS-BYOS:zsh-5.0.5-6.7.2 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:zsh-5.0.5-6.7.2 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:zsh-5.0.5-6.7.2 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:zsh-5.0.5-6.7.2 SUSE Linux Enterprise Desktop 12 SP3:zsh-5.0.5-6.7.2 SUSE Linux Enterprise Desktop 12 SP4:zsh-5.0.5-6.7.2 SUSE Linux Enterprise High Performance Computing 12 SP5:zsh-5.0.5-6.7.2 SUSE Linux Enterprise Point of Sale 11 SP3:zsh-4.3.6-67.9.8.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:zsh-4.3.6-67.9.8.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:zsh-4.3.6-67.9.8.1 SUSE Linux Enterprise Server 11 SP4-LTSS:zsh-4.3.6-67.9.8.1 SUSE Linux Enterprise Server 12 SP3:zsh-5.0.5-6.7.2 SUSE Linux Enterprise Server 12 SP4:zsh-5.0.5-6.7.2 SUSE Linux Enterprise Server 12 SP5:zsh-5.0.5-6.7.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:zsh-5.0.5-6.7.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:zsh-5.0.5-6.7.2 SUSE CaaS Platform 4.0:zsh SUSE CaaS Platform 4.5:zsh SUSE Enterprise Storage 6:zsh SUSE Enterprise Storage 7:zsh SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:zsh SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:zsh SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:zsh SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:zsh SUSE Linux Enterprise High Performance Computing 15-LTSS:zsh SUSE Linux Enterprise Module for Basesystem 15 SP1:zsh SUSE Linux Enterprise Module for Basesystem 15 SP3:zsh SUSE Linux Enterprise Module for Basesystem 15 SP4:zsh SUSE Linux Enterprise Module for Basesystem 15:zsh SUSE Linux Enterprise Real Time 15 SP2:zsh SUSE Linux Enterprise Server 15 SP1-LTSS:zsh SUSE Linux Enterprise Server 15 SP2-LTSS:zsh SUSE Linux Enterprise Server 15-ESPOS:zsh SUSE Linux Enterprise Server 15-LTSS:zsh SUSE Linux Enterprise Server Business Critical Linux 15 SP1:zsh SUSE Linux Enterprise Server Business Critical Linux 15 SP2:zsh SUSE Linux Enterprise Server for SAP Applications 15 SP1:zsh SUSE Linux Enterprise Server for SAP Applications 15 SP2:zsh SUSE Linux Enterprise Server for SAP Applications 15:zsh SUSE Manager Proxy 4.1:zsh SUSE Manager Retail Branch Server 4.1:zsh SUSE Manager Server 4.1:zsh important 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P 8.6 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H