description: zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the exec.c:hashcmd() function. A local attacker could exploit this to cause a denial of service.
problem types: CWE-121
affected:
{
product: zsh
vendor: zsh
versions:
status: affected, version: 5.4.2
}