PatchTheCVECVE-2014-10070: zsh before 5.0.7 allows evaluation of the initial values of integer variables imported from the environment (i
CVE-2014-10070 is a high-severity flaw (CVSS 7.8) affecting zsh. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
zsh before 5.0.7 allows evaluation of the initial values of integer variables imported from the environment (instead of treating them as literal numbers). That could allow local privilege escalation, under some specific and atypical conditions where zsh is being invoked in privilege-elevation contexts when the environment has not been properly sanitized, such as when zsh is invoked by sudo on systems where "env_reset" has been disabled.
Why this priority
- High severity
A fixed release or distro patch exists.
Risk facts
| CVSS score | 7.8 (High) |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 0.5% (top 58%) |
| CISA exploited list | No |
| Weakness | CWE-264 |
| Published | 2018-02-27 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2014-10070?
zsh: upgrade to newer than 5.0.6. Exact commands for each OS are on this page.
Is CVE-2014-10070 being exploited?
CVE-2014-10070 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2014-10070 affect?
CVE-2014-10070 affects zsh. Severity is high (CVSS 7.8). zsh before 5.0.7 allows evaluation of the initial values of integer variables imported from the environment (instead of treating them as literal numbers). That could allow local privilege escalation, under some specific and atypical conditi
How urgent is CVE-2014-10070?
Priority 38/100. High severity
Software pages
Related CVEs
- CVE-2021-45444 HIGH 7.8 UPGRADE MITIGATE In zsh before 5.8.1, an attacker can achieve code execution if they control a command output inside the prompt
- CVE-2019-20044 HIGH 7.8 UPGRADE MITIGATE In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED opt
- CVE-2018-7549 HIGH 7.5 UPGRADE MITIGATE In params.c in zsh through 5.4.2, there is a crash during a copy of an empty hash table, as demonstrated by ty
- CVE-2018-7548 CRITICAL 9.8 UPGRADE MITIGATE In subst.c in zsh through 5.4.2, there is a NULL pointer dereference when using ${(PA)...} on an empty array r
- CVE-2018-1100 HIGH 7.8 UPGRADE MITIGATE zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the utils.c:checkmailpath function