CVE-2019-20044 in zsh
Sumário
de MITRE
In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh fails to overwrite the saved uid, so the original privileges can be restored by executing MODULE_PATH=/dir/with/module zmodload with a module that calls setuid().
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.