Total vulnerabilities in the database
zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script.
| Software | From | Fixed in |
|---|---|---|
| gnu / gzip | - | 1.3.5 |
| canonical / ubuntu_linux | 4.10 | 4.10.x |
| canonical / ubuntu_linux | 5.04 | 5.04.x |