CVE-2018-0502
Fixed in a distro release EPSS 2%
An issue was discovered in zsh before 5.6. The beginning of a #! script file was mishandled, potentially leading to an execve call to a program named on the second line.
Products: canonical ubuntu_linux, zsh
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | zsh | 5.5.1-2.amzn2.0.1 |
| Amazon Linux 2 | zsh-html | 5.5.1-2.amzn2.0.1 |
| Arch Linux | zsh | 5.6-1 |
| Debian 12 | zsh | 5.6-1 |
| Debian 13 | zsh | 5.6-1 |
| Debian 14 | zsh | 5.6-1 |
| Debian 9 | zsh | 5.3.1-4+deb9u1 |
| SUSE HPE Helion OpenStack 8 | zsh | 5.0.5-6.12.2 |
| SUSE Linux Enterprise Module for Basesystem 15 | zsh | 5.6-3.6.1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | zsh | 4.3.6-67.9.8.1 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | zsh | 4.3.6-67.9.8.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | zsh | 5.0.5-6.12.2 |
| SUSE Linux Enterprise Server 12 SP3-BCL | zsh | 5.0.5-6.12.2 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | zsh | 5.0.5-6.12.2 |
| SUSE Linux Enterprise Server 12 SP4-LTSS | zsh | 5.0.5-6.12.2 |
| SUSE Linux Enterprise Server 12 SP5 | zsh | 5.0.5-6.12.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | zsh | 5.0.5-6.12.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | zsh | 5.0.5-6.12.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | zsh | 5.0.5-6.12.2 |
| SUSE OpenStack Cloud 8 | zsh | 5.0.5-6.12.2 |
| SUSE OpenStack Cloud 9 | zsh | 5.0.5-6.12.2 |
| SUSE OpenStack Cloud Crowbar 8 | zsh | 5.0.5-6.12.2 |
| SUSE OpenStack Cloud Crowbar 9 | zsh | 5.0.5-6.12.2 |
| Ubuntu 14.04 LTS | zsh | 5.0.2-3ubuntu6.3 |
| Ubuntu 16.04 LTS | zsh | 5.1.1-1ubuntu2.3 |
| Ubuntu 18.04 LTS | zsh | 5.4.2-3ubuntu3.1 |
| openSUSE Tumbleweed | zsh | 5.8-7.7 |