CVE-2018-7548
Fixed in a distro release EPSS 3%
In subst.c in zsh through 5.4.2, there is a NULL pointer dereference when using ${(PA)...} on an empty array result.
Products: zsh, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | zsh | 5.3.1-7.amzn2 |
| Amazon Linux 2 | zsh-html | 5.3.1-7.amzn2 |
| Arch Linux | zsh | 5.5-1 |
| Debian 12 | zsh | 5.5-1 |
| Debian 13 | zsh | 5.5-1 |
| Debian 14 | zsh | 5.5-1 |
| Ubuntu 14.04 LTS | zsh | 5.0.2-3ubuntu6.1 |
| Ubuntu 16.04 LTS | zsh | 5.1.1-1ubuntu2.1 |