CVE-2021-45444

 

Published at: - 14-02-2022 01:15

Last modified: - 17-05-2022 09:15

Total changes: - 9

Description

In zsh before 5.8.1, an attacker can achieve code execution if they control a command output inside the prompt, as demonstrated by a %F argument. This occurs because of recursive PROMPT_SUBST expansion.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• https://zsh.sourceforge.io/releases.html
• https://vuln.ryotak.me/advisories/63
• FEDORA-2022-adf0c6d196-Mailing List, Third Party Advisory
• DSA-5078-Third Party Advisory
• [debian-lts-announce] 20220218 [SECURITY] [DLA 2926-1] zsh security update-Mailing List, Third Party Advisory
• FEDORA-2022-0a06987c3c-Mailing List, Third Party Advisory
• https://support.apple.com/kb/HT213255
• https://support.apple.com/kb/HT213256
• https://support.apple.com/kb/HT213257
• 20220516 APPLE-SA-2022-05-16-4 Security Update 2022-004 Catalina-
• 20220516 APPLE-SA-2022-05-16-3 macOS Big Sur 11.6.6-
• 20220516 APPLE-SA-2022-05-16-2 macOS Monterey 12.4-

 

Keywords

NVD

 

CVE-2021-45444

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures