Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2021-45444
Description:In zsh before 5.8.1, an attacker can achieve code execution if they control a command output inside the prompt, as demonstrated by a %F argument. This occurs because of recursive PROMPT_SUBST expansion.
Test IDs: 1.3.6.1.4.1.25623.1.0.705078   1.3.6.1.4.1.25623.1.1.2.2022.1594   1.3.6.1.4.1.25623.1.0.819793   1.3.6.1.4.1.25623.1.1.2.2022.1778   1.3.6.1.4.1.25623.1.0.819720   1.3.6.1.4.1.25623.1.0.892926   1.3.6.1.4.1.25623.1.1.10.2022.0073  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2021-45444
Debian Security Information: DSA-5078 (Google Search)
https://www.debian.org/security/2022/dsa-5078
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BWF3EXNBX5SVFDBL4ZFOD4GJBWFUKWN4/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2P3LPMGENEHKDWFO4MWMZSZL6G7Y4CV7/
http://seclists.org/fulldisclosure/2022/May/38
http://seclists.org/fulldisclosure/2022/May/35
http://seclists.org/fulldisclosure/2022/May/33
https://vuln.ryotak.me/advisories/63
https://zsh.sourceforge.io/releases.html
https://lists.debian.org/debian-lts-announce/2022/02/msg00020.html




© 1998-2025 E-Soft Inc. All rights reserved.