CVE-2018-0502
zsh: An issue was discovered in zsh before 5.6
CVE-2018-0502 is fixed in 3 products on 1 platform, first by zsh 5.4.2-3ubuntu3.1, released September 4, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0249
84th percentile
An issue was discovered in zsh before 5.6. The beginning of a #! script file was mishandled, potentially leading to an execve call to a program named on the second line.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| zsh · Ubuntu 18.04.6 LTS (bionic) | 5.4.2-3ubuntu3.1 | zsh 5.4.2-3ubuntu3.1 | Sep 4, 2018 |
| zsh-common · Ubuntu 18.04.6 LTS (bionic) | 5.4.2-3ubuntu3.1 | zsh-common 5.4.2-3ubuntu3.1 | Sep 4, 2018 |
| zsh-static · Ubuntu 18.04.6 LTS (bionic) | 5.4.2-3ubuntu3.1 | zsh-static 5.4.2-3ubuntu3.1 | Sep 4, 2018 |