CVE-2018-7549

EPSS 2.59%
Veröffentlicht 27.02.2018 22:29:00
Zuletzt bearbeitet 21.11.2024 04:12:20
Erkennungen
Login

In params.c in zsh through 5.4.2, there is a crash during a copy of an empty hash table, as demonstrated by typeset -p.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 7

NVD 7 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Zsh ≫ Zsh Version <= 5.4.2

Redhat ≫ Enterprise Linux Desktop Version 7.0

Redhat ≫ Enterprise Linux Server Version 7.0

Redhat ≫ Enterprise Linux Workstation Version 7.0

Canonical ≫ Ubuntu Linux Version 14.04 SwEdition lts

Canonical ≫ Ubuntu Linux Version 16.04 SwEdition lts

Canonical ≫ Ubuntu Linux Version 17.10

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.59%	0.838

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.5	3.9	3.6	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://usn.ubuntu.com/3593-1/

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:3073

Third Party Advisory

https://security.gentoo.org/glsa/201805-10

Third Party Advisory

https://sourceforge.net/p/zsh/code/ci/c2cc8b0fbefc9868fa83537f5b6d90fc1ec438dd

Patch

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2018-7549

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-7549

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-7549

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2018-7549