Vulnerability · Published Feb 13, 2022 · Assigned by mitre
CVE-2021-45444
High 7.8
In plain English
A high-severity security flaw in the zsh package (AlmaLinux). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.0% (higher than 81% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)7.8High
Exploit odds (30 days)2.0%top 19.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
In zsh before 5.8.1, an attacker can achieve code execution if they control a command output inside the prompt, as demonstrated by a %F argument. This occurs because of recursive PROMPT_SUBST expansion.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | zsh | 5.5.1-9.el8 | ALSA-2022:2120 |
| AlmaLinux:8 | zsh-html | 5.5.1-9.el8 | ALSA-2022:2120 |
| Alpine:v3.20 | zsh | 5.8.1-r0 | ALPINE-CVE-2021-45444 |
| Alpine:v3.21 | zsh | 5.8.1-r0 | ALPINE-CVE-2021-45444 |
| Alpine:v3.22 | zsh | 5.8.1-r0 | ALPINE-CVE-2021-45444 |
| Alpine:v3.23 | zsh | 5.8.1-r0 | ALPINE-CVE-2021-45444 |
| Alpine:v3.24 | zsh | 5.8.1-r0 | ALPINE-CVE-2021-45444 |
| Debian:12 | zsh | 5.8.1-1 | DEBIAN-CVE-2021-45444 |
| Debian:13 | zsh | 5.8.1-1 | DEBIAN-CVE-2021-45444 |
| Debian:14 | zsh | 5.8.1-1 | DEBIAN-CVE-2021-45444 |
| Rocky Linux:8 | zsh | 0:5.5.1-9.el8 | RLSA-2022:2120 |
| Ubuntu:22.04:LTS | zsh | no fix listed | UBUNTU-CVE-2021-45444 |
Affected products (as reported)
References
- https://zsh.sourceforge.io/releases.html x_refsource_MISC
- https://vuln.ryotak.me/advisories/63 x_refsource_MISC
- FEDORA-2022-adf0c6d196 vendor-advisory, x_refsource_FEDORA
- DSA-5078 vendor-advisory, x_refsource_DEBIAN
- [debian-lts-announce] 20220218 [SECURITY] [DLA 2926-1] zsh security update mailing-list, x_refsource_MLIST
- FEDORA-2022-0a06987c3c vendor-advisory, x_refsource_FEDORA
- https://support.apple.com/kb/HT213257 x_refsource_CONFIRM
- https://support.apple.com/kb/HT213256 x_refsource_CONFIRM
- https://support.apple.com/kb/HT213255 x_refsource_CONFIRM
- 20220516 APPLE-SA-2022-05-16-4 Security Update 2022-004 Catalina mailing-list, x_refsource_FULLDISC
- 20220516 APPLE-SA-2022-05-16-3 macOS Big Sur 11.6.6 mailing-list, x_refsource_FULLDISC
- 20220516 APPLE-SA-2022-05-16-2 macOS Monterey 12.4 mailing-list, x_refsource_FULLDISC