CVE-2018-7549: Input Validation
A flaw was found in zsh prior 5.4.2. There is a crash when copying empty hash table with typeset -p.
Resources: https://sourceforge.net/p/zsh/code/ci/c2cc8b0fbefc9868fa83537f5b6d90fc1ec438dd
Other sources
In params.c in zsh through 5.4.2, there is a crash during a copy of an empty hash table, as demonstrated by typeset -p.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2018-7549?
CVE-2018-7549 is a vulnerability in zsh through version 5.4.2 that can cause a crash during a copy of an empty hash table.
What is the severity of CVE-2018-7549?
CVE-2018-7549 has a severity rating of 7.5 (High).
Which software versions are affected by CVE-2018-7549?
The vulnerability affects zsh versions up to and including 5.4.2.
How can I fix CVE-2018-7549?
To fix CVE-2018-7549, update zsh to version 5.5 or above.
Where can I find more information about CVE-2018-7549?
More information about CVE-2018-7549 can be found at the following references: [CVE-2018-7549](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7549), [USN-3593-1](https://ubuntu.com/security/notices/USN-3593-1), [NVD](https://nvd.nist.gov/vuln/detail/CVE-2018-7549).