PT-2022-1769 · Zsh+11 · Zsh+11

Ryotak · Published 2022-02-12 · Updated 2025-08-23 · CVE-2021-45444

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions zsh versions prior to 5.8.1

Description The issue is related to the recursive PROMPT SUBST expansion in zsh, allowing an attacker to achieve code execution if they control a command output inside the prompt. This can be demonstrated by a %F argument.

Recommendations For versions prior to 5.8.1, update to zsh version 5.8.1 to resolve the issue. As a temporary workaround, consider restricting the use of the %F argument in the prompt to minimize the risk of exploitation.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

ALSA-2022:2120

ALT-PU-2022-1278

ALT-PU-2022-2433

ALT-PU-2024-14485

AZL-8586

BDU:2022-01068

CESA-2022_2120

CVE-2021-45444

DLA-2926-1

DSA-5078-1

MGASA-2022-0073

OESA-2022-1567

OESA-2022-2094

OPENSUSE-SU-2022:0735-1

OPENSUSE-SU-2022_0735-1

OPENSUSE-SU-2024:11959-1

RHSA-2022:2120

RHSA-2022_2120

RLSA-2022:2120

SUSE-SU-2022:0732-1

SUSE-SU-2022:0733-1

SUSE-SU-2022:0735-1

USN-5325-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Apple Macos

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

Zsh

References · 79

• https://osv.dev/vulnerability/RLSA-2022:2120 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-45444 · Security Note
• https://osv.dev/vulnerability/OESA-2022-2094 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2022-2120.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:0732-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-45444 · Security Note
• https://osv.dev/vulnerability/CVE-2021-45444 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2022-1567 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/2P3LPMGENEHKDWFO4MWMZSZL6G7Y4CV7 · Vendor Advisory
• https://debian.org/security/2022/dsa-5078Third%20Party%20Advisory · Vendor Advisory
• https://debian.org/security/2022/dsa-5078 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5325-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-45444 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11959-1 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-2926-1 · Vendor Advisory