8.6 High
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
70.4%
In subst.c in zsh through 5.4.2, there is a NULL pointer dereference when using ${(PA)…} on an empty array result.
security.gentoo.org/glsa/201805-10
sourceforge.net/p/zsh/code/ci/110b13e1090bc31ac1352b28adc2d02b6d25a102
usn.ubuntu.com/3593-1/