CVE-2021-45444 Code injection in n/a
Attackers can execute arbitrary code via recursive prompt substitution if they control command output in the zsh prompt.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2021-45444?
CVE-2021-45444 is a high-severity code injection vulnerability in Apple Mac Os X, published on 13 Feb 2022. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
In zsh before 5.8.1, an attacker can achieve code execution if they control a command output inside the prompt, as demonstrated by a %F argument. This occurs because of recursive PROMPT_SUBST expansion.
Which versions are affected by CVE-2021-45444?
It affects 5 products.
Linux distribution packages (8)
zsh AlmaLinux:8 | All versions | 5.5.1-9.el8 |
zsh-html AlmaLinux:8 | All versions | 5.5.1-9.el8 |
zsh-html Red Hat:enterprise_linux:8::appstream | All versions | 0:5.5.1-9.el8 |
zsh Red Hat:enterprise_linux:8::baseos | All versions | 0:5.5.1-9.el8 |
zsh-debuginfo Red Hat:enterprise_linux:8::baseos | All versions | 0:5.5.1-9.el8 |
zsh-debugsource Red Hat:enterprise_linux:8::baseos | All versions | 0:5.5.1-9.el8 |
zsh Rocky Linux:8 | All versions | 0:5.5.1-9.el8 |
zsh openSUSE:Tumbleweed | All versions | 5.8.1-1.1 |
Products include Apple Mac Os X, Apple Macos, Debian Debian Linux, Fedoraproject Fedora, Zsh Zsh.
How do I fix CVE-2021-45444?
Upgrade to a fixed version.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2021-45444 being exploited?
There is no known exploitation of CVE-2021-45444 in the wild and no public exploit code.
Other vulnerabilities in Apple Mac Os X
Sources
Also known as ALPINE-CVE-2021-45444, ALSA-2022:2120, AZL-8586, CLSA-2022-1648567648, CLSA-2022-1648567705, DEBIAN-CVE-2021-45444 and 10 more.