CVE-2018-7548 log

Severity Medium
Remote No
Type Denial of service
In subst.c in zsh through 5.4.2, there is a NULL pointer dereference when using ${(PA)...} on an empty array result.
Group Package Affected Fixed Severity Status Ticket
AVG-642 zsh 5.4.2-2 5.5-1 Medium Fixed
Date Advisory Group Package Severity Type
19 Apr 2018 ASA-201804-7 AVG-642 zsh Medium denial of service