CVE-2017-18205
Published: 27 February 2018
In builtin.c in zsh before 5.4, when sh compatibility mode is used, there is a NULL pointer dereference during processing of the cd command with no argument if HOME is not set.
Priority
CVSS 3 base score: 8.1