CVE-2018-1000097

Description

Sharutils sharutils (unshar command) version 4.15.2 contains a Buffer Overflow vulnerability in Affected component on the file unshar.c at line 75, function looks_like_c_code. Failure to perform checking of the buffer containing input line. that can result in Could lead to code execution. This attack appear to be exploitable via Victim have to run unshar command on a specially crafted file..

Risk Information

Base Score

7.8

MODERATE

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

3.603

Associated Vulnerability

Vulnerability	OS Platform
sharutils security update(DSA-4167-1) sharutils_4.14-2+deb8u1_i386.deb	Linux
sharutils security update(DSA-4167-1) sharutils_4.14-2+deb8u1_amd64.deb	Linux
sharutils security update(DSA-4167-1) sharutils_4.15.2-2+deb9u1_i386.deb	Linux
sharutils security update(DSA-4167-1) sharutils_4.15.2-2+deb9u1_amd64.deb	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234