PT-2018-9276

CVE-2018-1000097

·

تاريخ النشر

2018-03-12

·

تاريخ التحديث

2024-06-15

الوصف من

CVSS 3.1
7.8
عالية
المقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: sharutils version 4.15.2
Description: The issue is related to a Buffer Overflow in the unshar command, specifically in the unshar.c file at line 75, within the looks like c code function. This occurs due to a failure in checking the buffer containing the input line, which could lead to code execution. The attack appears to be exploitable if a victim runs the unshar command on a specially crafted file.
Recommendations: For sharutils version 4.15.2, consider avoiding the use of the unshar command until a patch is available, or apply any available patches to resolve the Buffer Overflow issue in the looks like c code function. As a temporary workaround, restrict the execution of specially crafted files with the unshar command to minimize the risk of exploitation.
قابلية الاستغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
ALT-PU-2021-4836
AZL-35251
AZL-6876
DSA-4167-1
OPENSUSE-SU-2024:11380-1
USN-3605-1
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾