{"id":"CVE-2018-1000097","aliases":["AZL-35251","AZL-6876","DEBIAN-CVE-2018-1000097","DSA-4167-1","EUVD-2018-1835","GHSA-vp78-rw8x-8cfq","UBUNTU-CVE-2018-1000097","USN-3605-1","openSUSE-SU-2024:11380-1"],"status":"published","title":"Sharutils sharutils (unshar command) version 4.15.2 contains a Buffer Overflow vulnerability in...","description":"Sharutils sharutils (unshar command) version 4.15.2 contains a Buffer Overflow vulnerability in Affected component on the file unshar.c at line 75, function looks_like_c_code. Failure to perform checking of the buffer containing input line. that can result in Could lead to code execution. This attack appear to be exploitable via Victim have to run unshar command on a specially crafted file..","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01957,"percentile":0.80423,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2018-03-12T00:00:00Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Azure Linux:3","package":"sharutils","fixed_in":["4.15.2-21"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"sharutils","fixed_in":["4.15.2-20"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"sharutils","fixed_in":["1:4.15.2-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"sharutils","fixed_in":["1:4.15.2-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"sharutils","fixed_in":["1:4.15.2-3"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"sharutils","fixed_in":["1:4.14-2+deb8u1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"sharutils","fixed_in":["1:4.15.2-2+deb9u1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"sharutils","fixed_in":["1:4.14-1ubuntu1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"sharutils","fixed_in":["1:4.15.2-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"sharutils","fixed_in":["4.15.2-6.9"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"sharutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.2-21"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"sharutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.2-20"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"sharutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.15.2-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"sharutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.15.2-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"sharutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.15.2-3"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"sharutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.14-2+deb8u1"}]}],"versions":["1:4.14-2"]},{"source":"osv","ecosystem":"Debian:9","package":"sharutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.15.2-2+deb9u1"}]}],"versions":["1:4.15.2-2"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"sharutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.14-1ubuntu1.1"}]}],"versions":["1:4.11.1-1ubuntu2","1:4.14-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"sharutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.15.2-1ubuntu0.1"}]}],"versions":["1:4.15.2-1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"sharutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.14-1ubuntu1.1"}]}],"versions":["1:4.11.1-1ubuntu2","1:4.14-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"sharutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.15.2-1ubuntu0.1"}]}],"versions":["1:4.15.2-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"sharutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.2-6.9"}]}]}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"gnu","product":"sharutils"}],"references":[{"url":"https://usn.ubuntu.com/3605-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4167","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"http://seclists.org/bugtraq/2018/Feb/54","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Mailing List","Third Party Advisory","advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000097","tags":["web"]},{"url":"https://github.com/advisories/GHSA-vp78-rw8x-8cfq"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-1000097","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-1000097","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3605-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1000097","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000097","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-1000097","description":"Sharutils sharutils (unshar command) version 4.15.2 contains a Buffer Overflow vulnerability in Affected component on the file unshar.c at line 75, function looks_like_c_code. Failure to perform checking of the buffer containing input line. that can result in Could lead to code execution. This attack appear to be exploitable via Victim have to run unshar command on a specially crafted file..","status":"published","published":"2018-03-13T01:00:00Z","modified":"2024-08-05T12:33:49.183Z","updated_at":"2026-11-02T14:35:10.313768Z"}],"euvd":[{"id":"EUVD-2018-1835","description":"Sharutils sharutils (unshar command) version 4.15.2 contains a Buffer Overflow vulnerability in Affected component on the file unshar.c at line 75, function looks_like_c_code. Failure to perform checking of the buffer containing input line. that can result in Could lead to code execution. This attack appear to be exploitable via Victim have to run unshar command on a specially crafted file..","status":"published","published":"2018-03-13T01:00:00Z","modified":"2024-08-05T12:33:49Z","updated_at":"2026-11-03T02:39:26.824954Z"}],"ghsa":[{"id":"GHSA-vp78-rw8x-8cfq","title":"Sharutils sharutils (unshar command) version 4.15.2 contains a Buffer Overflow vulnerability in...","description":"Sharutils sharutils (unshar command) version 4.15.2 contains a Buffer Overflow vulnerability in Affected component on the file unshar.c at line 75, function looks_like_c_code. Failure to perform checking of the buffer containing input line. that can result in Could lead to code execution. This attack appear to be exploitable via Victim have to run unshar command on a specially crafted file..","status":"published","published":"2022-05-14T03:31:37Z","modified":"2023-02-02T05:08:27Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:52:44.806949Z"}],"nvd":[{"id":"CVE-2018-1000097","description":"Sharutils sharutils (unshar command) version 4.15.2 contains a Buffer Overflow vulnerability in Affected component on the file unshar.c at line 75, function looks_like_c_code. Failure to perform checking of the buffer containing input line. that can result in Could lead to code execution. This attack appear to be exploitable via Victim have to run unshar command on a specially crafted file..","status":"published","published":"2018-03-13T01:29:00.967Z","modified":"2026-06-17T01:32:25.3Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:04:24.264003Z"}],"osv":[{"id":"AZL-35251","title":"CVE-2018-1000097 affecting package sharutils for versions less than 4.15.2-21","description":"Sharutils sharutils (unshar command) version 4.15.2 contains a Buffer Overflow vulnerability in Affected component on the file unshar.c at line 75, function looks_like_c_code. Failure to perform checking of the buffer containing input line. that can result in Could lead to code execution. This attack appear to be exploitable via Victim have to run unshar command on a specially crafted file..","status":"published","published":"2018-03-13T01:29:00Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-05T16:41:19.554273Z"},{"id":"AZL-6876","title":"CVE-2018-1000097 affecting package sharutils for versions less than 4.15.2-20","description":"Sharutils sharutils (unshar command) version 4.15.2 contains a Buffer Overflow vulnerability in Affected component on the file unshar.c at line 75, function looks_like_c_code. Failure to perform checking of the buffer containing input line. that can result in Could lead to code execution. This attack appear to be exploitable via Victim have to run unshar command on a specially crafted file..","status":"published","published":"2018-03-13T01:29:00Z","modified":"2026-04-21T04:38:29.204817Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:08.630357Z"},{"id":"CVE-2018-1000097","description":"Sharutils sharutils (unshar command) version 4.15.2 contains a Buffer Overflow vulnerability in Affected component on the file unshar.c at line 75, function looks_like_c_code. Failure to perform checking of the buffer containing input line. that can result in Could lead to code execution. This attack appear to be exploitable via Victim have to run unshar command on a specially crafted file..","status":"published","published":"2018-03-13T01:29:00.967Z","modified":"2026-03-15T14:29:00.388917Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:07.192756Z"},{"id":"DEBIAN-CVE-2018-1000097","description":"Sharutils sharutils (unshar command) version 4.15.2 contains a Buffer Overflow vulnerability in Affected component on the file unshar.c at line 75, function looks_like_c_code. Failure to perform checking of the buffer containing input line. that can result in Could lead to code execution. This attack appear to be exploitable via Victim have to run unshar command on a specially crafted file..","status":"published","published":"2018-03-13T01:29:00.967Z","modified":"2026-10-23T18:04:46.801155846Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:29.988046Z"},{"id":"UBUNTU-CVE-2018-1000097","description":"Sharutils sharutils (unshar command) version 4.15.2 contains a Buffer Overflow vulnerability in Affected component on the file unshar.c at line 75, function looks_like_c_code. Failure to perform checking of the buffer containing input line. that can result in Could lead to code execution. This attack appear to be exploitable via Victim have to run unshar command on a specially crafted file..","status":"published","published":"2018-03-12T00:00:00Z","modified":"2026-02-04T02:39:37.96004Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:16.154988Z"},{"id":"DSA-4167-1","title":"sharutils - security update","status":"published","published":"2018-04-05T00:00:00Z","modified":"2026-03-09T01:22:41.865865Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"openSUSE-SU-2024:11380-1","title":"sharutils-4.15.2-6.9 on GA media","description":"These are all security issues fixed in the sharutils-4.15.2-6.9 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:03:14.54614Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"USN-3605-1","title":"sharutils vulnerability","description":"It was discovered that Sharutils incorrectly handled certain files. An attacker\ncould possibly use this to execute arbitrary code.\n","status":"published","published":"2018-03-22T15:13:25Z","modified":"2026-02-10T04:41:17Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}