Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-6876.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-6876
Upstream
Published
2018-03-13T01:29:00Z
Modified
2026-04-21T04:38:29.204817Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
CVE-2018-1000097 affecting package sharutils for versions less than 4.15.2-20
Details

Sharutils sharutils (unshar command) version 4.15.2 contains a Buffer Overflow vulnerability in Affected component on the file unshar.c at line 75, function lookslikec_code. Failure to perform checking of the buffer containing input line. that can result in Could lead to code execution. This attack appear to be exploitable via Victim have to run unshar command on a specially crafted file..

References

Affected packages

Azure Linux:2 / sharutils

Package

Name
sharutils
Purl
pkg:rpm/azure-linux/sharutils

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.15.2-20

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-6876.json"