CVE-2018-1000097 Memory corruption in n/a

High 7.8 Published 13 Mar 2018 Updated 5 Aug 2024

A buffer overflow in Sharutils allows attackers to execute arbitrary code if a victim processes a specially crafted file with the unshar command.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2018-1000097?

CVE-2018-1000097 is a high-severity memory corruption vulnerability in Canonical Ubuntu Linux, published on 13 Mar 2018. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

Sharutils sharutils (unshar command) version 4.15.2 contains a Buffer Overflow vulnerability in Affected component on the file unshar.c at line 75, function looks_like_c_code. Failure to perform checking of the buffer containing input line. that can result in Could lead to code execution. This attack appear to be exploitable via Victim have to run unshar command on a specially crafted file..

Weakness: CWE-119

Which versions are affected by CVE-2018-1000097?

It affects 3 products.

Linux distribution packages (1)

sharutils openSUSE:Tumbleweed All versions 4.15.2-6.9

Products include Canonical Ubuntu Linux, Debian Debian Linux, Gnu Sharutils.

How do I fix CVE-2018-1000097?

Apply the vendor's patch.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2018-1000097 being exploited?

There is no known exploitation of CVE-2018-1000097 in the wild and no public exploit code.

All Canonical Ubuntu Linux vulnerabilities

Sources

Also known as AZL-35251, AZL-6876, DEBIAN-CVE-2018-1000097, DSA-4167-1, GHSA-vp78-rw8x-8cfq, UBUNTU-CVE-2018-1000097 and 2 more.