PT-2018-19265 · Gnu · Sharutils

Published 2018-03-19 · Updated 2018-03-19

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions sharutils (affected versions not specified)

Description A heap buffer overflow issue was discovered in unshar from sharutils, which could lead to a Denial of Service attack when processing a shar archive containing overlong lines.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

MGASA-2018-0174

Affected Products

Sharutils

References · 5

• https://osv.dev/vulnerability/MGASA-2018-0174 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/LSTLNKMVXDRS7L32VJ5TIEL4Q4PVSGNE · Vendor Advisory
• https://advisories.mageia.org/MGASA-2018-0174.html · Security Note
• https://bugs.mageia.org/show_bug.cgi?id=22739 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=1548018 · Note