Описание
fstream before 1.0.12 is vulnerable to Arbitrary File Overwrite. Extracting tarballs containing a hardlink to a file that already exists in the system, and a file that matches the hardlink, will overwrite the system's file with the contents of the extracted file. The fstream.DirWriter() function is vulnerable.
Ссылки
- PatchThird Party Advisory
- PatchVendor Advisory
- PatchThird Party Advisory
- PatchVendor Advisory
Уязвимые конфигурации
EPSS
7.5 High
CVSS3
6.4 Medium
CVSS2
Дефекты
Связанные уязвимости
fstream before 1.0.12 is vulnerable to Arbitrary File Overwrite. Extracting tarballs containing a hardlink to a file that already exists in the system, and a file that matches the hardlink, will overwrite the system's file with the contents of the extracted file. The fstream.DirWriter() function is vulnerable.
fstream before 1.0.12 is vulnerable to Arbitrary File Overwrite. Extracting tarballs containing a hardlink to a file that already exists in the system, and a file that matches the hardlink, will overwrite the system's file with the contents of the extracted file. The fstream.DirWriter() function is vulnerable.
fstream before 1.0.12 is vulnerable to Arbitrary File Overwrite. Extra ...
EPSS
7.5 High
CVSS3
6.4 Medium
CVSS2