CVE-2018-20835
Summary
| CVE | CVE-2018-20835 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2019-04-30 19:29:00 UTC |
|---|
| Updated | 2019-05-03 14:49:00 UTC |
|---|
| Description | A vulnerability was found in tar-fs before 1.16.2. An Arbitrary File Overwrite issue exists when extracting a tarball containing a hardlink to a file that already exists on the system, in conjunction with a later plain file with the same name as the hardlink. This plain file content replaces the existing file content. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| Comparing d590fc7...a35ce2f · mafintosh/tar-fs · GitHub |
MISC |
github.com |
Patch, Third Party Advisory |
| force hardlink targets to be in the tar · mafintosh/tar-fs@0667282 · GitHub |
MISC |
github.com |
Patch, Third Party Advisory |
| HackerOne |
MISC |
hackerone.com |
Exploit, Third Party Advisory |
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 981798 Nodejs (npm) Security Update for tar-fs (GHSA-x2mc-8fgj-3wmr)
