Vulnetix
Try Vulnetix Request Demo
CVE-2019-13173 PUBLISHED

fstream before 1.0.12 is vulnerable to Arbitrary File Overwrite. Extracting tarballs containing a hardlink to a file that already exists in the system, and a file that matches the hardlink, will overwrite the system's file with the contents of the extracted file. The fstream.DirWriter() function is vulnerable.

EPSS 0.43% · 62.4th percentile

Risk Scores

EPSS Score
0.43%
62.4th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:14.04:LTSnode-fstream0, 0.1.22-1, 0.1.24-1
Ubuntu:Pro:16.04:LTSnode-fstream0, 0.1.24-1
Ubuntu:18.04:LTSnode-fstream1.0.10-1, 0

Timeline

References

Open in Interactive Console →