Lucene search

Arbitrary File Overwrite in fstream

🗓️ 30 May 2019 17:34:19Reported by GoogleType

osv🔗 osv.dev👁 30 Views

Versions of fstream prior to 1.0.12 are vulnerable to Arbitrary File Overwrite when extracting tarballs containing hardlinks. The fstream.DirWriter() function is affected. Upgrade to version 1.0.12 or later

Reporter	Title	Published	Views	Family All 41
Tenable Nessus	SUSE SLES12 Security Update : nodejs10 (SUSE-SU-2019:2099-1)	12 Aug 201900:00	–	nessus
Tenable Nessus	SUSE SLES12 Security Update : nodejs6 (SUSE-SU-2019:2181-1)	20 Aug 201900:00	–	nessus
Tenable Nessus	openSUSE Security Update : nodejs8 (openSUSE-2019-1907)	20 Aug 201900:00	–	nessus
Tenable Nessus	openSUSE Security Update : nodejs10 (openSUSE-2019-1846)	13 Aug 201900:00	–	nessus
Tenable Nessus	SUSE SLES15 Security Update : nodejs8 (SUSE-SU-2019:2055-1)	12 Aug 201900:00	–	nessus
Tenable Nessus	SUSE SLES15 Security Update : nodejs10 (SUSE-SU-2019:2081-1)	12 Aug 201900:00	–	nessus
Tenable Nessus	Ubuntu 18.04 LTS : npm/fstream vulnerability (USN-4123-1)	6 Sep 201900:00	–	nessus
Tenable Nessus	Ubuntu 16.04 ESM : fstream vulnerability (USN-4863-1)	20 Oct 202300:00	–	nessus
Tenable Nessus	SUSE SLES12 Security Update : nodejs4 (SUSE-SU-2019:2078-1)	12 Aug 201900:00	–	nessus
Tenable Nessus	SUSE SLES12 Security Update : nodejs12 (SUSE-SU-2020:0059-1) (0-Length Headers Leak) (Data Dribble) (Empty Frames Flood) (Internal Data Buffering) (Ping Flood) (Reset Flood) (Resource Loop) (Settings Flood)	10 Jan 202000:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-13173
github	www.github.com/npm/fstream/commit/6a77d2fa6e1462693cf8e46f930da96ec1b0bb22
usn	www.usn.ubuntu.com/4123-1
npmjs	www.npmjs.com/advisories/886
lists	www.lists.opensuse.org/opensuse-security-announce/2019-08/msg00010.html
lists	www.lists.opensuse.org/opensuse-security-announce/2019-08/msg00052.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

30 May 2019 17:19Current

2.9Low risk

Vulners AI Score2.9

EPSS0.002