CVE-2018-20834

A flaw was found in nodejs-tar in versions prior to 4.4.2. An arbitrary file overwrite can occur when extracting tarballs containing a hard-link to a file that already exists in the system. Further, a file that matches the hard-link may overwrite the system's files with the contents of the...

Important: Red Hat Security Advisory: rh-nodejs8-nodejs security update

An update for rh-nodejs8-nodejs is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

37fis (>=1.0.0, <=1.0.2), 88slot-ap (1.0.0) +693 more potentially affected by CVE-2018-20834 via tar (>=3.0.0, <=4.4.1)

tar NPM version =3.0.0, =1.0.0, =0.1.0, =1.0.0, =0.3.5, =0.2.0, =0.0.2, =1.0.1, =1.23.0, =1.0.0, =3.0.1, =1.0.0, =1.3.0 and more Source cves: CVE-2018-20834 Source advisory: OSV:GHSA-J44M-QM6P-HP7M...

0.8.18-p11 (0.8.18-p12), 37fis (>=1.0.0, <=1.0.2) +620 more potentially affected by CVE-2018-20834 via tar (>=2.0.0, <=2.2.1)

tar NPM version =2.0.0, =1.0.0, =1.0.1, =1.0.0, =0.1.0, =0.1.0, =0.1.1, =0.1.3, =0.4.3, =0.18.0, =1.1.1, =2.0.6, =2.1.0 and more Source cves: CVE-2018-20834 Source advisory: OSV:GHSA-J44M-QM6P-HP7M...

CVE-2018-20834

A vulnerability was found in node-tar before version 4.4.2 excluding version 2.2.2. An Arbitrary File Overwrite issue exists when extracting a tarball containing a hardlink to a file that already exists on the system, in conjunction with a later plain file with the same name as the hardlink. This...

CVE-2018-20834

CVE-2018-20834 affects the node-tar library. An Arbitrary File Overwrite exists when extracting a tarball that contains a hardlink to a file already present on the system, in conjunction with a later plain file with the same name as the hardlink, allowing the plain file content to overwrite the e...

CVE-2018-20834

A vulnerability was found in node-tar before version 4.4.2 excluding version 2.2.2. An Arbitrary File Overwrite issue exists when extracting a tarball containing a hardlink to a file that already exists on the system, in conjunction with a later plain file with the same name as the hardlink. This...