Lucene search
K

348 matches found

OSV
OSV
added 2019/04/30 7:29 p.m.2 views

DEBIAN-CVE-2018-20834

A vulnerability was found in node-tar before version 4.4.2 excluding version 2.2.2. An Arbitrary File Overwrite issue exists when extracting a tarball containing a hardlink to a file that already exists on the system, in conjunction with a later plain file with the same name as the hardlink. This...

7.5CVSS7.4AI score0.03145EPSS
Exploits1References1
Prion
Prion
added 2019/04/30 7:29 p.m.20 views

Design/Logic Flaw

A vulnerability was found in node-tar before version 4.4.2 excluding version 2.2.2. An Arbitrary File Overwrite issue exists when extracting a tarball containing a hardlink to a file that already exists on the system, in conjunction with a later plain file with the same name as the hardlink. This...

6.4CVSS7.3AI score0.03145EPSS
Exploits1References7Affected Software1
UbuntuCve
UbuntuCve
added 2019/04/30 7:29 p.m.30 views

CVE-2018-20834

A vulnerability was found in node-tar before version 4.4.2 excluding version 2.2.2. An Arbitrary File Overwrite issue exists when extracting a tarball containing a hardlink to a file that already exists on the system, in conjunction with a later plain file with the same name as the hardlink. This...

7.5CVSS7AI score0.03145EPSS
Exploits1References4
Cvelist
Cvelist
added 2019/04/30 6:1 p.m.31 views

CVE-2018-20834

A vulnerability was found in node-tar before version 4.4.2 excluding version 2.2.2. An Arbitrary File Overwrite issue exists when extracting a tarball containing a hardlink to a file that already exists on the system, in conjunction with a later plain file with the same name as the hardlink. This...

7.8AI score0.03145EPSS
Exploits1References7
AlpineLinux
AlpineLinux
added 2019/04/30 6:1 p.m.5 views

CVE-2018-20834

A vulnerability was found in node-tar before version 4.4.2 excluding version 2.2.2. An Arbitrary File Overwrite issue exists when extracting a tarball containing a hardlink to a file that already exists on the system, in conjunction with a later plain file with the same name as the hardlink. This...

7.5CVSS5.2AI score0.03145EPSS
Exploits1References7
CVE
CVE
added 2019/04/30 6:1 p.m.108 views

CVE-2018-20834

CVE-2018-20834 affects the node-tar library. An Arbitrary File Overwrite exists when extracting a tarball that contains a hardlink to a file already present on the system, in conjunction with a later plain file with the same name as the hardlink, allowing the plain file content to overwrite the e...

7.5CVSS7.2AI score0.03145EPSS
Exploits1References7Affected Software1
Debian CVE
Debian CVE
added 2019/04/30 6:1 p.m.25 views

CVE-2018-20834

A vulnerability was found in node-tar before version 4.4.2 excluding version 2.2.2. An Arbitrary File Overwrite issue exists when extracting a tarball containing a hardlink to a file that already exists on the system, in conjunction with a later plain file with the same name as the hardlink. This...

7.5CVSS7.4AI score0.03145EPSS
Exploits1
Positive Technologies
Positive Technologies
added 2019/04/03 12:0 a.m.3 views

PT-2019-2860

Name of the Vulnerable Software and Affected Versions node-tar versions prior to 4.4.2 node-tar version 2.2.2 is not affected, but versions prior to 2.2.2 are affected Description The issue is related to incorrect link resolution before file access in the node-tar module of the Node.js library...

10CVSS7.4AI score0.03145EPSS
Exploits1References15
Rows per page
Query Builder