Arbitrary File Overwrite

🗓️ 04 Apr 2019 08:18:38Reported by Veracode Vulnerability DatabaseType

tar vulnerability arbitrary file overwrit

Reporter	Title	Published	Views	Family All 29
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities fixed in IBM Security Verify Governance - Identity Manager Virtual Appliance	30 Jun 202305:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found with third-party libraries used by IBM® MobileFirst Platform	17 Feb 202315:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected by vulnerabilties	27 Jan 202320:06	–	ibm
IBM Security Bulletins	Security Bulletin: High severity vulnerabilities in libraries used by IBM Spectrum Discover (libraries of libraries)	27 Apr 202222:57	–	ibm
AlpineLinux	CVE-2018-20834	30 Apr 201918:01	–	alpinelinux
BDU FSTEC	The vulnerability of the node-tar module in the Node.js library allows a hacker to replace the existing content of a file.	8 Aug 201900:00	–	bdu_fstec
CVE	CVE-2018-20834	30 Apr 201918:01	–	cve
Cvelist	CVE-2018-20834	30 Apr 201918:01	–	cvelist
Debian CVE	CVE-2018-20834	30 Apr 201918:01	–	debiancve
EUVD	EUVD-2019-0468	7 Oct 202500:30	–	euvd

Vulners

Node

tar_project tarRange3.1.5–3.2.1js

tar_project tarRange3.0.0–4.4.1js

tar_project tarRange0.0.1–2.2.1js

Source	Link
github	www.github.com/npm/node-tar/commit/b0c58433c22f5e7fe8b1c76373f27e3f81dcd4c8
hackerone	www.hackerone.com/reports/344595
github	www.github.com/npm/node-tar/commit/7ecef07da6a9e72cc0c4d0c9c6a8e85b6b52395d
github	www.github.com/npm/node-tar/commits/v2.2.2
github	www.github.com/npm/node-tar/compare/58a8d43...a5f7779
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-20834
npmjs	www.npmjs.com/advisories/803
access	www.access.redhat.com/errata/RHSA-2019:1821

29 Mar 2021 01:47Current

7.6High risk

Vulners AI Score7.6

CVSS 26.4

CVSS 37.5

EPSS0.03145