Skip to content
OpenAdvisories
Unscored CVE-2011-3630 EUVD-2011-3589GHSA-pc7f-j836-p34f

Hardlink before 0.1.2 suffer from multiple stack-based buffer overflow flaws because of the way directory trees with deeply nested director…

Published Nov 26, 2019 · Updated Aug 6, 2024 · Assigned by redhat

Description

Hardlink before 0.1.2 suffer from multiple stack-based buffer overflow flaws because of the way directory trees with deeply nested directories are processed. A remote attacker could provide a specially-crafted directory tree, and trick the local user into consolidating it, leading to hardlink executable crash, or, potentially arbitrary code execution with the privileges of the user running the hardlink executable.

Affected products

VendorProductAffectedFixed
hardlink hardlink before 0.1.2 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
openSUSE Tumbleweed hardlink 1.0.g50-1.7 openSUSE-SU-2024:10055-1

Advisories 1

References