CVE-2018-20835

A vulnerability was found in tar-fs before 1.16.2

published April 30, 2019

CVSS
—
EPSS
2%
Percentile
83.6
In the wild
Unconfirmed
What it is

A vulnerability was found in tar-fs before 1.16.2. An Arbitrary File Overwrite issue exists when extracting a tarball containing a hardlink to a file that already exists on the system, in conjunction with a later plain file with the same name as the hardlink. This plain file content replaces the existing file content.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02359 · 83.6th percentile
Published
2019-04-30T18:02Z
EPSS history
Timeline
  • 30 APR 18:02Z
    A vulnerability was found in tar-fs before 1.16.2
    cvelistv5