CVE-2019-13173

fstream before 1.0.12 is vulnerable to Arbitrary File Overwrite

published July 2, 2019

CVSS
—
EPSS
2%
Percentile
84.0
In the wild
Unconfirmed
What it is

fstream before 1.0.12 is vulnerable to Arbitrary File Overwrite. Extracting tarballs containing a hardlink to a file that already exists in the system, and a file that matches the hardlink, will overwrite the system's file with the contents of the extracted file. The fstream.DirWriter() function is vulnerable.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02416 · 84.0th percentile
Published
2019-07-02T19:26Z
EPSS history
Timeline
  • 02 JUL 19:26Z
    fstream before 1.0.12 is vulnerable to Arbitrary File Overwrite
    cvelistv5