Read the docs

hardlink

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

hardlink records in CISA KEV

No hardlink vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Hardlink 3 records MEDIUM

Records

3 records

TI-2011-03205 CVE-2011-3631 · GHSA-j3j5-x3ff-v276

Integer overflow in hardlink

Priority MEDIUM 43

Hardlink before 0.1.2 has multiple integer overflows leading to heap-based buffer overflows because of the way string lengths concatenation is done in the calculation of the required memory space to be used.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02693 Published 2019-11-26 Will not fix CWE-190
TI-2011-03204 CVE-2011-3630 · GHSA-pc7f-j836-p34f

Out-of-bounds write in hardlink

Priority MEDIUM 43

Hardlink before 0.1.2 suffer from multiple stack-based buffer overflow flaws because of the way directory trees with deeply nested directories are processed.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02655 Published 2019-11-26 Fixed in 0.1.2 CWE-787
TI-2011-03206 CVE-2011-3632 · GHSA-98h5-28mw-xjrq

Link following in hardlink

Priority LOW 32

Hardlink before 0.1.2 operates on full file system objects path names which can allow a local attacker to use this flaw to conduct symlink attacks.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00494 Published 2019-11-26 Partial fix · 0.1.2 CWE-59
Open these records in search →