TI-2011-03206 CVE-2011-3632 · GHSA-98h5-28mw-xjrq
Link following in hardlink
Priority LOW 32
Hardlink before 0.1.2 operates on full file system objects path names which can allow a local attacker to use this flaw to conduct symlink attacks.
Vulnerabilities
3 records
TI-2011-03205 CVE-2011-3631 · GHSA-j3j5-x3ff-v276
Integer overflow in hardlink
Priority MEDIUM 43
Hardlink before 0.1.2 has multiple integer overflows leading to heap-based buffer overflows because of the way string lengths concatenation is done in the calculation of the required memory space to be used.
TI-2011-03204 CVE-2011-3630 · GHSA-pc7f-j836-p34f
Out-of-bounds write in hardlink
Priority MEDIUM 43
Hardlink before 0.1.2 suffer from multiple stack-based buffer overflow flaws because of the way directory trees with deeply nested directories are processed.