CVEvulnerability
CVE-2011-3630
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-11-26
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-787
Description
Hardlink before 0.1.2 suffer from multiple stack-based buffer overflow flaws because of the way directory trees with deeply nested directories are processed. A remote attacker could provide a specially-crafted directory tree, and trick the local user into consolidating it, leading to hardlink executable crash, or, potentially arbitrary code execution with the privileges of the user running the hardlink executable.
Affected configurations
• hardlink project hardlink (< 0.1.2)
• debian debian linux 8.0
• debian debian linux 9.0
• debian debian linux 10.0
• redhat enterprise linux 5.0
• redhat enterprise linux 6.0
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- https://access.redhat.com/security/cve/cve-2011-3630 Third Party Advisory
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=645516 Issue Tracking, Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3630 Issue Tracking, Patch, Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2011-3630 Third Party Advisory
- https://www.openwall.com/lists/oss-security/2011/10/20/6 Mailing List, Third Party Advisory
- https://access.redhat.com/security/cve/cve-2011-3630 Third Party Advisory
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=645516 Issue Tracking, Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3630 Issue Tracking, Patch, Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2011-3630 Third Party Advisory
- https://www.openwall.com/lists/oss-security/2011/10/20/6 Mailing List, Third Party Advisory