fstream before 1.0.12 is vulnerable to Arbitrary File Overwrite. Extracting tarballs containing a hardlink to a file that already exists in the system, and a file that matches the hardlink, will overwrite the system's file with the contents of the extracted file. The fstream.DirWriter() function is vulnerable.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade node-fstream | Jul 30, 2024 | Jul 2, 2019 |
| Suse | — | Upgrade firefox-atk-langUpgrade firefox-gdk-pixbuf-langUpgrade nodejs6Upgrade npm12Upgrade firefox-libgtk-3-0Upgrade libfirefox-gthread-2_0-0Upgrade MozillaFirefox-branding-SLEDUpgrade mozilla-nssUpgrade firefox-libcairo2Upgrade libfirefox-glib-2_0-0Upgrade firefox-gtk3-immodule-ximUpgrade npm10Upgrade MozillaFirefox-translations-commonUpgrade firefox-gdk-pixbuf-query-loadersUpgrade mozilla-nspr-develUpgrade firefox-gtk3-langUpgrade firefox-gtk3-immodules-tigrignaUpgrade libfirefox-gobject-2_0-0Upgrade firefox-gtk3-branding-upstreamUpgrade firefox-libffi7Upgrade nodejs6-develUpgrade nodejs10-develUpgrade firefox-libcairo-gobject2Upgrade npm6Upgrade nodejs4Upgrade firefox-gtk3-immodule-amharicUpgrade firefox-gtk3-dataUpgrade libfirefox-gmodule-2_0-0Upgrade firefox-libffi4Upgrade libsoftokn3-32bitUpgrade npm8Upgrade firefox-gio-branding-upstreamUpgrade firefox-glib2-langUpgrade firefox-gtk3-immodule-multipressUpgrade firefox-libpango-1_0-0Upgrade libfreebl3Upgrade nodejs12Upgrade nodejs8Upgrade MozillaFirefox-translations-otherUpgrade mozilla-nss-develUpgrade nodejs10-docsUpgrade mozilla-nsprUpgrade firefox-gtk3-immodule-inuktitutUpgrade mozilla-nss-32bitUpgrade mozilla-nss-certs-32bitUpgrade libsoftokn3Upgrade firefox-libatk-1_0-0Upgrade libfreebl3-32bitUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-glib2-toolsUpgrade MozillaFirefoxUpgrade nodejs12-develUpgrade firefox-gtk3-immodule-thaiUpgrade nodejs6-docsUpgrade nodejs4-docsUpgrade nodejs8-develUpgrade libfirefox-gio-2_0-0Upgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-libharfbuzz0Upgrade mozilla-nspr-32bitUpgrade nodejs8-docsUpgrade mozilla-nss-toolsUpgrade firefox-gtk3-toolsUpgrade npm4Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade nodejs10Upgrade nodejs12-docsUpgrade mozilla-nss-certsUpgrade nodejs4-devel | Aug 13, 2019 | Jul 2, 2019 |
| Ubuntu | — | Upgrade node-fstreamUpgrade node-fstream (Ubuntu Pro) | Sep 6, 2019 | Jul 2, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub