hardlink: multiple vulnerabilities [LWN.net]

Package(s):

hardlink

CVE #(s):

CVE-2011-3630 CVE-2011-3631 CVE-2011-3632

Created:

November 24, 2011

Updated:

August 20, 2012

Description:

From the Fedora advisory:

CVE-2011-3630 hardlink: Multiple stack-based buffer overflows when run on a tree with deeply nested directories

CVE-2011-3631 hardlink: Multiple integer overflows, when adding string lengths

CVE-2011-3632 hardlink: Prone to symlink attacks

Alerts:

(Log in to post comments)