Most recent entries from all

bdu:2020-01847

EUVD-2026-55559

fkie_cve-2019-13173

fstream before 1.0.12 is vulnerable to Arbitrary File Overwrite. Extracting tarballs containing a hardlink to a file that already exists in the system, and a file that matches the hardlink, will overwrite the system's file with the contents of the extracted file. The fstream.DirWriter() function is vulnerable.

GHSA-xf7w-r453-m56c — Arbitrary File Overwrite in fstream

Affected: npm: fstream

Versions of `fstream` prior to 1.0.12 are vulnerable to Arbitrary File Overwrite. Extracting tarballs containing a hardlink to a file that already exists in the system and a file that matches the hardlink will overwrite the system's file with the contents of the extracted file. The `fstream.DirWriter()` function is vulnerable.

## Recommendation

Upgrade to version 1.0.12 or later.

gsd-2019-13173

OESA-2022-1584 — nodejs-fstream security update

Affected: openEuler:20.03-LTS-SP1: nodejs-fstream, openEuler:20.03-LTS-SP2: nodejs-fstream, openEuler:20.03-LTS-SP3: nodejs-fstream

Provides advanced file system stream objects for Node.js. These objects are like FS streams, but with stat on them, and support directories and symbolic links, as well as normal files. Also, you can use them to set the stats on a file, even if you don't change its contents, or to create a symlink, etc. Security Fix(es): fstream before 1.0.12 is vulnerable to Arbitrary File Overwrite. Extracting tarballs containing a hardlink to a file that already exists in the system, and a file that matches the hardlink, will overwrite the system's file with the contents of the extracted file. The fstream.DirWriter() function is vulnerable.(CVE-2019-13173)

openSUSE-SU-2019:1846-1 — Security update for nodejs10

Security update for nodejs10

SUSE-SU-2019:14246-1 — Security update for Mozilla Firefox

Security update for Mozilla Firefox

UBUNTU-CVE-2019-13173

Affected: Ubuntu:Pro:14.04:LTS: node-fstream, Ubuntu:Pro:16.04:LTS: node-fstream, Ubuntu:18.04:LTS: node-fstream