CVE-2018-20835: Improper Input Validation

April 30, 2019 (updated May 3, 2019)

A vulnerability was found in tar-fs. An Arbitrary File Overwrite issue exists when extracting a tarball containing a hardlink to a file that already exists on the system, in conjunction with a later plain file with the same name as the hardlink. This plain file content replaces the existing file content.

References

nvd.nist.gov/vuln/detail/CVE-2018-20835

Code Behaviors & Features

Detect and mitigate CVE-2018-20835 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →