GCVE - cpe:2.3:a:hardlink_project:hardlink:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:hardlink_project:hardlink:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Hardlink Project (`8fef6e1e-ecf0-53ac-b7f9-6241eeb5b24b`)
Product	Hardlink (`48777f8e-7673-5d8a-a3cd-5ee5249d9b52`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-3632`	vulnerable	2026-06-08 04:59:26.782629	Details available Hardlink before 0.1.2 operates on full file system objects path names which can allow a local attacker to use this flaw to conduct symlink attacks. Published: 2019-11-26T03:34:46.000Z Updated: 2024-08-06T23:37:48.685Z Open on db.gcve.eu Reference links https://security-tracker.debian.org/tracker/CVE-2011-3632 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3632 https://access.redhat.com/security/cve/cve-2011-3632 https://www.openwall.com/lists/oss-security/2011/10/20/6 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=645516	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-3631`	vulnerable	2026-06-08 04:59:26.782176	Details available Hardlink before 0.1.2 has multiple integer overflows leading to heap-based buffer overflows because of the way string lengths concatenation is done in the calculation of the required memory space to be used. A remote attacker could provide a specially-crafted directory tree and trick the local user into consolidating it, leading to hardlink executable crash or potentially arbitrary code execution with user privileges. Published: 2019-11-26T03:22:40.000Z Updated: 2024-08-06T23:37:48.560Z Open on db.gcve.eu Reference links https://security-tracker.debian.org/tracker/CVE-2011-3631 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3631 https://access.redhat.com/security/cve/cve-2011-3631 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=645516	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-3630`	vulnerable	2026-06-08 04:59:26.781509	Details available Hardlink before 0.1.2 suffer from multiple stack-based buffer overflow flaws because of the way directory trees with deeply nested directories are processed. A remote attacker could provide a specially-crafted directory tree, and trick the local user into consolidating it, leading to hardlink executable crash, or, potentially arbitrary code execution with the privileges of the user running the hardlink executable. Published: 2019-11-26T03:08:52.000Z Updated: 2024-08-06T23:37:48.651Z Open on db.gcve.eu Reference links https://security-tracker.debian.org/tracker/CVE-2011-3630 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3630 https://access.redhat.com/security/cve/cve-2011-3630 https://www.openwall.com/lists/oss-security/2011/10/20/6 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=645516	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Hardlink

Notes

PURL mappings

Vulnerability references

Contribute