CVE-2011-3631: Integer Overflow
Hardlink before 0.1.2 has multiple integer overflows leading to heap-based buffer overflows because of the way string lengths concatenation is done in the calculation of the required memory space to be used. A remote attacker could provide a specially-crafted directory tree and trick the local user into consolidating it, leading to hardlink executable crash or potentially arbitrary code execution with user privileges.
Other sources
Multiple integer overflows, leading to heap-based buffer overflows were found in the way hardlink, the tool for consolidation of duplicate files via hardlinks performed string lengths concatenation in the calculation of the required memory space to be used. A remote attacker could provide a specially-crafted directory tree (with long directory and / or file names), and trick the local user into consolidating it, leading to hardlink executable crash, or, potentially arbitrary code execution with the privileges of the user running the hardlink executable.
References: [1] http://www.openwall.com/lists/oss-security/2011/10/15/2 [2] https://bugs.gentoo.org/showbug.cgi?id=387269 [3] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=645516
Proposed patch (applied by the Owl Linux distribution): [4] http://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/hardlink/hardlink.c.diff?r1=1.2;r2=1.3
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-3631?
CVE-2011-3631 has a severity rating that indicates it poses a risk of heap-based buffer overflows due to integer overflows.
How do I fix CVE-2011-3631?
To remediate CVE-2011-3631, upgrade hardlink to version 0.3.2 or later.
Which software is affected by CVE-2011-3631?
CVE-2011-3631 affects versions of hardlink before 0.1.2 across various Linux distributions including Debian and Red Hat Enterprise Linux.
Can CVE-2011-3631 be exploited remotely?
Yes, a remote attacker could exploit CVE-2011-3631 using a specially-crafted directory tree.
What types of vulnerabilities are exhibited in CVE-2011-3631?
CVE-2011-3631 showcases integer overflows leading to heap-based buffer overflows due to improper memory space calculations.