CVE-2018-20990
CVE-2018-20990
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An issue was discovered in the tar crate before 0.4.16 for Rust. Arbitrary file overwrite can occur via a symlink or hardlink in a TAR archive.
CVSS 7.5 · High · EPSS 1.7%
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
rust-tar Ubuntu:Pro:20.04:LTS
- Versions
- 0.4.26-1
- 0.4.26-1ubuntu0.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rust-tar Ubuntu:Pro:22.04:LTS
- Versions
- 0.4.26-1
- 0.4.37-1
- 0.4.37-3
- 0.4.37-3ubuntu0.1~esm1
- 0.4.37-3ubuntu0.1
- 0.4.37-3ubuntu0.1+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rust-tar Ubuntu:24.04:LTS
- Versions
- 0.4.38-2
- 0.4.40-1
- 0.4.40-1ubuntu0.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rust-tar Ubuntu:25.10
- Versions
- 0.4.43-4
- 0.4.43-4ubuntu0.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rust-tar Ubuntu:26.10
- Versions
- 0.4.45-1
- 0.4.45-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rust-tar Ubuntu:26.04:LTS
- Versions
- 0.4.43-4
- 0.4.44-1
- 0.4.45-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published