fstream up to 1.0.11 Hardlink fstream.DirWriter() privilege escalation

A vulnerability has been found in fstream up to 1.0.11 and classified as critical. This vulnerability affects the function fstream.DirWriter() of the component Hardlink Handler. The manipulation with an unknown input leads to a privilege escalation vulnerability. The CWE definition for the vulnerability is CWE-269. As an impact it is known to affect integrity, and availability.

The weakness was published 07/02/2019. This vulnerability was named CVE-2019-13173 since 07/02/2019. There are known technical details, but no exploit is available.

Upgrading to version 1.0.12 eliminates this vulnerability.

Name

VulDB Meta Base Score: 4.6
VulDB Meta Temp Score: 4.4

VulDB Base Score: ≈4.6
VulDB Temp Score: ≈4.4
VulDB Vector: 🔒
VulDB Reliability: 🔍

VulDB Base Score: 🔒
VulDB Temp Score: 🔒
VulDB Reliability: 🔍
Class: Privilege escalation (CWE-269)
Local: Yes
Remote: No

Availability: 🔒
Status: Not defined

Price Prediction: 🔍
Current Price Estimation: 🔒

Threat Intelligenceinfoedit

Threat: 🔍
Adversaries: 🔍
Geopolitics: 🔍
Economy: 🔍
Predictions: 🔍
Remediation: 🔍Recommended: Upgrade
Status: 🔍

0-Day Time: 🔒

Upgrade: fstream 1.0.12

07/02/2019 Advisory disclosed
07/02/2019 +0 days CVE assigned
07/03/2019 +1 days VulDB entry created
07/03/2019 +0 days VulDB last update
CVE: CVE-2019-13173 (🔒)Created: 07/03/2019 12:11 PM
Complete: 🔍

Comments are closed.