803:tar:Arbitrary File Overwrite

[ambergkim]

No CVE
CWE CWE-59
References: - HackerOne Report
Versions of tar prior to 4.4.2 for 4.x and 2.2.2 for 2.x are vulnerable to Arbitrary File Overwrite. Extracting tarballs containing a hardlink to a file that already exists in the system, and a file that matches the hardlink will overwrite the system's file with the contents of the extracted file.
@ambergkim