uutils coreutils ln Utility Logic Error Leading to Local Denial-of-Service
Vulnerability
A logic error has been identified in the ln utility of uutils coreutils, where the program improperly handles source paths with non-UTF-8 filename bytes when using target-directory forms. Unlike GNU ln, which treats filenames as raw bytes and creates links correctly, the uutils implementation enforces UTF-8 encoding. This discrepancy causes the utility to fail in environments where automated scripts or system tasks encounter valid but non-UTF-8 filenames, common on Unix filesystems, leading to a local denial-of-service for those specific operations.
Impact
This vulnerability causes the ln utility to fail when processing valid but non-UTF-8 filenames, common on Unix filesystems, leading to a local denial-of-service for affected operations.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.
