CVE-2011-3631

CVE-2011-3631 describes multiple integer overflows in Hardlink before version 0.1.2, which lead to heap-based buffer overflows during string length concatenation. This vulnerability affects Hardlink across various Debian and Red Hat distributions. A remote attacker could exploit this by tricking a local user into consolidating a specially crafted directory tree, potentially resulting in a crash or arbitrary code execution with user privileges. With a CVSS score of 8.8 (High), this vulnerability has a network attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.