CVE-2023-7207

Опубликовано: 29 фев. 2024

Источник: nvd

CVSS3: 4.9

EPSS Низкий

Описание

Debian's cpio contains a path traversal vulnerability. This issue was introduced by reverting CVE-2015-1197 patches which had caused a regression in --no-absolute-filenames. Upstream has since provided a proper fix to --no-absolute-filenames.

Ссылки

http://www.openwall.com/lists/oss-security/2024/01/05/1
Mailing List
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1059163
Issue Tracking
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7207
Third Party Advisory
https://git.savannah.gnu.org/cgit/cpio.git/commit/?id=376d663340a9dc91c91a5849e5713f07571c1628
Mailing List
Patch
https://www.openwall.com/lists/oss-security/2023/12/21/8
Mailing List
http://www.openwall.com/lists/oss-security/2024/01/05/1
Mailing List
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1059163
Issue Tracking
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7207
Third Party Advisory
https://git.savannah.gnu.org/cgit/cpio.git/commit/?id=376d663340a9dc91c91a5849e5713f07571c1628
Mailing List
Patch
https://www.openwall.com/lists/oss-security/2023/12/21/8
Mailing List

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gnu:cpio:2.13:*:*:*:*:*:*:*

EPSS

Процентиль: 19%

0.00061

Низкий

4.9 Medium

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVE-2023-7207

CVSS3: 4.9

ubuntu

почти 2 года назад

CVE-2023-7207

CVSS3: 5.5

redhat

около 2 лет назад

CVE-2023-7207

msrc

5 месяцев назад

CVE-2023-7207

CVSS3: 4.9

debian

почти 2 года назад

Debian's cpio contains a path traversal vulnerability. This issue was ...

SUSE-SU-2024:0825-1

suse-cvrf

почти 2 года назад

Security update for cpio

EPSS

Процентиль: 19%

0.00061

Низкий

4.9 Medium

CVSS3

Дефекты

CWE-22