Поиск уязвимостей
Количество 49
Количество 49
ALT-PU-2025-5537
ALT-PU-2025-5537: package `cpio` update to version 2.12-alt2.c10.1
CVE-2019-14866
In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives. When cpio is used to create TAR archives from paths an attacker can write to, the resulting archive may contain files with permissions the attacker did not have or in paths he did not have access to. Extracting those archives from a high-privilege user without carefully reviewing them may lead to the compromise of the system.
CVE-2019-14866
In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives. When cpio is used to create TAR archives from paths an attacker can write to, the resulting archive may contain files with permissions the attacker did not have or in paths he did not have access to. Extracting those archives from a high-privilege user without carefully reviewing them may lead to the compromise of the system.
CVE-2019-14866
In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives. When cpio is used to create TAR archives from paths an attacker can write to, the resulting archive may contain files with permissions the attacker did not have or in paths he did not have access to. Extracting those archives from a high-privilege user without carefully reviewing them may lead to the compromise of the system.
CVE-2019-14866
In all versions of cpio before 2.13 does not properly validate input f ...
ALT-PU-2023-5721
ALT-PU-2023-5721: package `cpio` update to version 2.14.0.4.e3cc-alt1
openSUSE-SU-2019:2596-1
Security update for cpio
openSUSE-SU-2019:2593-1
Security update for cpio
SUSE-SU-2019:3064-1
Security update for cpio
SUSE-SU-2019:3059-1
Security update for cpio
RLSA-2021:1582
Moderate: cpio security update
GHSA-g3pr-277r-xcx7
In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives. When cpio is used to create TAR archives from paths an attacker can write to, the resulting archive may contain files with permissions the attacker did not have or in paths he did not have access to. Extracting those archives from a high-privilege user without carefully reviewing them may lead to the compromise of the system.
ELSA-2021-1582
ELSA-2021-1582: cpio security update (MODERATE)
ELSA-2020-3908
ELSA-2020-3908: cpio security update (MODERATE)
BDU:2020-01329
Уязвимость утилиты архивирования Сpio, связанная с ошибками при проверке заголовка TAR-файла, позволяющая нарушителю повысить свои привилегии
ROS-20250825-01
Уязвимость cpio
ALT-PU-2021-3526
ALT-PU-2021-3526: package `cpio` update to version 2.13-alt1
CVE-2023-7207
Debian's cpio contains a path traversal vulnerability. This issue was introduced by reverting CVE-2015-1197 patches which had caused a regression in --no-absolute-filenames. Upstream has since provided a proper fix to --no-absolute-filenames.
CVE-2023-7207
Debian's cpio contains a path traversal vulnerability. This issue was introduced by reverting CVE-2015-1197 patches which had caused a regression in --no-absolute-filenames. Upstream has since provided a proper fix to --no-absolute-filenames.
CVE-2023-7207
Debian's cpio contains a path traversal vulnerability. This issue was introduced by reverting CVE-2015-1197 patches which had caused a regression in --no-absolute-filenames. Upstream has since provided a proper fix to --no-absolute-filenames.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2025-5537 ALT-PU-2025-5537: package `cpio` update to version 2.12-alt2.c10.1 | CVSS3: 7.8 | больше 1 года назад | |
 | CVE-2019-14866 In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives. When cpio is used to create TAR archives from paths an attacker can write to, the resulting archive may contain files with permissions the attacker did not have or in paths he did not have access to. Extracting those archives from a high-privilege user without carefully reviewing them may lead to the compromise of the system. | CVSS3: 7.3 | 1% Низкий | почти 7 лет назад |
 | CVE-2019-14866 In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives. When cpio is used to create TAR archives from paths an attacker can write to, the resulting archive may contain files with permissions the attacker did not have or in paths he did not have access to. Extracting those archives from a high-privilege user without carefully reviewing them may lead to the compromise of the system. | CVSS3: 6.7 | 1% Низкий | около 7 лет назад |
 | CVE-2019-14866 In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives. When cpio is used to create TAR archives from paths an attacker can write to, the resulting archive may contain files with permissions the attacker did not have or in paths he did not have access to. Extracting those archives from a high-privilege user without carefully reviewing them may lead to the compromise of the system. | CVSS3: 7.3 | 1% Низкий | почти 7 лет назад |
| CVE-2019-14866 In all versions of cpio before 2.13 does not properly validate input f ... | CVSS3: 7.3 | 1% Низкий | почти 7 лет назад |
| ALT-PU-2023-5721 ALT-PU-2023-5721: package `cpio` update to version 2.14.0.4.e3cc-alt1 | CVSS3: 7.8 | около 3 лет назад | |
 | openSUSE-SU-2019:2596-1 Security update for cpio | 1% Низкий | почти 7 лет назад | |
| openSUSE-SU-2019:2593-1 Security update for cpio | 1% Низкий | почти 7 лет назад | |
| SUSE-SU-2019:3064-1 Security update for cpio | 1% Низкий | почти 7 лет назад | |
| SUSE-SU-2019:3059-1 Security update for cpio | 1% Низкий | почти 7 лет назад | |
 | RLSA-2021:1582 Moderate: cpio security update | 1% Низкий | больше 5 лет назад | |
| GHSA-g3pr-277r-xcx7 In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives. When cpio is used to create TAR archives from paths an attacker can write to, the resulting archive may contain files with permissions the attacker did not have or in paths he did not have access to. Extracting those archives from a high-privilege user without carefully reviewing them may lead to the compromise of the system. | CVSS3: 7.3 | 1% Низкий | больше 4 лет назад |
| ELSA-2021-1582 ELSA-2021-1582: cpio security update (MODERATE) | 1% Низкий | больше 5 лет назад | |
| ELSA-2020-3908 ELSA-2020-3908: cpio security update (MODERATE) | 1% Низкий | около 6 лет назад | |
 | BDU:2020-01329 Уязвимость утилиты архивирования Сpio, связанная с ошибками при проверке заголовка TAR-файла, позволяющая нарушителю повысить свои привилегии | CVSS3: 6.7 | 1% Низкий | почти 7 лет назад |
 | ROS-20250825-01 Уязвимость cpio | CVSS3: 6.7 | 1% Низкий | около 1 года назад |
| ALT-PU-2021-3526 ALT-PU-2021-3526: package `cpio` update to version 2.13-alt1 | CVSS3: 7.3 | 1% Низкий | почти 5 лет назад |
| CVE-2023-7207 Debian's cpio contains a path traversal vulnerability. This issue was introduced by reverting CVE-2015-1197 patches which had caused a regression in --no-absolute-filenames. Upstream has since provided a proper fix to --no-absolute-filenames. | CVSS3: 4.9 | 1% Низкий | больше 2 лет назад |
| CVE-2023-7207 Debian's cpio contains a path traversal vulnerability. This issue was introduced by reverting CVE-2015-1197 patches which had caused a regression in --no-absolute-filenames. Upstream has since provided a proper fix to --no-absolute-filenames. | CVSS3: 5.5 | 1% Низкий | почти 3 года назад |
| CVE-2023-7207 Debian's cpio contains a path traversal vulnerability. This issue was introduced by reverting CVE-2015-1197 patches which had caused a regression in --no-absolute-filenames. Upstream has since provided a proper fix to --no-absolute-filenames. | CVSS3: 4.9 | 1% Низкий | больше 2 лет назад |
Уязвимостей на страницу