Поиск уязвимостей
Количество 49
Количество 49
CVE-2023-7207
Debian's cpio contains a path traversal vulnerability. This issue was introduced by reverting CVE-2015-1197 patches which had caused a regression in --no-absolute-filenames. Upstream has since provided a proper fix to --no-absolute-filenames.
CVE-2023-7207
Debian's cpio contains a path traversal vulnerability. This issue was ...
CVE-2021-38185
GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c ds_fgetstr integer overflow that triggers an out-of-bounds heap write. NOTE: it is unclear whether there are common cases where the pattern file, associated with the -E option, is untrusted data.
CVE-2021-38185
GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c ds_fgetstr integer overflow that triggers an out-of-bounds heap write. NOTE: it is unclear whether there are common cases where the pattern file, associated with the -E option, is untrusted data.
CVE-2021-38185
GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c ds_fgetstr integer overflow that triggers an out-of-bounds heap write. NOTE: it is unclear whether there are common cases where the pattern file, associated with the -E option, is untrusted data.
CVE-2021-38185
GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file because of a dstring.c ds_fgetstr integer overflow that triggers an out-of-bounds heap write. NOTE: it is unclear whether there are common cases where the pattern file associated with the -E option is untrusted data.
CVE-2021-38185
GNU cpio through 2.13 allows attackers to execute arbitrary code via a ...
SUSE-SU-2024:0825-1
Security update for cpio
SUSE-SU-2024:0824-1
Security update for cpio
SUSE-SU-2024:0305-2
Security update for cpio
SUSE-SU-2024:0305-1
Security update for cpio
SUSE-SU-2024:0248-1
Security update for cpio
SUSE-SU-2024:0238-1
Security update for cpio
GHSA-x4gq-xcr8-xwp7
Debian's cpio contains a path traversal vulnerability. This issue was introduced by reverting CVE-2015-1197 patches which had caused a regression in --no-absolute-filenames. Upstream has since provided a proper fix to --no-absolute-filenames.
BDU:2024-06679
Уязвимость двоичного архиватора cpio, связанная с неправильным ограничением имени пути к ограниченному каталогу, позволяющая нарушителю вызвать отказ в обслуживании
openSUSE-SU-2021:2689-1
Security update for cpio
SUSE-SU-2021:2808-1
Security update for cpio
SUSE-SU-2021:2686-1
Security update for cpio
SUSE-SU-2021:14788-1
Security update for cpio
SUSE-SU-2021:14777-1
Security update for cpio
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-7207 Debian's cpio contains a path traversal vulnerability. This issue was introduced by reverting CVE-2015-1197 patches which had caused a regression in --no-absolute-filenames. Upstream has since provided a proper fix to --no-absolute-filenames. | 1% Низкий | 3 месяца назад | |
| CVE-2023-7207 Debian's cpio contains a path traversal vulnerability. This issue was ... | CVSS3: 4.9 | 1% Низкий | больше 2 лет назад |
 | CVE-2021-38185 GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c ds_fgetstr integer overflow that triggers an out-of-bounds heap write. NOTE: it is unclear whether there are common cases where the pattern file, associated with the -E option, is untrusted data. | CVSS3: 7.8 | 4% Низкий | больше 5 лет назад |
 | CVE-2021-38185 GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c ds_fgetstr integer overflow that triggers an out-of-bounds heap write. NOTE: it is unclear whether there are common cases where the pattern file, associated with the -E option, is untrusted data. | CVSS3: 7 | 4% Низкий | больше 5 лет назад |
 | CVE-2021-38185 GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c ds_fgetstr integer overflow that triggers an out-of-bounds heap write. NOTE: it is unclear whether there are common cases where the pattern file, associated with the -E option, is untrusted data. | CVSS3: 7.8 | 4% Низкий | больше 5 лет назад |
| CVE-2021-38185 GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file because of a dstring.c ds_fgetstr integer overflow that triggers an out-of-bounds heap write. NOTE: it is unclear whether there are common cases where the pattern file associated with the -E option is untrusted data. | CVSS3: 7.8 | 4% Низкий | около 5 лет назад |
| CVE-2021-38185 GNU cpio through 2.13 allows attackers to execute arbitrary code via a ... | CVSS3: 7.8 | 4% Низкий | больше 5 лет назад |
 | SUSE-SU-2024:0825-1 Security update for cpio | 1% Низкий | больше 2 лет назад | |
| SUSE-SU-2024:0824-1 Security update for cpio | 1% Низкий | больше 2 лет назад | |
| SUSE-SU-2024:0305-2 Security update for cpio | 1% Низкий | больше 2 лет назад | |
| SUSE-SU-2024:0305-1 Security update for cpio | 1% Низкий | больше 2 лет назад | |
| SUSE-SU-2024:0248-1 Security update for cpio | 1% Низкий | почти 3 года назад | |
| SUSE-SU-2024:0238-1 Security update for cpio | 1% Низкий | почти 3 года назад | |
| GHSA-x4gq-xcr8-xwp7 Debian's cpio contains a path traversal vulnerability. This issue was introduced by reverting CVE-2015-1197 patches which had caused a regression in --no-absolute-filenames. Upstream has since provided a proper fix to --no-absolute-filenames. | CVSS3: 4.9 | 1% Низкий | больше 2 лет назад |
 | BDU:2024-06679 Уязвимость двоичного архиватора cpio, связанная с неправильным ограничением имени пути к ограниченному каталогу, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 4 | 1% Низкий | больше 3 лет назад |
| openSUSE-SU-2021:2689-1 Security update for cpio | 4% Низкий | около 5 лет назад | |
| SUSE-SU-2021:2808-1 Security update for cpio | 4% Низкий | около 5 лет назад | |
| SUSE-SU-2021:2686-1 Security update for cpio | 4% Низкий | около 5 лет назад | |
| SUSE-SU-2021:14788-1 Security update for cpio | 4% Низкий | около 5 лет назад | |
| SUSE-SU-2021:14777-1 Security update for cpio | 4% Низкий | около 5 лет назад |
Уязвимостей на страницу