Lucene search
FreeBSD72EE9707-D7B2-11E4-8D8E-F8B156B6DCC8HistoryMar 27, 2015 - 12:00 a.m.
cpio -- multiple vulnerabilities
2015-03-2700:00:00
vuxml.freebsd.org
16
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS
0.016
Percentile
87.6%
From the Debian Security Team:
Heap-based buffer overflow in the process_copy_in
function in GNU Cpio 2.11 allows remote attackers to cause
a denial of service via a large block value in a cpio
archive.
cpio 2.11, when using the --no-absolute-filenames
option, allows local users to write to arbitrary files
via a symlink attack on a file in an archive.
Related
nessus
nessus
GLSA-201502-11 : GNU cpio: Multiple vulnerabilities
2015-02-16 00:00:00
Mandriva Linux Security Advisory : cpio (MDVSA-2015:065)
2015-03-30 00:00:00
gentoo
gentoo
GNU cpio: Multiple vulnerabilities
2015-02-15 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 201502-11
2015-09-29 00:00:00
Debian: Security Advisory (DLA-111-1)
2023-03-08 00:00:00
RedHat Update for cpio RHSA-2015:2108-03
2015-11-20 00:00:00
prion
prion
debian
debian
[SECURITY] [DLA 111-1] cpio security update
2014-12-15 14:18:40
[SECURITY] [DSA 3111-1] cpio security update
2014-12-23 00:55:26
[SECURITY] [DSA 3111-1] cpio security update
2014-12-23 00:55:26
mageia
mageia
Updated cpio package fixes security vulnerability
2014-12-14 17:10:39
Updated cpio packages fix security vulnerabilities
2019-11-14 19:58:51
Updated cpio package fixes security vulnerability
2015-02-19 17:43:07
oraclelinux
oraclelinux
cpio security and bug fix update
2015-11-23 00:00:00
redhat
redhat
(RHSA-2015:2108) Moderate: cpio security and bug fix update
2015-11-19 14:43:07
fedora
fedora
[SECURITY] Fedora 21 Update: cpio-2.11-33.fc21
2014-12-18 06:06:28
[SECURITY] Fedora 20 Update: cpio-2.11-28.fc20
2015-01-06 06:09:24
securityvulns
securityvulns
[ MDVSA-2014:250 ] cpio
2014-12-22 00:00:00
GNU cpio buffer overflow
2014-12-22 00:00:00
[ MDVSA-2015:066 ] cpio
2015-04-20 00:00:00
debiancve
debiancve
cve
cve
ubuntucve
ubuntucve
cvelist
cvelist
nvd
nvd
centos
centos
cpio security update
2015-11-30 19:26:10
archlinux
archlinux
cpio: heap buffer overflow
2015-01-14 00:00:00
cpio: directory traversal
2015-03-23 00:00:00
ibm
ibm
Security Bulletin: Vulnerability in cpio affects PowerKVM (CVE-2014-9112)
2018-06-18 01:30:30
alpinelinux
alpinelinux
CVE-2015-1197
2015-02-19 15:59:12
amazon
amazon
Important: cpio
2024-02-28 23:54:00
Important: cpio
2024-02-29 10:03:00
ubuntu
ubuntu
GNU cpio vulnerabilities
2015-01-08 00:00:00
GNU cpio vulnerabilities
2016-02-22 00:00:00
redhatcve
redhatcve
CVE-2017-7516
2018-01-29 12:50:11
CVE-2023-7207
2024-02-29 08:04:56
vulnrichment
vulnrichment
CVE-2023-7207
2024-01-05 00:39:49
securelist
securelist
Ongoing exploitation of CVE-2022-41352 (Zimbra 0-day)
2022-10-13 08:00:21
packetstorm
packetstorm
Zimbra Collaboration Suite TAR Path Traversal
2022-10-20 00:00:00
zdt
zdt
Zimbra Collaboration Suite TAR Path Traversal Exploit
2022-10-21 00:00:00
metasploit
metasploit
TAR Path Traversal in Zimbra (CVE-2022-41352)
2022-10-06 17:23:53
thn
thn
osv
osv
cpio-2.12-3.90 on GA media
2024-06-15 00:00:00
cpio-2.13-3.3 on GA media
2024-06-15 00:00:00
freebsd
freebsd
GNU cpio -- multiple vulnerabilities
2019-11-06 00:00:00
attackerkb
attackerkb
CVE-2022-41352
2022-09-26 00:00:00
rapid7blog
rapid7blog
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS
0.016
Percentile
87.6%
Related for 72EE9707-D7B2-11E4-8D8E-F8B156B6DCC8