Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2023-7207
HistoryFeb 29, 2024 - 1:42 a.m.

CVE-2023-7207

2024-02-2901:42:59
[email protected]
web.nvd.nist.gov
16
debian
cpio
path traversal
vulnerability
cve-2023-7207
nvd

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

6.8 Medium

AI Score

Confidence

Low

3.3 Low

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

MULTIPLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:M/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

14.4%

JSON

Debian’s cpio contains a path traversal vulnerability. This issue was introduced by reverting CVE-2015-1197 patches which had caused a regression in --no-absolute-filenames. Upstream has since provided a proper fix to --no-absolute-filenames.

Related

debiancve 2
nessus 25
ubuntucve 2
prion 2
redhatcve 2
openvas 20
osv 1
veracode 1
ubuntu 2
amazon 2
alpinelinux 1
securityvulns 2
archlinux 1
cve 2
thn 1
freebsd 2
gentoo 1
mageia 2
securelist 1
packetstorm 1
zdt 1
metasploit 1
rapid7blog 1
attackerkb 1
debiancve
debiancve
CVE-2023-7207
2024-02-29 01:42:59
CVE-2015-1197
2015-02-19 15:59:00
nessus
nessus
SUSE SLES15 Security Update : cpio (SUSE-SU-2024:0824-1)
2024-03-09 00:00:00
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : cpio (SUSE-SU-2024:0305-1)
2024-02-02 00:00:00
SUSE SLES12 Security Update : cpio (SUSE-SU-2024:0825-1)
2024-03-09 00:00:00
ubuntucve
ubuntucve
CVE-2023-7207
2024-02-29 00:00:00
CVE-2015-1197
2015-02-19 00:00:00
prion
prion
Path traversal
2024-02-29 01:42:00
Code injection
2015-02-19 15:59:00
redhatcve
redhatcve
CVE-2023-7207
2024-02-29 08:04:56
CVE-2017-7516
2018-01-29 12:50:11
openvas
openvas
Ubuntu: Security Advisory (USN-6755-1)
2024-04-30 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:0824-1)
2024-03-11 00:00:00
openSUSE: Security Advisory for cpio (SUSE-SU-2024:0238-1)
2024-03-04 00:00:00
osv
osv
cpio vulnerabilities
2024-04-29 11:23:13
veracode
veracode
Path Traversal
2024-01-12 21:49:21
ubuntu
ubuntu
GNU cpio vulnerabilities
2024-04-29 00:00:00
GNU cpio vulnerabilities
2016-02-22 00:00:00
amazon
amazon
Important: cpio
2024-02-29 10:03:00
Important: cpio
2024-02-28 23:54:00
alpinelinux
alpinelinux
CVE-2015-1197
2015-02-19 15:59:00
securityvulns
securityvulns
[ MDVSA-2015:066 ] cpio
2015-04-20 00:00:00
libarchive directory traversal
2015-04-20 00:00:00
archlinux
archlinux
cpio: directory traversal
2015-03-23 00:00:00
cve
cve
CVE-2015-1197
2015-02-19 15:59:00
CVE-2017-7516
2018-01-29 19:29:00
thn
thn
Zimbra Releases Patch for Actively Exploited Vulnerability in its Collaboration Suite
2022-10-17 09:50:00
freebsd
freebsd
cpio -- multiple vulnerabilities
2015-03-27 00:00:00
GNU cpio -- multiple vulnerabilities
2019-11-06 00:00:00
gentoo
gentoo
GNU cpio: Multiple vulnerabilities
2015-02-15 00:00:00
mageia
mageia
Updated cpio package fixes security vulnerability
2015-02-19 17:43:07
Updated cpio packages fix security vulnerabilities
2019-11-14 19:58:51
securelist
securelist
Ongoing exploitation of CVE-2022-41352 (Zimbra 0-day)
2022-10-13 08:00:21
packetstorm
packetstorm
Zimbra Collaboration Suite TAR Path Traversal
2022-10-20 00:00:00
zdt
zdt
Zimbra Collaboration Suite TAR Path Traversal Exploit
2022-10-21 00:00:00
metasploit
metasploit
TAR Path Traversal in Zimbra (CVE-2022-41352)
2022-10-06 17:23:53
rapid7blog
rapid7blog
Exploitation of Unpatched Zero-Day Remote Code Execution Vulnerability in Zimbra Collaboration Suite (CVE-2022-41352)
2022-10-06 17:13:34
attackerkb
attackerkb
CVE-2022-41352
2022-09-26 00:00:00

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

6.8 Medium

AI Score

Confidence

Low

3.3 Low

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

MULTIPLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:M/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

14.4%

JSON
Related for CVE-2023-7207
debiancve2nessus25ubuntucve2prion2redhatcve2openvas20osv1veracode1ubuntu2amazon2alpinelinux1securityvulns2archlinux1cve2thn1freebsd2gentoo1mageia2securelist1packetstorm1zdt1metasploit1rapid7blog1attackerkb1