Lucene search

K
redosRedosROS-20240902-07
HistorySep 02, 2024 - 12:00 a.m.

ROS-20240902-07

2024-09-0200:00:00
redos.red-soft.ru
3
cpio vulnerability denial-of-service unix attack remote exploitation_regression command-line-parameter

CVSS3

4.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

AI Score

6.8

Confidence

Low

A vulnerability in the cpio binary archiver is related to regression when using the command line parameter
–no-absolute-filenames. Exploitation of the vulnerability could allow an attacker acting remotely,
cause a denial of service

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64cpio< 2.15-1UNKNOWN

CVSS3

4.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

AI Score

6.8

Confidence

Low