USN-4176-1: GNU cpio vulnerability | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description Thomas Habets discovered that GNU cpio incorrectly handled certain inputs. An attacker could possibly use this issue to access sensitive information. CVEs contained in this USN...

FreeBSD : GNU cpio -- multiple vulnerabilities (f59af308-07f3-11ea-8c56-f8b156b6dcc8)

Sergey Poznyakoff reports : This stable release fixes several potential vulnerabilities CVE-2015-1197: cpio, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive. CVE-2016-2037: The cpiosafernamesuffix function ...

Updated cpio packages fix security vulnerabilities

in cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive CVE-2015-1197. Thomas Habets discovered that GNU cpio incorrectly handled certain inputs. An attacker could possibly use this issue to privilege...

CVE-2018-14866

creationtimestamp| type| source ---|---|--- 2019-07-09 18:35:30+00:00| seen| https://t.me/cibsecurity/5413...

CVE-2018-14866

CVE-2018-14866 affects the TransientModel framework in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier. The root cause is incorrect access control that lets authenticated attackers access transient records they do not own by issuing an RPC call before garbage collection. Prod...

CVE-2017-14866

There is a heap-based buffer overflow in the Exiv2::s2Data function of types.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack...

CVE-2017-14866

CVE-2017-14866 is a heap-based buffer overflow in Exiv2 0.26 (Exiv2::s2Data in types.cpp) triggered by crafted input, leading to a denial of service. Public details in connected docs indicate Exiv2 versions prior to 0.27.2 are affected; remediation guidance across PT Security notes advises upgrad...