102 matches found
SUSE-SU-2024:0305-3 Security update for cpio
This update for cpio fixes the following issues: - Fixed cpio not extracting correctly when using --no-absolute-filenames option the security fix for CVE-2023-7207 bsc1218571, bsc1219238...
SUSE-SU-2024:0305-1 Security update for cpio
This update for cpio fixes the following issues: - Fixed cpio not extracting correctly when using --no-absolute-filenames option the security fix for CVE-2023-7207 bsc1218571, bsc1219238...
SUSE-SU-2024:0825-1 Security update for cpio
This update for cpio fixes the following issues: - Fixed cpio not extracting correctly when using --no-absolute-filenames option the security fix for CVE-2023-7207 bsc1218571, bsc1219238...
SUSE SLES12 Security Update : cpio (SUSE-SU-2024:0825-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0825-1 advisory. - Fixed cpio not extracting correctly when using --no-absolute-filenames option the security fix for CVE-2023-7207 bsc1218571, bsc1219238...
SUSE SLES15 Security Update : cpio (SUSE-SU-2024:0824-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0824-1 advisory. - CVE-2023-7207: Fixed path traversal vulnerability bsc1218571, bsc1219238 Tenable has extracted the preceding description block directly fr...
openSUSE Security Advisory (SUSE-SU-2024:0238-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Advisory (SUSE-SU-2024:0305-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-7207
creationtimestamp| type| source ---|---|--- 2024-02-29 09:16:23+00:00| seen| https://t.me/ctinow/196372...
CVE-2023-7207
Debian's cpio contains a path traversal vulnerability. This issue was introduced by reverting CVE-2015-1197 patches which had caused a regression in --no-absolute-filenames. Upstream has since provided a proper fix to --no-absolute-filenames...
CVE-2023-7207
Debian's cpio contains a path traversal vulnerability. This issue was introduced by reverting CVE-2015-1197 patches which had caused a regression in --no-absolute-filenames. Upstream has since provided a proper fix to --no-absolute-filenames...
SUSE-SU-2024:0248-1 Security update for cpio
This update for cpio fixes the following issues: - CVE-2023-7207: Fixed a path traversal issue that could lead to an arbitrary file write during archive extraction bsc1218571...
MAL-2024-825 Malicious code in wlwz-2312-7207 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e03b89f00d3e74850b4aa597aaac1d4fd433aec8df364777de6ee808d8733c82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in wlwz-2312-7207 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e03b89f00d3e74850b4aa597aaac1d4fd433aec8df364777de6ee808d8733c82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-7207
Debian's cpio contains a path traversal vulnerability. This issue was introduced by reverting CVE-2015-1197 patches which had caused a regression in --no-absolute-filenames. Upstream has since provided a proper fix to --no-absolute-filenames...
CVE-2023-7207
Debian's cpio contains a path traversal vulnerability. This issue was introduced by reverting CVE-2015-1197 patches which had caused a regression in --no-absolute-filenames. Upstream has since provided a proper fix to --no-absolute-filenames...
CVE-2023-7207
Debian's cpio contains a path traversal vulnerability. This issue was introduced by reverting CVE-2015-1197 patches which had caused a regression in --no-absolute-filenames. Upstream has since provided a proper fix to --no-absolute-filenames...
CVE-2023-7207
CVE-2023-7207 affects Debian/Ubuntu CPIO and is caused by reverting patches to --no-absolute-filenames that reintroduced a path-traversal weakness. Upstream has provided a proper fix to --no-absolute-filenames. Evidence in connected advisories confirms the issue as a cpio path traversal vulnerabi...
Oracle Linux 8 : c-ares (ELSA-2023-7207)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7207 advisory. 1.13.0-9.1 - Resolves: RHEL-11931 - Buffer Underwrite in aresinetnetpton rhel-8.9.0.z 1.13.0-9 - Resolves: rhbz2238293 - CVE-2020-22217 c-ares:...
RHEL 8 : c-ares (RHSA-2023:7207)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7207 advisory. The c-ares C library defines asynchronous DNS Domain Name System requests and provides name resolving API. Security Fixes: c-ares: Heap buff...