Lucene search
+L

3 matches found

osv_oesa
osv_oesa
•added 2026/08/30 4:15 a.m.•22 views

OESA-2026-3540 cpio security update

GNU cpio copies files into or out of a cpio or tar archive. The archive can be another file on the disk, a magnetic tape, or a pipe. Security Fixes: GNU cpio is vulnerable to improper encoding or escaping of output in its archive member listing functionality. When listing archive members via cpio...

4.6CVSS5.7AI score0.00184EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2026/08/10 11:17 a.m.•11 views

DEBIAN-CVE-2026-66486

GNU cpio is vulnerable to improper encoding or escaping of output in its archive member listing functionality. When listing archive members via cpio -it, member names are printed directly to output without quoting or escaping. An attacker can craft a cpio archive containing member names with...

4.6CVSS5.8AI score0.00184EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/08/10 10:25 a.m.•26 views

CVE-2026-66486

GNU cpio is vulnerable to improper encoding or escaping of output in its archive member listing functionality. When listing archive members via cpio -it, member names are printed directly to output without quoting or escaping. An attacker can craft a cpio archive containing member names with...

4.6CVSS5.8AI score0.00197EPSS
SaveExploits0References3
Rows per page
Query Builder