Lucene search
+L

31 matches found

OpenVAS
OpenVAS
added 2016/09/16 12:00 a.m.28 views

CentOS Update for bsdcpio CESA-2016:1844 centos7

Check the version of bsdcpio SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882556";...

8.6CVSS6.6AI score0.06251EPSS
SaveExploits3References2
OpenVAS
OpenVAS
added 2015/03/26 12:00 a.m.35 views

Ubuntu: Security Advisory (USN-2549-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.4CVSS8.1AI score0.0489EPSS
SaveExploits1References2
OSV
OSV
added 2015/03/25 2:36 p.m.8 views

USN-2549-1 libarchive vulnerabilities

It was discovered that the libarchive bsdcpio utility extracted absolute paths by default without using the --insecure flag, contrary to expectations. If a user or automated system were tricked into extracting cpio archives containing absolute paths, a remote attacker may be able to write to...

6.4CVSS7AI score0.0489EPSS
SaveExploits1References3
OSV
OSV
added 2015/03/15 7:59 p.m.7 views

DEBIAN-CVE-2015-2304

Absolute path traversal vulnerability in bsdcpio in libarchive 3.1.2 and earlier allows remote attackers to write to arbitrary files via a full pathname in an archive...

6.4CVSS7AI score0.0489EPSS
SaveExploits1References1
Debian CVE
Debian CVE
added 2015/03/15 7:00 p.m.78 views

CVE-2015-2304

Absolute path traversal vulnerability in bsdcpio in libarchive 3.1.2 and earlier allows remote attackers to write to arbitrary files via a full pathname in an archive...

6.4CVSS7.1AI score0.0489EPSS
SaveExploits1
OSV
OSV
added 2015/03/15 12:00 a.m.7 views

UBUNTU-CVE-2015-2304

Absolute path traversal vulnerability in bsdcpio in libarchive 3.1.2 and earlier allows remote attackers to write to arbitrary files via a full pathname in an archive...

6.4CVSS7.1AI score0.0489EPSS
SaveExploits1References7
Mageia
Mageia
added 2015/03/12 3:30 p.m.18 views

Updated libarchive packages fix security vulnerability

Updated libarchive packages fix security vulnerability: Alexander Cherepanov discovered that bsdcpio, an implementation of the "cpio" program part of the libarchive project, is susceptible to a directory traversal vulnerability via absolute paths...

2.7AI score
SaveExploits0References3
OSV
OSV
added 2015/03/12 3:30 p.m.7 views

MGASA-2015-0106 Updated libarchive packages fix security vulnerability

Updated libarchive packages fix security vulnerability: Alexander Cherepanov discovered that bsdcpio, an implementation of the "cpio" program part of the libarchive project, is susceptible to a directory traversal vulnerability via absolute paths...

7.2AI score
SaveExploits0References4
Debian
Debian
added 2015/03/07 4:01 p.m.46 views

[SECURITY] [DLA 166-1] libarchive security update

Package : libarchive Version : 2.8.4.forreal-1+squeeze3 CVE ID : not yet assigned Debian Bug : 778266 Alexander Cherepanov discovered that bsdcpio, an implementation of the cpio program part of the libarchive project, is susceptible to a directory traversal vulnerability via absolute paths...

7.3AI score
SaveExploits0
OSV
OSV
added 2015/03/07 12:00 a.m.23 views

DLA-166-1 libarchive - security update

Bulletin has no description...

6.4CVSS7.1AI score0.0489EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2012/02/21 12:00 a.m.45 views

Debian DSA-2413-1 : libarchive - buffer overflows

Two buffer overflows have been discovered in libarchive, a library providing a flexible interface for reading and writing archives in various formats. The possible buffer overflows while reading ISO 9660 or tar streams allow remote attackers to execute arbitrary code depending on the application...

6.8CVSS6.2AI score0.04199EPSS
SaveExploits0References4
Rows per page
Query Builder