cve-2022-41352-zimbra-rce

CVE-2022-41352 Zimbra 未认证远程代码执行 CVE-2022-41352 是由于使用了易受攻击的 cpio 版本而导致的 Zimbra 邮件服务器中的任意文件写入漏洞。 CVE-2022-41352 NIST.gov CVE-2022-41352 Rapid7 分析 受影响Zimbra 版本： Zimbra 9.0.0.p27 Zimbra 8.8.15.p34 （更多详情请参阅补丁说明。） 修复措施： 要修复此漏洞，请应用最新补丁（分别为 9.0.0.p27 和 8.8.15.p34）——或安装 pax 并重启服务器。 用法：...

cpiopwn

cpiopwn CVE-2021-38185 这是一个针对 cpio 中整数溢出漏洞的 ACE（任意代码执行）概念验证。该漏洞利用绕过了所有二进制保护（完全 RELRO 除外）。此漏洞利用使用 cpio 2.13 和 libc 2.31。视频演示：https://youtu.be/F0yKJhu7Vak 运行漏洞利用 我们提供了一个 Kali Dockerfile 来运行该漏洞利用。相同的漏洞利用在 Docker 容器外也可能有效，但偏移量可能不同。 指令 构建镜像 sudo docker build -t cpiopwn . 启动镜像并挂载文件 sudo docker run...

openSUSE 16 Security Update : cpio (openSUSE-SU-2026:21747-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21747-1 advisory. - CVE-2026-66484: improper sanitization in the tar archive extraction functionality allows for the creation of hard links outside intended...

cve-2022-41352

cve-2022-41352 生成 poc.tar root@kitploit: $ chmod +x cpiopocgen.py $ ./cpiopocgen.py 对 cpio 竖中指 root@kitploit: $ cd /tmp $ mkdir -p poc/a/b copy poc.tar to /tmp/poc/a/b/ $ cd /tmp/poc/a/b/ $ cpio -i poc.tar $ ls -al ../ total 16 drwxrwxr-x 3 xabino xabino 4096 ott 10 14:56 . drwxrwxr-x 3 xabino...

Zimbra Collaboration - Unrestricted File Upload

An issue was discovered in Zimbra Collaboration ZCS 8.8.15 and 9.0. An attacker can upload arbitrary files through amavis via a cpio loophole extraction to /opt/zimbra/jetty/webapps/zimbra/public that can lead to incorrect access to any other user accounts. Zimbra recommends pax over cpio. Also,...

USN-8704-1 cpio vulnerabilities

It was discovered that cpio incorrectly sanitized hard-link targets when extracting tar archives in copy-in mode. If a user or automated system were tricked into extracting a specially crafted tar archive, an attacker could possibly use this issue to create hard links to files outside the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: cpio (UTSA-2026-092966)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-092966 advisory. cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive. Tenable has...

Astra Linux – Vulnerability in Cpio

In GNU Cpio from version 2.13 onwards, attackers can execute arbitrary code by using a crafted pattern file. This occurs due to a dstring.c dsfgetstr integer overflow, which triggers an out-of-bounds heap write. NOTE: It is unclear whether there are common cases where the pattern file, associated...

Astra Linux – Vulnerability in Cpio

Debian’s cpio package contains a path traversal vulnerability. This issue was introduced by reverting the CVE-2015-1197 patches, which caused a regression in the --no-absolute-filenames option. Upstream has since provided a proper fix for this issue...

Astra Linux – Vulnerability in Cpio

The vulnerability of the parseopt function in the Cpio archiver utility is related to integer overflow. Exploiting this vulnerability allows an attacker to cause a service failure...

Astra Linux – Vulnerability in Cpio

The vulnerability of the fromascii function in the copyin.c component of the Cpio compression utility is related to buffer overflows in the stack. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Astra Linux – Vulnerability in klibc

A issue was discovered in klibc before version 2.0.9. Multiple potential integer overflows in the cpio command on 32-bit systems could lead to a buffer overflow or other security issues...

Astra Linux – Vulnerability in klibc

A issue was discovered in klibc before version 2.0.9. An integer overflow in the cpio command may lead to a NULL pointer dereferencing on 64-bit systems...

Astra Linux – Vulnerability in Cpio

The vulnerability of the parserparseopt function in the Cpio archiver utility is related to an incorrect bit shifting of a integer value. Exploiting this vulnerability allows an attacker to cause a service failure...

Astra Linux – Vulnerability in Cpio

The vulnerability of the readnamefromfile function in the Cpio archiving utility is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to gain access to confidential data and also cause service interruptions...

Astra Linux – Vulnerability in Cpio

The vulnerability of the Cpio archiving utility is related to integer overflow. Exploiting this vulnerability allows an attacker to cause a service failure...

cpio: GNU cpio: Path Traversal allows creating hard links outside intended directory via malicious tar archives.

A flaw was found in GNU cpio. This vulnerability, known as Path Traversal, occurs during the extraction of tar archives in copy-in mode when the --no-absolute-filenames option is used. A remote attacker could craft a malicious tar archive containing a hard-link entry with an absolute path. This...

Low: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: cpio: cpio-2.15-10.1.hum1 aarch64, x8664 cpio-2.15-10.1.hum1.src src Security Fixes: cpio: CVE-2026-66484...

SUSE CVE-2026-66484

GNU cpio contains a Path Traversal vulnerability in its tar archive extraction functionality. When extracting a tar archive in copy-in mode with the --no-absolute-filenames option, the extracted file name is normalized but the tar hard-link target is passed to the linktoname function without...

SUSE CVE-2026-66485

GNU cpio is vulnerable to an uncontrolled memory allocation in the makepath function at src/makepath.c. The function uses alloca to allocate stack memory based on the length of argpath, which is derived from an archive-controlled pathname during extraction. A malicious cpio archive containing a...