Lucene search
+L

1 matches found

OSV
OSV
added 2019/11/14 4:58 p.m.9 views

MGASA-2019-0326 Updated cpio packages fix security vulnerabilities

in cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive CVE-2015-1197. Thomas Habets discovered that GNU cpio incorrectly handled certain inputs. An attacker could possibly use this issue to privilege...

7.3CVSS6.3AI score0.02906EPSS
SaveExploits5References3
Rows per page
Query Builder