Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the ExpandApk function. An attacker can cause excessive resource consumption by providing a specially crafted, highly-compressed .apk stream that decompresses into a large tar...

SUSE-SU-2024:0305-2 Security update for cpio

This update for cpio fixes the following issues: - Fixed cpio not extracting correctly when using --no-absolute-filenames option the security fix for CVE-2023-7207 bsc1218571, bsc1219238...

CVE-2005-1229

CPIO (GNU cpio) prior to version 2.6 is affected by CVE-2005-1229, a directory-traversal flaw that lets an attacker write to arbitrary directories during extraction via a .. path in an archive. The root cause is that cpio does not sanitise extracted paths (even with --no-absolute-filenames). Cons...

PT-2005-2128 · Gnu +1 · Cpio +1

Name of the Vulnerable Software and Affected Versions: cpio versions 2.6 and earlier Description: A race condition issue allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed. The permissions of the file are changed by cpio aft...