Lucene search
+L

971 matches found

AstraLinux
AstraLinux
added 2025/06/16 11:28 a.m.4 views

Astra Linux – Vulnerability in Cpio

The vulnerability of the parseopt function in the Cpio archiver utility is related to integer overflow. Exploiting this vulnerability allows an attacker to cause a service failure...

5.5CVSS5.6AI score
SaveExploits0References2
AstraLinux
AstraLinux
added 2025/06/16 11:28 a.m.7 views

Astra Linux – Vulnerability in Cpio

The vulnerability of the parserparseopt function in the Cpio archiver utility is related to an incorrect bit shifting of a integer value. Exploiting this vulnerability allows an attacker to cause a service failure...

5.5CVSS5.5AI score
SaveExploits0References2
AstraLinux
AstraLinux
added 2025/06/16 11:28 a.m.5 views

Astra Linux – Vulnerability in Cpio

The vulnerability of the Cpio archiving utility is related to integer overflow. Exploiting this vulnerability allows an attacker to cause a service failure...

6.2CVSS5.6AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/06/16 12:0 a.m.8 views

TencentOS Server 3: cpio (TSSA-2022:0199)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2022:0199 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

7.8CVSS7.5AI score0.04131EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/05/14 12:0 a.m.8 views

Alibaba Cloud Linux 3 : 0211: cpio (ALINUX3-SA-2022:0211)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2022:0211 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2021-38185: GNU cpio through 2.13 allows...

7.8CVSS7.5AI score0.04131EPSS
SaveExploits1References2
Microsoft CVE
Microsoft CVE
added 2025/05/06 7:0 a.m.6 views

An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal.

...

7.8CVSS6.1AI score0.00704EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/04/02 12:0 a.m.4 views

Photon OS 5.0: Cpio PHSA-2024-5.0-0427

An update of the cpio package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0427. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

7.8CVSS7.1AI score0.04131EPSS
SaveExploits1References2
OSV
OSV
added 2025/03/21 1:18 p.m.2 views

OESA-2025-1309 libarchive security update

is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use . Security...

7.8CVSS7.1AI score0.00351EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2023-7207

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian's cpio contains a path traversal vulnerability. This issue was introduced by reverting CVE-2015-1197 patches which had caused a regression in...

4.9CVSS6.5AI score0.02906EPSS
SaveExploits4References3
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2016-2037

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The cpiosafernamesuffix function in util.c in cpio 2.11 allows remote attackers to cause a denial of service out-of-bounds write via a crafted cpio file...

6.5CVSS6.6AI score0.05484EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2014-9112

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in the processcopyin function in GNU Cpio 2.11 allows remote attackers to cause a denial of service via a large block value in a cpio...

5CVSS6.8AI score0.07093EPSS
SaveExploits1References2
SUSE Linux
SUSE Linux
added 2025/02/20 9:42 p.m.4 views

Security update for grub2

This update for grub2 fixes the following issues: CVE-2024-45781: Fixed strcpy overflow in ufs. bsc1233617 CVE-2024-56737: Fixed a heap-based buffer overflow in hfs. bsc1234958 CVE-2024-45782: Fixed strcpy overflow in hfs. bsc1233615 CVE-2024-45780: Fixed an overflow in tar/cpio. bsc1233614...

8.9CVSS7.3AI score0.01405EPSS
SaveExploits1References88
SUSE Linux
SUSE Linux
added 2025/02/19 7:29 a.m.6 views

Security update for grub2

This update for grub2 fixes the following issues: CVE-2024-45781: Fixed strcpy overflow in ufs. bsc1233617 CVE-2024-56737: Fixed a heap-based buffer overflow in hfs. bsc1234958 CVE-2024-45782: Fixed strcpy overflow in hfs. bsc1233615 CVE-2024-45780: Fixed an overflow in tar/cpio. bsc1233614...

8.9CVSS7.3AI score0.01405EPSS
SaveExploits1References88
SUSE Linux
SUSE Linux
added 2025/02/19 7:29 a.m.7 views

Security update for grub2

This update for grub2 fixes the following issues: CVE-2024-45781: Fixed strcpy overflow in ufs. bsc1233617 CVE-2024-56737: Fixed a heap-based buffer overflow in hfs. bsc1234958 CVE-2024-45782: Fixed strcpy overflow in hfs. bsc1233615 CVE-2024-45780: Fixed an overflow in tar/cpio. bsc1233614...

8.9CVSS7.3AI score0.01405EPSS
SaveExploits1References94
CBLMariner
CBLMariner
added 2025/01/12 9:15 a.m.139 views

CVE-2010-4226 affecting package cpio 2.13-5

CVE-2010-4226 affecting package cpio 2.13-5. This CVE either no longer is or was never applicable...

7.2CVSS6.8AI score0.02933EPSS
SaveExploits0
CBLMariner
CBLMariner
added 2025/01/12 9:15 a.m.50 views

CVE-2010-4226 affecting package cpio 2.13-3

CVE-2010-4226 affecting package cpio 2.13-3. This CVE either no longer is or was never applicable...

7.2CVSS7.5AI score0.02933EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2024/12/16 12:20 p.m.25 views

CVE-2024-53142

In the Linux kernel, the following vulnerability has been resolved: initramfs: avoid filename buffer overrun The initramfs filename field is defined in Documentation/driver-api/early-userspace/buffer-format.rst as: 37 cpiofile := ALGN4 + cpioheader + filename + "\0" + ALGN4 + data ... 55...

6CVSS7.3AI score0.00247EPSS
SaveExploits0References4
Photon
Photon
added 2024/12/13 12:0 a.m.16 views

Important Photon OS Security Update - PHSA-2024-5.0-0427

Updates of 'cpio' packages of Photon OS have been released...

7.8CVSS7.5AI score0.04131EPSS
SaveExploits1
SUSE CVE
SUSE CVE
added 2024/12/07 3:48 a.m.7 views

SUSE CVE-2024-53142

In the Linux kernel, the following vulnerability has been resolved: initramfs: avoid filename buffer overrun The initramfs filename field is defined in Documentation/driver-api/early-userspace/buffer-format.rst as: 37 cpiofile := ALGN4 + cpioheader + filename + "\0" + ALGN4 + data ... 55...

4.4CVSS8.2AI score0.00247EPSS
SaveExploits0References24
NVD
NVD
added 2024/12/06 10:15 a.m.34 views

CVE-2024-53142

In the Linux kernel, the following vulnerability has been resolved: initramfs: avoid filename buffer overrun The initramfs filename field is defined in Documentation/driver-api/early-userspace/buffer-format.rst as: 37 cpiofile := ALGN4 + cpioheader + filename + "\0" + ALGN4 + data ... 55...

7.8CVSS0.00247EPSS
SaveExploits0References11
Rows per page
Query Builder