CVE-2019-14866

CVE-2019-14866 affects GNU cpio: all versions before 2.13 improperly validate input when generating TAR archives, enabling a local attacker to cause files with unintended permissions or paths when creating archives. Exploitation relies on archiving from paths, potentially enabling high-privilege ...

CVE-2010-4226

The cpio utility, specifically in build 2007.05.10 , 2010.07.28 , and potentially other versions, contains a vulnerability where a remote attacker can overwrite arbitrary files . This occurs due to improper link resolution (CWE-59 ) when processing a symlink within an RPM package archive . In ope...