CVE-2023-7207

概要

参考情報

• openwall.com/lists/oss-security/2024/01/05/1 · Mailing List
• bugs.debian.org/cgi-bin/bugreport.cgi · Issue Tracking
• cve.mitre.org/cgi-bin/cvename.cgi · Third Party Advisory
• git.savannah.gnu.org/cgit/cpio.git/commit · Mailing List
• openwall.com/lists/oss-security/2023/12/21/8 · Mailing List

cpio のその他の脆弱性

• CVE-2021-38185高 7.8GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c ds_fgetstr integer overf…
• CVE-2019-14866高 7.3In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives. When cpio is used to create TAR arc…
• CVE-2016-2037中 6.5The cpio_safer_name_suffix function in util.c in cpio 2.11 allows remote attackers to cause a denial of service (out-of-bounds write) via a …
• CVE-2015-1197低 1.9cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in a…
• CVE-2014-9112中 5.0Heap-based buffer overflow in the process_copy_in function in GNU Cpio 2.11 allows remote attackers to cause a denial of service via a large…