CVE-2015-1197

Mô tả

Tham khảo

• advisories.mageia.org/MGASA-2015-0080.html
• packetstormsecurity.com/files/169458/Zimbra-Collaboration-Suite-TAR-Path-Traversal.html
• mandriva.com/security/advisories
• openwall.com/lists/oss-security/2015/01/07/5 · Exploit
• openwall.com/lists/oss-security/2015/01/18/7
• openwall.com/lists/oss-security/2023/12/21/8
• openwall.com/lists/oss-security/2023/12/27/1
• securityfocus.com/bid/71914
• ubuntu.com/usn/USN-2906-1
• bugs.debian.org/cgi-bin/bugreport.cgi · Exploit
• lists.gnu.org/archive/html/bug-cpio/2015-01/msg00000.html · Exploit

Lỗ hổng khác của cpio

• CVE-2023-7207TRUNG BÌNH 4.9Debian's cpio contains a path traversal vulnerability. This issue was introduced by reverting CVE-2015-1197 patches which had caused a regre…
• CVE-2021-38185CAO 7.8GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c ds_fgetstr integer overf…
• CVE-2019-14866CAO 7.3In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives. When cpio is used to create TAR arc…
• CVE-2016-2037TRUNG BÌNH 6.5The cpio_safer_name_suffix function in util.c in cpio 2.11 allows remote attackers to cause a denial of service (out-of-bounds write) via a …
• CVE-2014-9112TRUNG BÌNH 5.0Heap-based buffer overflow in the process_copy_in function in GNU Cpio 2.11 allows remote attackers to cause a denial of service via a large…