CVE-2023-7207
EUVD-2023-5938829.02.2024, 01:42
Debian's cpio contains a path traversal vulnerability. This issue was introduced by reverting CVE-2015-1197 patches which had caused a regression in --no-absolute-filenames. Upstream has since provided a proper fix to --no-absolute-filenames.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| gnu | cpio | 2.13 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| cpio |
| ||||||||||||||||||||||||||||||||||
| cpio-lang |
| ||||||||||||||||||||||||||||||||||
| cpio-mt |
|
References