Skip to content
OpenAdvisories
High DLA-3741-1 1 CVE

engrampa - security update

Published Feb 26, 2024 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 10 engrampa 1.20.2-1+deb10u1

Vulnerabilities 1

  • High 8.2

    Path traversal via crafted cpio archives in Engrampa archivers

    Engrampa is an archive manager for the MATE environment. Engrampa is found to be vulnerable to a Path Traversal vulnerability that can be leveraged to achieve full Remote Command Execution (RCE) on the target. While handling CPIO archives, the Engrampa Archiv…