Skip to content
OpenAdvisories
Unscored DSA-846-1 2 CVEs

cpio - several

Published Oct 7, 2005 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 3.0 cpio 2.4.2-39woody2
Debian · 3.1 cpio 2.5-1.3

Vulnerabilities 2

  • Unscored —

    Race condition in cpio 2.6 and earlier allows local users to modify permissions of arbitrary files via a hard link atta…

  • Unscored —

    Directory traversal vulnerability in cpio 2.6 and earlier allows remote attackers to write to arbitrary directories via…