4 results · Feed
-
High 7.8CVE-2021-38185 Public exploit
GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c ds_…
-
Medium 6.7
In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives. When cpio is u…
-
Unscored —
The cpio_safer_name_suffix function in util.c in cpio 2.11 allows remote attackers to cause a denial of service (out-of…
-
Unscored —
cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink …