cpio vulnerabilities

CVEs whose affected-version data names the cpio package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2015-1197Low· 1.9

cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.

cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.

▾ Sunlitgnu · cpioEPSS 2.9%via NVD

cpio vulnerabilities (CVEs) · VulnSea