Published: 05/02/2024 Updated: 26/03/2024

CVSS v3 Base Score: 5.3 | Impact Score: 3.4 | Exploitability Score: 1.8

VMScore: 0

A path traversal vulnerability was found in the CPIO utility. This issue could allow a remote unauthenticated malicious user to trick a user into opening a specially crafted archive. During the extraction process, the archiver could follow symlinks outside of the intended directory, this allows writing files in arbitrary directories through symlinks.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gnu cpio -
redhat enterprise linux 7.0
redhat enterprise linux 8.0
redhat enterprise linux 9.0

DescriptionA path traversal vulnerability was found in the CPIO utility This issue could allow a remote unauthenticated attacker to trick a user into opening a specially crafted archive During the extraction process, the archiver could follow symlinks outside of the intended directory, which could be utilized to run arbitrary commands on t ...

CWE-59 https://access.redhat.com/security/cve/CVE-2023-7216 https://bugzilla.redhat.com/show_bug.cgi?id=2249901 https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2023-7216

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2023-7216

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect