Security
فارسی
All products

Red Hat Enterprise Linux 7/cpio

Red Hat · Package
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
cpio: cpio: stack-based buffer overflow in write_out_tar_header() with long usernames/groupnamesCVE-2026-126831 Red Hat Enterprise Linux 10/cpioRed Hat Enterprise Linux 6/cpio Red Hat Medium No fix reported
cpio: cpio: out-of-bounds read in from_ascii() when parsing newc/crc archive headersCVE-2026-126820 Red Hat Enterprise Linux 10/cpioRed Hat Enterprise Linux 6/cpio Red Hat Low No fix reported
cpio: directory traversal through symlinksCVE-2015-1197 Red Hat Enterprise Linux 5/cpioRed Hat Enterprise Linux 6/cpio Red Hat Low No fix reported
cpio: out of bounds writeCVE-2016-2037 Red Hat Enterprise Linux 5/cpioRed Hat Enterprise Linux 6/cpio Red Hat Low No fix reported
cpio: integer overflow in ds_fgetstr() in dstring.c can lead to an out-of-bounds write via a crafted pattern fileCVE-2021-38185 Red Hat Enterprise Linux 6/cpioRed Hat Enterprise Linux 7/cpio Red Hat Medium No fix reported
cpio: path traversal vulnerabilityCVE-2023-7207 Red Hat Enterprise Linux 6/cpioRed Hat Enterprise Linux 7/cpio Red Hat Medium No fix reported
CPIO: extraction allows symlinks which enables Remote Command ExecutionCVE-2023-7216 Red Hat Enterprise Linux 6/cpioRed Hat Enterprise Linux 7/cpio Red Hat Low No fix reported
cpio: GNU cpio: Path Traversal allows creating hard links outside intended directory via malicious tar archives.CVE-2026-66484 Red Hat Enterprise Linux 10/cpioRed Hat Enterprise Linux 6/cpio Red Hat Low No fix reported
cpio: GNU cpio: Denial of Service via uncontrolled memory allocation from crafted archivesCVE-2026-66485 Red Hat Enterprise Linux 10/cpioRed Hat Enterprise Linux 6/cpio Red Hat Medium No fix reported
cpio: GNU cpio: Terminal control sequence injection via crafted archive member namesCVE-2026-66486 Red Hat Enterprise Linux 10/cpioRed Hat Enterprise Linux 6/cpio Red Hat Medium No fix reported