Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Enterprise Linux 8/cpio
Red Hat
· Package
7 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
cpio: cpio: stack-based buffer overflow in write_out_tar_header() with long usernames/groupnames
CVE-2026-126831
Red Hat Enterprise Linux 10/cpio
Red Hat Enterprise Linux 6/cpio
Red Hat
Medium
No fix reported
Not recorded
cpio: cpio: out-of-bounds read in from_ascii() when parsing newc/crc archive headers
CVE-2026-126820
Red Hat Enterprise Linux 10/cpio
Red Hat Enterprise Linux 6/cpio
Red Hat
Low
No fix reported
Not recorded
cpio: path traversal vulnerability
CVE-2023-7207
Red Hat Enterprise Linux 6/cpio
Red Hat Enterprise Linux 7/cpio
Red Hat
Medium
No fix reported
Not recorded
CPIO: extraction allows symlinks which enables Remote Command Execution
CVE-2023-7216
Red Hat Enterprise Linux 6/cpio
Red Hat Enterprise Linux 7/cpio
Red Hat
Low
No fix reported
Not recorded
cpio: GNU cpio: Path Traversal allows creating hard links outside intended directory via malicious tar archives.
CVE-2026-66484
Red Hat Enterprise Linux 10/cpio
Red Hat Enterprise Linux 6/cpio
Red Hat
Low
No fix reported
Not recorded
cpio: GNU cpio: Denial of Service via uncontrolled memory allocation from crafted archives
CVE-2026-66485
Red Hat Enterprise Linux 10/cpio
Red Hat Enterprise Linux 6/cpio
Red Hat
Medium
No fix reported
Not recorded
cpio: GNU cpio: Terminal control sequence injection via crafted archive member names
CVE-2026-66486
Red Hat Enterprise Linux 10/cpio
Red Hat Enterprise Linux 6/cpio
Red Hat
Medium
No fix reported
Not recorded
