Login Request a demo
Medium severity · published Feb 5, 2024
CVE-2023-7216
A path traversal vulnerability was found in the CPIO utility
5.3
CVSS
0.9%
EPSS
No
On KEV
Description
A path traversal vulnerability was found in the CPIO utility. This issue could allow a remote unauthenticated attacker to trick a user into opening a specially crafted archive. During the extraction process, the archiver could follow symlinks outside of the intended directory, which allows files to be written in arbitrary directories through symlinks.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 59% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CP
Cpio · Gnu
All versions, or not specified · source: NVD
EL
Enterprise Linux · Redhat
7.0; 8.0; 9.0 · source: NVD
Affected product
CP
Cpio
Gnu
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-7216
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-7216
Third Party Advisory
https://access.redhat.com/security/cve/CVE-2023-7216
Exploit
https://bugzilla.redhat.com/show_bug.cgi?id=2249901
More from Cpio
7.8
CVE-2021-38185
GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c ds_fgetstr integer overflow that triggers an out-of-bounds heap…
7.3
CVE-2019-14866
In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives
7.2
CVE-2010-4226
cpio, as used in build 2007.05.10, 2010.07.28, and possibly other versions, allows remote attackers to overwrite arbitrary files via a symlink within an RPM package archive
6.5
CVE-2016-2037
The cpio_safer_name_suffix function in util.c in cpio 2.11 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted cpio file
4.9
CVE-2023-7207
Debian's cpio contains a path traversal vulnerability