Known vulnerabilities in cpio (Ubuntu package)
Vendor:
Canonical Ltd.
Software:
cpio (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:cpio_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
3
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
2.15+dfsg-2ubuntu1
2.15+dfsg-1ubuntu3
2.15+dfsg-1ubuntu1
2.15+dfsg-1
2.14+dfsg-1
2.13+dfsg-5
2.13+dfsg-6
2.13+dfsg-7
2.13+dfsg-7.1
2.13+dfsg-4ubuntu4
2.13+dfsg-4ubuntu3
2.13+dfsg-4ubuntu2
2.13+dfsg-4ubuntu1
2.13+dfsg-4
2.13+dfsg-3
2.11-7ubuntu3.3
2.15+dfsg-2
2.15+dfsg-1ubuntu2
2.13+dfsg-2ubuntu0.4
2.13+dfsg-7ubuntu0.1
2.13+dfsg-7.1ubuntu0.1
Ubuntu Pro
2.11+dfsg5ubuntu1.1+esm1
2.13+dfsg-2ubuntu0.3
2.13+dfsg-4ubuntu0.3
2.12+dfsg-6ubuntu0.18.04.4
2.13+dfsg-1
2.13+dfsg
2.13+dfsg-2
2.12+dfsg
2.11
2.11+dfsg
2.12+dfsg-9ubuntu1
2.11+dfsg-5ubuntu1.1
2.12+dfsg-9ubuntu0.1
2.12+dfsg-6ubuntu0.19.04.1
2.12+dfsg-6ubuntu0.18.04.1
2.12+dfsg-9
2.12+dfsg-7
2.12+dfsg-8
2.12+dfsg-1
2.12+dfsg-2
2.12+dfsg-3
2.12+dfsg-4
2.12+dfsg-5
2.12+dfsg-6
2.11+dfsg-6
2.11+dfsg-5
2.11+dfsg-5ubuntu1
2.11+dfsg-3
2.11+dfsg-4
2.11+dfsg-4ubuntu1
2.11+dfsg-4.1
2.11+dfsg-4.1ubuntu1
2.11+dfsg-4.1ubuntu1.1
2.11+dfsg-2
2.11+dfsg-2ubuntu1
2.11+dfsg-2ubuntu1.1
2.11+dfsg-1ubuntu1.2
2.11+dfsg-0.1
2.11+dfsg-0.1ubuntu1
2.11+dfsg-0.2
2.11+dfsg-0.2ubuntu1
2.11+dfsg-1
2.11+dfsg-1ubuntu1
2.11+dfsg-1ubuntu1.1
2.11-7ubuntu3.2
2.11-7ubuntu3.1
2.10-2
2.11-1
2.11-2
2.11-3
2.11-4
2.11-4ubuntu1
2.11-5
2.11-5ubuntu1
2.11-6
2.11-6ubuntu1
2.11-7
2.11-7ubuntu1
2.11-7ubuntu2
2.11-7ubuntu3
2.11-8
2.11-8ubuntu1
2.11-8ubuntu2
2.11-8ubuntu3
2.11-8ubuntu4
2.11-8ubuntu5
2.4.2-7
2.4.2-8
2.4.2-9
2.4.2-10
2.4.2-11
2.4.2-12
2.4.2-13
2.4.2-14
2.4.2-15
2.4.2-16
2.4.2-17
2.4.2-18
2.4.2-19
2.4.2-20
2.4.2-21
2.4.2-22
2.4.2-23
2.4.2-24
2.4.2-25
2.4.2-26
2.4.2-27
2.4.2-28
2.4.2-29
2.4.2-30
2.4.2-31
2.4.2-32
2.4.2-33
2.4.2-34
2.4.2-35
2.4.2-37
2.4.2-38
2.4.2-39
2.4.2-40
2.5-1
2.5-1.1
2.5-1.2
2.6-1
2.6-2
2.6-3
2.6-4
2.6-5
2.6-6
2.6-7
2.6-8
2.6-9
2.6-10
2.6-11
2.6-12
2.6-13
2.6-14
2.6-15
2.6-16
2.6-17
2.7-1
2.7-2
2.7-3
2.7-4
2.8-1
2.9-1
2.9-2
2.9-3
2.9-4
2.9-5
2.9-6
2.9-7
2.9-8
2.9-9
2.9-10
2.9-11
2.9-12
2.9-13
2.9-13ubuntu1
2.9-13ubuntu2
2.9-14
2.9-14ubuntu1
2.9-15
2.9-15ubuntu1
2.9.90-2
2.9.90-3
2.9.90-3ubuntu1
2.10-1
2.10-1ubuntu1
2.10-1ubuntu2
2.10-1ubuntu2.1
Vulnerabilities (3)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU85896 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2023-7207 |
CWE-22 | High | 2.13+dfsg-7.1ubuntu0.1, 2.13+dfsg-7ubuntu0.1, 2.13+dfsg-2ubuntu0.4 | 30.01.2024 |
SB2024013015 SB2024013019 SB2024013020 and 12 more |
||
| #VU55853 - Integer overflow CVE-2021-38185 |
CWE-190 | High | Ubuntu Pro, 2.11+dfsg5ubuntu1.1+esm1, 2.12+dfsg-6ubuntu0.18.04.4, 2.13+dfsg-2ubuntu0.3, 2.13+dfsg-4ubuntu0.3 | 16.08.2021 |
SB2021081602 SB2021090901 SB2022051160 and 21 more |
||
| #VU22598 - Improper input validation CVE-2019-14866 |
CWE-20 | Low | 2.11+dfsg-5ubuntu1.1, 2.12+dfsg-9ubuntu0.1, 2.12+dfsg-6ubuntu0.18.04.1, 2.12+dfsg-6ubuntu0.19.04.1 | 07.11.2019 |
SB2019110723 SB2019110724 SB2019110742 and 15 more |