Path traversal in cpio - CVE-2023-7207

Vulnerability identifier: #VU85896

CSH Severity: High

CVSS v4: 8.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-7207

CWE-ID: CWE-22

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to overwrite arbitrary files on the system.

The vulnerability exists due to input validation error when processing filenames inside cpio archives. A remote attacker can trick the victim to open a specially crafted cpio archive and overwrite arbitrary files on the system.

cpio
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Server 12
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
openSUSE Leap Micro
SUSE Enterprise Storage
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
SUSE Linux Enterprise Desktop 15 SP4 LTSS
SUSE Linux Enterprise Server 15 SP4 LTSS
Basesystem Module
openSUSE Leap
Ubuntu
RecoverPoint for Virtual Machines
cpio-lang
cpio-debugsource
cpio
cpio-debuginfo
cpio-mt-debuginfo
cpio-mt
cpio (Ubuntu package)
PowerStore X
PowerStore T
Storage Resource Manager
EMC Cloud Tiering Appliance
Dell EMC Storage Monitoring and Reporting (SMR)
Dell Secure Connect Gateway
Dell EMC VxRail Appliance

Install update from vendor's website.

cpio - update to 2.14
RecoverPoint for Virtual Machines - update to 6.0 SP2 P1
cpio-lang - addressed in versions 2.11-36.18.1, 2.11-36.21.1, 2.12-150000.3.12.1, 2.13-150400.3.3.1, 2.13-150400.3.6.1
cpio-debugsource - addressed in versions 2.11-36.18.1, 2.11-36.21.1, 2.12-150000.3.12.1, 2.13-150400.3.3.1, 2.13-150400.3.6.1
cpio - addressed in versions 2.11-36.18.1, 2.11-36.21.1, 2.12-150000.3.12.1, 2.13-150400.3.3.1, 2.13-150400.3.6.1
cpio-debuginfo - addressed in versions 2.11-36.18.1, 2.11-36.21.1, 2.12-150000.3.12.1, 2.13-150400.3.3.1, 2.13-150400.3.6.1
cpio-mt-debuginfo - addressed in versions 2.12-150000.3.12.1, 2.13-150400.3.3.1, 2.13-150400.3.6.1
cpio-mt - addressed in versions 2.12-150000.3.12.1, 2.13-150400.3.3.1, 2.13-150400.3.6.1
cpio (Ubuntu package) - addressed in versions 2.13+dfsg-7.1ubuntu0.1, 2.13+dfsg-7ubuntu0.1, 2.13+dfsg-2ubuntu0.4
PowerStore X - update to 3.2.1.4-2386214
PowerStore T - update to 4.0.0.2-2365061
Storage Resource Manager - update to 4.10.0.3
Dell EMC Storage Monitoring and Reporting (SMR) - update to 4.10.0.3
Dell Secure Connect Gateway - update to 5.24.00.14
Dell EMC VxRail Appliance - update to 8.0.213
EMC Cloud Tiering Appliance - update to 13.2.0.2.29

• https://bugzilla.suse.com/show_bug.cgi?id=1218571
• https://git.savannah.gnu.org/cgit/cpio.git/commit/?id=376d663340a9dc91c91a5849e5713f07571c1628
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1059163

• Path traversal in GNU cpio
• SUSE update for cpio
• SUSE update for cpio
• SUSE update for cpio
• SUSE update for cpio
• SUSE update for cpio
• Ubuntu update for cpio
• SUSE update for cpio
• Multiple vulnerabilities in Dell Storage Resource Manager (SRM) and Dell Storage Monitoring and Reporting (SMR)
• Multiple vulnerabilities in Dell Secure Connect Gateway
• Multiple vulnerabilities in Dell Cloud Tiering Appliance
• Multiple vulnerabilities in Dell EMC VxRail Appliance
• Multiple vulnerabilities in Dell PowerStore X
• Multiple vulnerabilities in Dell PowerStore T Family
• Dell RecoverPoint for Virtual Machines update for third-party components