CVE-2015-1197
CVE-2015-1197 is a low-severity vulnerability in Gnu Cpio with a CVSS 2.0 base score of 1.9. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Low (CVSS 2.0 base score 1.9)
- EPSS exploit prediction: 3% (85th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Gnu Cpio
- Published:
- Last modified:
Description
cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.
Frequently asked questions
- What is CVE-2015-1197?
- cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.
- How severe is CVE-2015-1197?
- CVE-2015-1197 has a CVSS 2.0 base score of 1.9, rated low severity.
- Is CVE-2015-1197 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 3% (85th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2015-1197?
- CVE-2015-1197 affects Gnu Cpio. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2015-1197?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2015-1197 published?
- CVE-2015-1197 was published on 2015-02-19 and last updated on 2026-06-17.
References
- http://advisories.mageia.org/MGASA-2015-0080.html
- http://packetstormsecurity.com/files/169458/Zimbra-Collaboration-Suite-TAR-Path-Traversal.html
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:066
- http://www.openwall.com/lists/oss-security/2015/01/07/5
- http://www.openwall.com/lists/oss-security/2015/01/18/7
- http://www.openwall.com/lists/oss-security/2023/12/21/8
- http://www.openwall.com/lists/oss-security/2023/12/27/1
- http://www.securityfocus.com/bid/71914
- http://www.ubuntu.com/usn/USN-2906-1
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774669
- https://lists.gnu.org/archive/html/bug-cpio/2015-01/msg00000.html
Affected products (1)
- cpe:2.3:a:gnu:cpio:2.11:*:*:*:*:*:*:*
More vulnerabilities in Gnu Cpio
- CVE-2021-38185 — High (CVSS 7.8): GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c…
- CVE-2019-14866 — High (CVSS 7.3): In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives. When cpio is…
- CVE-2010-4226 — High (CVSS 7.2): cpio, as used in build 2007.05.10, 2010.07.28, and possibly other versions, allows remote attackers to overwrite…
- CVE-2010-0624 — Medium (CVSS 6.8): Heap-based buffer overflow in the rmt_read__ function in lib/rtapelib.c in the rmt client functionality in GNU tar…
- CVE-2016-2037 — Medium (CVSS 6.5): The cpio_safer_name_suffix function in util.c in cpio 2.11 allows remote attackers to cause a denial of service…
- CVE-2023-7216 — Medium (CVSS 5.3): A path traversal vulnerability was found in the CPIO utility. This issue could allow a remote unauthenticated attacker…