CVE-2023-7216

ADVISORY - nist

Summary

A path traversal vulnerability was found in the CPIO utility. This issue could allow a remote unauthenticated attacker to trick a user into opening a specially crafted archive. During the extraction process, the archiver could follow symlinks outside of the intended directory, which allows files to be written in arbitrary directories through symlinks.

EPSS Score⁠: 0.00899 (0.563)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-22⁠

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CWE-59⁠

Improper Link Resolution Before File Access ('Link Following')

ADVISORY - redhat

(CWE-59|CWE-22)⁠

Impacted images

Advisories

NIST

CREATED

3 years ago

UPDATED

2 months ago

ADVISORY IDCVE-2023-7216⁠

EXPLOITABILITY SCORE

1.8

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-22⁠CWE-59⁠

CVSS SCORE

5.3medium

Debian

CREATED

3 years ago

UPDATED

1 year ago

ADVISORY IDCVE-2023-7216⁠

EXPLOITABILITY SCORE

-

EXPLOITS FOUND

-

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Ubuntu

CREATED

3 years ago

UPDATED

7 months ago

ADVISORY IDCVE-2023-7216⁠

EXPLOITABILITY SCORE

1.8

EXPLOITS FOUND

-

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

5.3medium

Red Hat

CREATED

3 years ago

UPDATED

7 months ago

ADVISORY IDCVE-2023-7216⁠

EXPLOITABILITY SCORE

1.8

EXPLOITS FOUND

-

COMMON WEAKNESS ENUMERATION (CWE)

(CWE-59|CWE-22)⁠

CVSS SCORE

5.3low

intheWild

CREATED

2 years ago

UPDATED

1 year ago

ADVISORY IDCVE-2023-7216⁠

EXPLOITABILITY SCORE

-

EXPLOITS FOUND

-

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY