CVE-2015-1197
LowExploitation Probability (EPSS)
High risk87th percentile - higher than 87% of all known CVEs
Summary
cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.
Risk Assessment
A local attacker can overwrite critical system files, potentially leading to privilege escalation or system corruption.
Recommendation
Update cpio to a patched version or avoid extracting untrusted archives with the --no-absolute-filenames option. Also verify archive integrity before extraction.
Other vulnerabilities in cpio
See all- CVE-2023-7216Medium
A path traversal vulnerability was found in the CPIO utility. During extraction, the archiver could follow symlinks outside of the intended directory, allowing files to be written in arbitrary directories through symlinks.
- CVE-1999-1572Low
The cpio program on FreeBSD 2.1.0, Debian GNU/Linux 3.0, and possibly other operating systems uses a 0 umask when creating files with the -O (archive) or -F options, resulting in files being created with mode 0666.
Original NVD description (English source)
cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS