{"id":"CVE-2015-1197","aliases":["BELL-CVE-2015-1197","CLSA-2026-1786620962","CLSA-2026-1786621771","DEBIAN-CVE-2015-1197","EUVD-2015-1338","GHSA-447h-6vgc-mg6p","MGASA-2019-0326","OESA-2023-1300","OESA-2023-1336","OESA-2023-1337","OESA-2023-1338","UBUNTU-CVE-2015-1197","USN-2906-1","openSUSE-SU-2024:10697-1"],"status":"published","title":"cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to...","description":"cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.","severity":{"version":"2.0","score":1.9,"vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02906,"percentile":0.8707,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"published":"2015-02-19T00:00:00Z","modified":"2026-10-26T09:43:51Z","exploits":[{"source":"metasploit","id":"exploit/linux/http/zimbra_cpio_cve_2022_41352","title":"TAR Path Traversal in Zimbra (CVE-2022-41352)","type":"exploit","platform":"Linux","date":"2022-06-28","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/linux/http/zimbra_cpio_cve_2022_41352"}],"fixes":[{"ecosystem":"Debian:12","package":"cpio","fixed_in":["2.11+dfsg-4.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"cpio","fixed_in":["2.11+dfsg-4.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"cpio","fixed_in":["2.11+dfsg-4.1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"cpio","fixed_in":["2.13-5.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"cpio","fixed_in":["2.13-5.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"cpio","fixed_in":["2.13-8.oe2203"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"cpio","fixed_in":["2.13-8.oe2203sp1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"cpio","fixed_in":["2.11+dfsg-1ubuntu1.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"cpio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13-16.el9_2.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"cpio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13-16.el9_6.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"cpio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11+dfsg-4.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"cpio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11+dfsg-4.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"cpio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11+dfsg-4.1"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"cpio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13-1.mga7"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"cpio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13-5.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"cpio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13-5.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"cpio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13-8.oe2203"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"cpio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13-8.oe2203sp1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"cpio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11+dfsg-1ubuntu1.2"}]}],"versions":["2.11+dfsg-1ubuntu1","2.11+dfsg-1ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"cpio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11+dfsg-1ubuntu1.2"}]}],"versions":["2.11+dfsg-1ubuntu1","2.11+dfsg-1ubuntu1.1"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"cpio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13-3.3"}]}],"bundled":3}],"products":[{"vendor":"gnu","product":"cpio"}],"references":[{"url":"http://www.securityfocus.com/bid/71914","tags":["vdb-entry","x_transferred","web"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:066","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2015/01/18/7","tags":["mailing-list","x_transferred","web"]},{"url":"http://www.ubuntu.com/usn/USN-2906-1","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"http://advisories.mageia.org/MGASA-2015-0080.html","tags":["x_transferred","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2015/01/07/5","tags":["mailing-list","x_transferred","Exploit","evidence"]},{"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774669","tags":["x_transferred","Exploit","evidence"]},{"url":"https://lists.gnu.org/archive/html/bug-cpio/2015-01/msg00000.html","tags":["mailing-list","x_transferred","Exploit","evidence"]},{"url":"http://packetstormsecurity.com/files/169458/Zimbra-Collaboration-Suite-TAR-Path-Traversal.html","tags":["x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2023/12/21/8","tags":["mailing-list","x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2023/12/27/1","tags":["mailing-list","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-1197","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-447h-6vgc-mg6p"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2015-1197","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1786620962.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-7207","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1786621771.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-1197","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0326.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25680","tags":["report"]},{"url":"https://usn.ubuntu.com/4176-1/","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1300","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1336","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1337","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1338","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-1197","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2906-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-1197","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-2037","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14866","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38185","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2015-1197","description":"cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.","status":"published","published":"2015-02-19T00:00:00Z","modified":"2026-10-14T21:10:58.785Z","updated_at":"2026-11-02T14:35:43.698357Z"}],"euvd":[{"id":"EUVD-2015-1338","description":"cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.","status":"published","published":"2015-02-19T00:00:00Z","modified":"2026-10-14T21:10:58Z","updated_at":"2026-11-02T17:27:11.707191Z"}],"ghsa":[{"id":"GHSA-447h-6vgc-mg6p","title":"cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to...","description":"cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.","status":"published","published":"2022-05-17T03:30:23Z","modified":"2023-12-27T15:30:22Z","updated_at":"2026-11-02T14:55:16.928981Z"}],"nvd":[{"id":"CVE-2015-1197","description":"cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.","status":"published","published":"2015-02-19T15:59:12.377Z","modified":"2026-10-14T22:17:03.54Z","cvss":[{"version":"2.0","score":1.9,"vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","level":"low","assessor":"primary"}],"updated_at":"2026-11-02T14:03:01.643178Z"}],"osv":[{"id":"BELL-CVE-2015-1197","title":"CVE-2015-1197 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:16:27.670802Z","modified":"2026-01-28T07:21:37.769981Z","cvss":[{"version":"2.0","score":1.9,"vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","level":"low"}],"updated_at":"2026-11-02T15:28:13.47097Z"},{"id":"CLSA-2026-1786620962","title":"cpio: Fix of CVE-2023-7207","description":"- CVE-2023-7207: path traversal via absolute symlink targets under\n  --no-absolute-filenames; drop cpio-2.13-revert-CVE-2015-1197-fix.patch and\n  apply the upstream symlink-placeholder fix instead","status":"published","published":"2026-08-13T11:36:12Z","modified":"2026-10-26T09:43:51.906663556Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"CLSA-2026-1786621771","title":"cpio: Fix of CVE-2023-7207","description":"- CVE-2023-7207: path traversal via absolute symlink targets under\n  --no-absolute-filenames; drop cpio-2.13-revert-CVE-2015-1197-fix.patch and\n  apply the upstream symlink-placeholder fix instead","status":"published","published":"2026-08-13T11:49:42Z","modified":"2026-10-26T09:43:43.837061087Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"CVE-2015-1197","description":"cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.","status":"published","published":"2015-02-19T15:59:12Z","modified":"2026-04-16T04:40:04.803289542Z","updated_at":"2026-11-02T15:44:00.097545Z"},{"id":"DEBIAN-CVE-2015-1197","description":"cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.","status":"published","published":"2015-02-19T15:59:12.377Z","modified":"2026-10-15T01:47:39.338524045Z","updated_at":"2026-11-02T15:45:26.752992Z"},{"id":"MGASA-2019-0326","title":"Updated cpio packages fix security vulnerabilities","description":"in cpio 2.11, when using the --no-absolute-filenames option, allows local\nusers to write to arbitrary files via a symlink attack on a file in an\narchive (CVE-2015-1197).\n\nThomas Habets discovered that GNU cpio incorrectly handled certain\ninputs. An attacker could possibly use this issue to privilege escalation\n(CVE-2019-14866).\n\ncpio has been updated to 2.13 that fixes theese issues.\n","status":"published","published":"2019-11-14T16:58:51Z","modified":"2026-04-16T04:42:31.80135142Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"OESA-2023-1300","title":"cpio security update","description":"\r\n\r\nSecurity Fix(es):\r\n\r\ncpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.(CVE-2015-1197)","status":"published","published":"2023-06-03T11:05:46Z","modified":"2026-08-18T01:17:41.562379915Z","updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"OESA-2023-1336","title":"cpio security update","description":"GNU cpio copies files into or out of a cpio or tar archive.The archive can be another file on the disk, a magnetic tape, or a pipe.\r\n\r\nSecurity Fix(es):\r\n\r\ncpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.(CVE-2015-1197)","status":"published","published":"2023-06-10T11:05:48Z","modified":"2026-08-18T01:17:44.210411602Z","updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"OESA-2023-1337","title":"cpio security update","description":"GNU cpio copies files into or out of a cpio or tar archive.The archive can be another file on the disk, a magnetic tape, or a pipe.\r\n\r\nSecurity Fix(es):\r\n\r\ncpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.(CVE-2015-1197)","status":"published","published":"2023-06-10T11:05:48Z","modified":"2026-08-18T01:17:43.969566041Z","updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"OESA-2023-1338","title":"cpio security update","description":"GNU cpio copies files into or out of a cpio or tar archive. The archive can be another file on the disk, a magnetic tape, or a pipe.\r\n\r\nSecurity Fix(es):\r\n\r\ncpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.(CVE-2015-1197)","status":"published","published":"2023-06-10T11:05:48Z","modified":"2026-08-18T01:16:58.266694288Z","updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"openSUSE-SU-2024:10697-1","title":"cpio-2.13-3.3 on GA media","description":"These are all security issues fixed in the cpio-2.13-3.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:34:12.536678Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"UBUNTU-CVE-2015-1197","description":"cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.","status":"published","published":"2015-02-19T00:00:00Z","modified":"2026-02-04T02:53:24.161478Z","updated_at":"2026-11-02T15:54:09.721803Z"},{"id":"USN-2906-1","title":"cpio vulnerabilities","description":"Alexander Cherepanov discovered that GNU cpio incorrectly handled symbolic\nlinks when used with the --no-absolute-filenames option. If a user or\nautomated system were tricked into extracting a specially-crafted cpio\narchive, a remote attacker could possibly use this issue to write arbitrary\nfiles. This issue only affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS.\n(CVE-2015-1197)\n\nGustavo Grieco discovered that GNU cpio incorrectly handled memory when\nextracting archive files. If a user or automated system were tricked into\nextracting a specially-crafted cpio archive, a remote attacker could use\nthis issue to cause GNU cpio to crash, resulting in a denial of service, or\npossibly execute arbitrary code. (CVE-2016-2037)\n","status":"published","published":"2016-02-22T18:05:31Z","modified":"2026-02-10T04:40:57Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}