[{"CVE":"CVE-2019-14866","severity":"moderate","public_date":"2019-08-30T00:00:00Z","advisories":["RHSA-2020:3908"],"bugzilla":"1765511","bugzilla_description":"CVE-2019-14866 cpio: improper input validation when writing tar header fields leads to unexpect tar generation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["cpio-0:2.11-28.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14866.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2017-7516","severity":"moderate","public_date":"2017-06-05T00:00:00Z","advisories":[],"bugzilla":"1539685","bugzilla_description":"CVE-2017-7516 cpio: --no-absolute-filenames bypass via symlinks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7516.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"4.4"},{"CVE":"CVE-2016-2037","severity":"low","public_date":"2016-01-19T00:00:00Z","advisories":[],"bugzilla":"1300207","bugzilla_description":"CVE-2016-2037 cpio: out of bounds write","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-787","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2037.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"4.3"},{"CVE":"CVE-2015-1197","severity":"low","public_date":"2015-01-05T00:00:00Z","advisories":[],"bugzilla":"1179773","bugzilla_description":"CVE-2015-1197 cpio: directory traversal through symlinks","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-59","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1197.json"},{"CVE":"CVE-2014-9112","severity":"moderate","public_date":"2014-11-23T00:00:00Z","advisories":["RHSA-2015:2108"],"bugzilla":"1167571","bugzilla_description":"CVE-2014-9112 cpio: heap-based buffer overflow flaw in list_file()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["cpio-0:2.11-24.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9112.json"},{"CVE":"CVE-2010-0624","severity":"moderate","public_date":"2010-03-10T00:00:00Z","advisories":["RHSA-2010:0145","RHSA-2010:0144","RHSA-2010:0143","RHSA-2010:0142","RHSA-2010:0141"],"bugzilla":"564368","bugzilla_description":"CVE-2010-0624 tar, cpio: Heap-based buffer overflow by expanding a specially-crafted archive","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-122","affected_packages":["cpio-0:2.5-6.RHEL3","tar-0:1.14-13.el4_8.1","tar-0:1.13.25-16.RHEL3","cpio-0:2.6-23.el5_4.1","tar-2:1.15.1-23.0.1.el5_4.2","cpio-0:2.5-16.el4_8.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0624.json"},{"CVE":"CVE-2007-4476","severity":"low","public_date":"2007-08-17T00:00:00Z","advisories":["RHSA-2010:0144","RHSA-2010:0141"],"bugzilla":"280961","bugzilla_description":"CVE-2007-4476 tar/cpio stack crashing in safer_name_suffix","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["tar-0:1.14-13.el4_8.1","cpio-0:2.6-23.el5_4.1","tar-2:1.15.1-23.0.1.el5_4.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4476.json"},{"CVE":"CVE-2005-4268","severity":"low","public_date":"2005-11-07T00:00:00Z","advisories":["RHSA-2007:0245","RHSA-2010:0145"],"bugzilla":"229191","bugzilla_description":"CVE-2005-4268 cpio large filesize buffer overflow","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cpio-0:2.5-6.RHEL3","cpio-0:2.5-13.RHEL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-4268.json"},{"CVE":"CVE-2005-1111","severity":"moderate","public_date":"2005-04-13T00:00:00Z","advisories":["RHSA-2005:378","RHSA-2005:806"],"bugzilla":"1617604","bugzilla_description":"CVE-2005-1111 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cpio-0:2.5-4.RHEL3","cpio-0:2.5-8.RHEL4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-1111.json"},{"CVE":"CVE-1999-1572","severity":"low","public_date":"1996-07-16T00:00:00Z","advisories":["RHSA-2005:806","RHSA-2005:073","RHSA-2005:080"],"bugzilla":"1616458","bugzilla_description":"CVE-1999-1572 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["cpio-0:2.5-7.EL4.1","cpio-0:2.5-3e.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-1999-1572.json"}]