gnu cpio

Name: gnu cpio
Brand: gnu

productUS

cpe:2.3:a:gnu:cpio:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical2high6medium2low

updated 2026-10-28

vulnerabilities (12)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-38185US	high7.8	4.17% (91st)	Exploit	no fix	2021-08-08	≤ 2.13
CVE-2014-9112US	medium5.0	7.09% (94th)	—	no fix	2014-12-02	= 2.11
CVE-2016-2037US	medium6.5	5.48% (93rd)	—	no fix	2016-02-22	= 2.11
CVE-2010-0624US	medium6.8	4.75% (92nd)	—	no fix	2010-03-15	12 versions
CVE-2010-4226US	medium5.0	2.93% (87th)	—	no fix	2014-02-06	—
CVE-2015-1197US	low1.9	2.91% (87th)	—	no fix	2015-02-19	= 2.11
CVE-2005-1229US	medium4.6	2.06% (81st)	—	no fix	2005-05-02	≤ 2.6
CVE-2023-7207US	—	0.91% (60th)	—	no fix	2024-02-29	= 2.13
CVE-2023-7216US	—	0.90% (59th)	—	no fix	2024-02-05	—
CVE-2019-14866US	high7.3	0.69% (52nd)	—	2.13	2020-01-07	< 2.13
CVE-2005-4268US	low3.7	0.54% (45th)	—	no fix	2005-12-15	= 2.6-8
CVE-2005-1111US	medium4.7	0.31% (24th)	—	no fix	2005-05-02	≤ 2.6

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer4 CVEs
CWE-59Improper Link Resolution Before File Access ('Link Following')4 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs
CWE-190Integer Overflow or Wraparound1 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-367Time-of-check Time-of-use (TOCTOU) Race Condition1 CVEs
CWE-787Out-of-bounds Write1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.