CVE-2015-1197EPSS p86.8%

CVE-2015-1197CVE-2015-1197

gnu / cpio

Description

cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.

Scoring

CVSS 1.9 ()
VectorAV:L/AC:M/Au:N/C:N/I:P/A:N
EPSS2.91% probability of exploitation · percentile 86.8% · 2026-10-17T12:00:28Z
Last modified2026-10-14
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.