Ingo Brückl

**Name of the Vulnerable Software and Affected Versions** cpio (affected versions not specified) **Description** The issue is related to a path traversal vulnerability in Debian's cpio, which was introduced by reverting patches for a previous issue. This vulnerability is associated with a regression when using the `--no-absolute-filenames` parameter. The exploitation of this issue could allow a remote attacker to cause a denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.