CVE-2023-39810

Publication date 28 August 2023

Last updated 11 July 2025

Ubuntu priority

Cvss 3 Severity Score

An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal.

Show unmaintained releases

Package	Ubuntu Release	Status
busybox	25.04 plucky	Ignored end of life, was ignored [changes too intrusive]
	24.10 oracular	Ignored end of life, was ignored [changes too intrusive]
	24.04 LTS noble	Ignored changes too intrusive
	23.10 mantic	Ignored end of life, was deferred [2024-09-19]
	23.04 lunar	Ignored end of life, was deferred [2024-09-19]
	22.04 LTS jammy	Ignored changes too intrusive
	20.04 LTS focal	Ignored end of standard support, was ignored [changes too intrusive]
	18.04 LTS bionic	Ignored end of standard support
	16.04 LTS xenial	Ignored end of standard support
	14.04 LTS trusty	Ignored end of standard support

The security update introduces changes that may break existing compatibility with other utilities and applications.

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
busybox	Uptream: archiva

CVSS version: CVSS v3.0

Base score 7.8 · High

Base metrics

Scores

Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H