CVE-2023-39810

Publication date 28 August 2023

Last updated 11 July 2025

Ubuntu priority

Cvss 3 Severity Score

An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal.

Show unmaintained releases

Package	Ubuntu Release	Status
busybox	25.04 plucky	Ignored changes too intrusive
	24.10 oracular	Ignored end of life, was ignored [changes too intrusive]
	24.04 LTS noble	Ignored changes too intrusive
	23.10 mantic	Ignored end of life, was deferred [2024-09-19]
	23.04 lunar	Ignored end of life, was deferred [2024-09-19]
	22.04 LTS jammy	Ignored changes too intrusive
	20.04 LTS focal	Ignored changes too intrusive
	18.04 LTS bionic	Ignored changes too intrusive
	16.04 LTS xenial	Ignored changes too intrusive
	14.04 LTS trusty	Ignored changes too intrusive

The security update introduces changes that may break existing compatibility with other utilities and applications.

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
busybox	Uptream: archiva