StackRadarChart IndexLive demo

CVE-2023-7207

Medium

Advisory

Published 29 Feb 2024In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.9; base score, highest
EPSS: 0.009; 58th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 7; of 17,781 indexed, latest versions
Container images: 8; deployed by those charts
Fix available: 2 of 2; affected packages

cpio-2.15-1.1 on GA media

Carried by container images the latest versions of 7 of 17,781 indexed charts deploy, on 8 images.

Affected package	Affected versions	Fixed in	Images
cpiodeb	2.13+dfsg-2ubuntu0.3, 2.13+dfsg-7.1	2.13+dfsg-2ubuntu0.4	5
cpiorpm	2.12-3.3.1, 2.12-lp151.2.68	2.12-150000.3.12.1, 2.15-1.1	3

OSV records: DEBIAN-CVE-2023-7207 UBUNTU-CVE-2023-7207 openSUSE-SU-2024:13653-1 SUSE-SU-2024:0824-1
Also known as: USN-6755-1

Charts affected

7 by stars

Chart

Latest

Affected images

Radar Score

collabora-codechrisingenhaag

1 of 1 See more

collabora-code chrisingenhaag 2.6.0

1 of the 1 container images this version deploys carry CVE-2023-7207.

Container image	Digest	Package	Fixed in
collabora/code :23.05.10.1.1	05299b452f7f	cpio@2.13+dfsg-7.1	no fix listed

Open the chart page →

4,180

arma-reforgerarma-reforger

1 of 8 See more

arma-reforger arma-reforger 0.5.3

1 of the 8 container images this version deploys carry CVE-2023-7207.

Container image	Digest	Package	Fixed in
ghcr.io/brittonhayes/arma-reforger :latest	6fde1edc0983	cpio@2.13+dfsg-2ubuntu0.3	2.13+dfsg-2ubuntu0.4

Open the chart page →

23,353

supportpalevilgn0me

1 of 1 See more

supportpal evilgn0me 0.1.6

1 of the 1 container images this version deploys carry CVE-2023-7207.

Container image	Digest	Package	Fixed in
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	cpio@2.13+dfsg-2ubuntu0.3	2.13+dfsg-2ubuntu0.4

Open the chart page →

20,933

ibexaibexa

1 of 10 See more

ibexa ibexa 3.11.1

1 of the 10 container images this version deploys carry CVE-2023-7207.

Container image	Digest	Package	Fixed in
boky/postfix :4.4.0	f3f247fd4252	cpio@2.13+dfsg-7.1	no fix listed

Open the chart page →

5,959

cf-operatorquarks

2.3.0+0.g27a91cdf

2 of 2 See more

cf-operator quarks 2.3.0+0.g27a91cdf

2 of the 2 container images this version deploys carry CVE-2023-7207.

Container image	Digest	Package	Fixed in
cfcontainerization/cf-operator :v2.3.0-0.g27a91cdf	82fa261c18a8	cpio@2.12-lp151.2.68	2.15-1.1
cfcontainerization/quarks-job :v0.0.0-0.g70ae34b	58fb1c173a46	cpio@2.12-lp151.2.68	2.15-1.1

Open the chart page →

11,942

quarksquarks

7.0.1+0.g5396b11

1 of 5 See more

quarks quarks 7.0.1+0.g5396b11

1 of the 5 container images this version deploys carry CVE-2023-7207.

Container image	Digest	Package	Fixed in
ghcr.io/cfcontainerizationbot/kubecf-kubectl :v1.19.2	61daa1bba5cb	cpio@2.12-3.3.1	2.12-150000.3.12.1

Open the chart page →

18,197

codeth-charts

1 of 1 See more

code th-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-7207.

Container image	Digest	Package	Fixed in
collabora/code :24.04.13.2.1	01dc4ab83977	cpio@2.13+dfsg-7.1	no fix listed

Open the chart page →

3,261

Container images carrying it

8 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
boky/postfix :4.4.0	f3f247fd4252	cpio@2.13+dfsg-7.1	no fix listed	1
cfcontainerization/cf-operator :v2.3.0-0.g27a91cdf	82fa261c18a8	cpio@2.12-lp151.2.68	2.15-1.1	1
cfcontainerization/quarks-job :v0.0.0-0.g70ae34b	58fb1c173a46	cpio@2.12-lp151.2.68	2.15-1.1	1
collabora/code :24.04.13.2.1	01dc4ab83977	cpio@2.13+dfsg-7.1	no fix listed	1
collabora/code :23.05.10.1.1	05299b452f7f	cpio@2.13+dfsg-7.1	no fix listed	1
ghcr.io/brittonhayes/arma-reforger :latest	6fde1edc0983	cpio@2.13+dfsg-2ubuntu0.3	2.13+dfsg-2ubuntu0.4	1
ghcr.io/cfcontainerizationbot/kubecf-kubectl :v1.19.2	61daa1bba5cb	cpio@2.12-3.3.1	2.12-150000.3.12.1	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	cpio@2.13+dfsg-2ubuntu0.3	2.13+dfsg-2ubuntu0.4	1