Lucene search
Gentoo FoundationMGASA-2014-0528HistoryDec 14, 2014 - 5:10 p.m.
Updated cpio package fixes security vulnerability
2014-12-1417:10:39
Gentoo Foundation
advisories.mageia.org
7
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.024 Low
EPSS
Percentile
89.7%
Heap-based buffer overflow in the process_copy_in function in GNU Cpio 2.11 allows remote attackers to cause a denial of service via a large block value in a cpio archive (CVE-2014-9112). Additionally, a null pointer dereference in the copyin_link function which could cause a denial of service has also been fixed.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 4 | noarch | cpio | < 2.11-6.2 | cpio-2.11-6.2.mga4 |
Related
nessus
nessus
Fedora 21 : cpio-2.11-33.fc21 (2014-16168)
2014-12-18 00:00:00
Debian DSA-3111-1 : cpio - security update
2014-12-30 00:00:00
Fedora 20 : cpio-2.11-28.fc20 (2014-16250)
2015-01-06 00:00:00
securityvulns
securityvulns
GNU cpio buffer overflow
2014-12-22 00:00:00
[ MDVSA-2014:250 ] cpio
2014-12-22 00:00:00
ubuntucve
ubuntucve
CVE-2014-9112
2014-12-02 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0528)
2022-01-28 00:00:00
RedHat Update for cpio RHSA-2015:2108-03
2015-11-20 00:00:00
Debian: Security Advisory (DLA-111-1)
2023-03-08 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: cpio-2.11-33.fc21
2014-12-18 06:06:28
[SECURITY] Fedora 20 Update: cpio-2.11-28.fc20
2015-01-06 06:09:24
redhat
redhat
(RHSA-2015:2108) Moderate: cpio security and bug fix update
2015-11-19 14:43:07
debian
debian
[SECURITY] [DSA 3111-1] cpio security update
2014-12-23 00:55:26
[SECURITY] [DLA 111-1] cpio security update
2014-12-15 14:18:40
[SECURITY] [DSA 3111-1] cpio security update
2014-12-23 00:55:26
cve
cve
CVE-2014-9112
2014-12-02 16:59:00
debiancve
debiancve
CVE-2014-9112
2014-12-02 16:59:00
prion
prion
Heap overflow
2014-12-02 16:59:00
oraclelinux
oraclelinux
cpio security and bug fix update
2015-11-23 00:00:00
ibm
ibm
Security Bulletin: Vulnerability in cpio affects PowerKVM (CVE-2014-9112)
2018-06-18 01:30:30
archlinux
archlinux
cpio: heap buffer overflow
2015-01-14 00:00:00
centos
centos
cpio security update
2015-11-30 19:26:10
gentoo
gentoo
GNU cpio: Multiple vulnerabilities
2015-02-15 00:00:00
ubuntu
ubuntu
GNU cpio vulnerabilities
2015-01-08 00:00:00
freebsd
freebsd
cpio -- multiple vulnerabilities
2015-03-27 00:00:00
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.024 Low
EPSS
Percentile
89.7%
Related for MGASA-2014-0528