GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file because of a dstring.c ds_fgetstr integer overflow that triggers an out-of-bounds heap write. NOTE: it is unclear whether there are common cases where the pattern file associated with the -E option is untrusted data.

🗓️ 17 Aug 2021 07:00:00Reported by MicrosoftType

GNU cpio up to 2.13 allows code execution via crafted pattern file due to ds_fgetstr overflow.

Reporter	Title	Published	Views	Family All 137
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct for UNIX Certified Container is affected by multiple vulnerabilities in Red Hat Universal Base Image version 8.4-206.1626828523 and Binutils version 2.30-93	14 Mar 202220:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM Application Framework Base Image is vulnerable to using components with Known Vulnerabilities	25 Oct 202215:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct for UNIX Certified Container is affected by arbitrary code executiondue to GNU cpio (CVE-2021-38185)	1 Aug 202210:01	–	ibm
Tenable Nessus	Amazon Linux 2022 : cpio (ALAS2022-2023-263)	25 Jan 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : cpio (ALAS2023-2023-021)	21 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : cpio (ALAS-2023-1972)	7 Mar 202300:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0211: cpio (ALINUX3-SA-2022:0211)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : cpio (ALSA-2022:1991)	12 May 202200:00	–	nessus
Tenable Nessus	CentOS 8 : cpio (CESA-2022:1991)	10 May 202200:00	–	nessus
Tenable Nessus	CentOS 9 : cpio-2.13-16.el9	29 Feb 202400:00	–	nessus