Lucene search
GoogleOSV:ALSA-2022:1991HistoryMay 10, 2022 - 6:43 a.m.
Moderate: cpio security update
2022-05-1006:43:49
Google
osv.dev
5
The cpio packages provide the GNU cpio utility for creating and extracting archives, or copying files from one place to another.
Security Fix(es):
- cpio: integer overflow in ds_fgetstr() in dstring.c can lead to an out-of-bounds write via a crafted pattern file (CVE-2021-38185)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Related
nessus
nessus
Photon OS 1.0: Cpio PHSA-2021-1.0-0432
2021-09-21 00:00:00
Amazon Linux 2023 : cpio (ALAS2023-2023-021)
2023-03-21 00:00:00
openSUSE 15 Security Update : cpio (openSUSE-SU-2021:2689-1)
2021-08-17 00:00:00
githubexploit
githubexploit
Exploit for Integer Overflow or Wraparound in Gnu Cpio
2021-07-19 20:10:13
alpinelinux
alpinelinux
CVE-2021-38185
2021-08-08 00:15:07
cbl_mariner
cbl_mariner
CVE-2021-38185 affecting package cpio for versions less than 2.13-4
2022-06-03 17:54:03
CVE-2021-38185 affecting package cpio 2.13-3
2021-09-13 03:23:36
openvas
openvas
Mageia: Security Advisory (MGASA-2021-0423)
2022-01-28 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:2808-1)
2021-08-24 00:00:00
Huawei EulerOS: Security Advisory for cpio (EulerOS-SA-2023-1248)
2023-01-31 00:00:00
debiancve
debiancve
CVE-2021-38185
2021-08-08 00:15:07
redhatcve
redhatcve
CVE-2021-38185
2021-08-09 20:19:57
cve
cve
CVE-2021-38185
2021-08-08 00:15:07
mageia
mageia
Updated cpio packages fix security vulnerability
2021-09-23 07:49:29
cloudfoundry
cloudfoundry
USN-5064-1: GNU cpio vulnerability | Cloud Foundry
2021-10-04 00:00:00
rocky
rocky
cpio security update
2022-05-10 06:43:49
ubuntu
ubuntu
GNU cpio vulnerability
2023-08-03 00:00:00
GNU cpio vulnerability
2021-09-08 00:00:00
GNU cpio vulnerability
2022-01-27 00:00:00
nvd
nvd
CVE-2021-38185
2021-08-08 00:15:07
osv
osv
cpio vulnerability
2023-08-03 13:30:12
Moderate: cpio security update
2022-05-10 06:43:49
cpio vulnerability
2021-09-08 11:14:41
amazon
amazon
Medium: cpio
2023-03-02 22:35:00
ubuntucve
ubuntucve
CVE-2021-38185
2021-08-08 00:00:00
oraclelinux
oraclelinux
cpio security update
2022-05-17 00:00:00
photon
photon
almalinux
almalinux
Moderate: cpio security update
2022-05-10 06:43:49
prion
prion
Integer overflow
2021-08-08 00:15:00
veracode
veracode
Remote Code Execution (RCE)
2021-08-12 14:00:18
cvelist
cvelist
CVE-2021-38185
2021-08-07 00:00:00
redhat
redhat
suse
suse
Security update for cpio (important)
2021-08-16 00:00:00
ibm
ibm
Security Bulletin: IBM Sterling Connect:Direct for UNIX Certified Container is affected by arbitrary code executiondue to GNU cpio (CVE-2021-38185)
2022-08-01 10:01:49
debian
debian
[SECURITY] [DLA 3445-1] cpio security update
2023-06-04 20:12:22
avleonov
avleonov