libarchive CPIO Parser Memory Read Vulnerability

libarchive is a multi-format archive and compression library. A memory read vulnerability exists in libarchive's CPIO parser. An attacker can exploit this vulnerability to cause an invalid memory read...

PT-2016-6153

Name of the Vulnerable Software and Affected Versions libarchive versions prior to 3.2.1 Description The issue allows remote attackers to cause a denial of service, resulting in an application crash. This can be achieved by using a CPIO archive with a large symlink. Recommendations For versions...

UBUNTU-CVE-2016-4809

The archivereadformatcpioreadheader function in archivereadsupportformatcpio.c in libarchive before 3.2.1 allows remote attackers to cause a denial of service application crash via a CPIO archive with a large symlink...

CVE-2016-4809

A vulnerability was found in libarchive. A specially crafted cpio archive containing a symbolic link to a ridiculously large target path can cause memory allocation to fail, resulting in any attempt to view or extract the archive crashing...

[SECURITY] Fedora 22 Update: libarchive-3.1.2-14.fc22

Libarchive is a programming library that can create and read several differ ent streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...

FreeBSD-SA-16:22.libarchive

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-16:22.libarchive Security Advisory The FreeBSD Project Topic: Directory traversal in cpio1 Category: contrib Module: libarchive Announced: 2016-05-31 Credits:...

PT-2016-4059

Name of the Vulnerable Software and Affected Versions libarchive versions prior to 3.2.0 Description The issue allows remote attackers to cause a denial of service, resulting in an invalid read and crash, via crafted cpio files. Recommendations For versions prior to 3.2.0, update to version 3.2.0...

[SECURITY] Fedora 23 Update: libarchive-3.1.2-15.fc23

Libarchive is a programming library that can create and read several differ ent streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...

[SECURITY] Fedora 24 Update: libarchive-3.1.2-17.fc24

Libarchive is a programming library that can create and read several differ ent streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...

The vulnerability of the Spio archiving tool, which allows a perpetrator to trigger a service failure

The vulnerability of the cpiosafernamesuffix function in the Spio archiving utility is caused by buffer overflow. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure memory spill through the use of a specially created CPIO file...

Ubuntu: Security Advisory (USN-2906-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS : GNU cpio vulnerabilities (USN-2906-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2906-1 advisory. Alexander Cherepanov discovered that GNU cpio incorrectly handled symbolic links when used with the --no- absolute-filenames option. If a user or automat...

USN-2906-1: GNU cpio vulnerabilities

Alexander Cherepanov discovered that GNU cpio incorrectly handled symbolic links when used with the --no-absolute-filenames option. If a user or automated system were tricked into extracting a specially-crafted cpio archive, a remote attacker could possibly use this issue to write arbitrary files...

Out-of-bounds

The cpiosafernamesuffix function in util.c in cpio 2.11 allows remote attackers to cause a denial of service out-of-bounds write via a crafted cpio file...

CVE-2016-2037

The cpiosafernamesuffix function in util.c in cpio 2.11 allows remote attackers to cause a denial of service out-of-bounds write via a crafted cpio file...

DEBIAN-CVE-2016-2037

The cpiosafernamesuffix function in util.c in cpio 2.11 allows remote attackers to cause a denial of service out-of-bounds write via a crafted cpio file...

CVE-2016-2037

The cpiosafernamesuffix function in util.c in cpio 2.11 allows remote attackers to cause a denial of service out-of-bounds write via a crafted cpio file...

CVE-2016-2037

The cpiosafernamesuffix function in util.c in cpio 2.11 allows remote attackers to cause a denial of service out-of-bounds write via a crafted cpio file...

CVE-2016-2037

The cpiosafernamesuffix function in util.c in cpio 2.11 allows remote attackers to cause a denial of service out-of-bounds write via a crafted cpio file...

CVE-2016-2037

CVE-2016-2037 affects the cpio utility (cpio 2.11) via the cpio_safer_name_suffix function in util.c, enabling an attacker to cause an out-of-bounds write through a crafted cpio file, resulting in a denial of service. Related entries note additional issues (e.g., CVE-2021-38185) in GNU cpio, incl...