Debian DSA-3483-1 : cpio - security update

Gustavo Grieco discovered an out-of-bounds write vulnerability in cpio, a tool for creating and extracting cpio archive files, leading to a denial of service application crash. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extract...

CVE-2016-2037: Improper Restriction of Operations within the Bounds of a Memory Buffer

The cpiosafernamesuffix function in util.c in cpio 2.11 allows remote attackers to cause a denial of service out-of-bounds write via a crafted cpio file...

[SECURITY] [DSA 3483-1] cpio security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3483-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 19, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3483-1] cpio security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3483-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 19, 2016 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3483-1 (cpio - security update)

Gustavo Grieco discovered an out-of-bounds write vulnerability in cpio, a tool for creating and extracting cpio archive files, leading to a denial of service application crash. OpenVAS Vulnerability Test $Id: deb3483.nasl 6608 2017-07-07 12:05:05Z cfischer $ Auto-generated from advisory DSA 3483-...

DSA-3483-1 cpio - security update

Bulletin has no description...

Mageia: Security Advisory (MGASA-2016-0063)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-3483-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2016-0063 Updated cpio packages fix CVE-2016-2037

Updated cpio package fixes security vulnerability: An out-of-bounds write in cpio was found in the parsing of cpio files, in the processcopyin function in src/copyin.c CVE-2016-2037...

Updated cpio packages fix CVE-2016-2037

Updated cpio package fixes security vulnerability: An out-of-bounds write in cpio was found in the parsing of cpio files, in the processcopyin function in src/copyin.c CVE-2016-2037...

Debian DLA-415-1 : cpio security update

An out-of-bounds write was discovered in the parsing of cpio files. For Debian 6 'Squeeze', this issue has been fixed in cpio version 2.11-4+deb6u2. We recommend you to upgrade your cpio package. Learn more about the Debian Long Term Support LTS Project and how to apply these updates at:...

[SECURITY] [DLA 415-1] cpio security update

Package : cpio Version : 2.11-4+deb6u2 CVE ID : CVE-2016-2037 Debian Bug : 812401 An out-of-bounds write was discovered in the parsing of cpio files. For Debian 6 "Squeeze", this issue has been fixed in cpio version 2.11-4+deb6u2. We recommend you to upgrade your cpio package. Learn more about th...

DLA-415-1 cpio - security update

Bulletin has no description...

cpio denial of service vulnerability

cpio is a set of file backup tools developed by the GNU Project for use in UNIX operating systems. A security vulnerability exists in cpio that could be exploited by an attacker to crash a cpio instance and cause a denial of service...

UBUNTU-CVE-2016-2037

The cpiosafernamesuffix function in util.c in cpio 2.11 allows remote attackers to cause a denial of service out-of-bounds write via a crafted cpio file...

Scientific Linux Security Update : cpio on SL7.x x86_64 (20151119)

A heap-based buffer overflow flaw was found in cpio's listfile function. An attacker could provide a specially crafted archive that, when processed by cpio, would crash cpio, or potentially lead to arbitrary code execution. CVE-2014-9112 This update fixes the following bugs : - Previously, during...

PT-2016-1311

Name of the Vulnerable Software and Affected Versions cpio version 2.11 Description The issue is related to the cpio safer name suffix function in the cpio utility, which allows remote attackers to cause a denial of service due to an out-of-bounds write. This can be achieved by exploiting the...

Red Hat Automatic Bug Reporting Tool Arbitrary File Write Vulnerability

Red Hat Automatic Bug Reporting Tool ABRT is a set of automated bug detection and reporting tools from Red Hat Red Hat. A security vulnerability exists in the abrt-action-install-debuginfo-to-abrt-cache help program in Red Hat ABRT versions prior to 2.7.1. A local attacker can exploit the...

CentOS 7 : cpio (CESA-2015:2108)

Updated cpio packages that fix one security issue and two bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

cpio security update

CentOS Errata and Security Advisory CESA-2015:2108 Updated cpio packages that fix one security issue and two bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base...