CVE-2014-9112: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the processcopyin function in GNU Cpio 2.11 allows remote attackers to cause a denial of service via a large block value in a cpio archive...

CVE-2014-9112

Heap-based buffer overflow in the processcopyin function in GNU Cpio 2.11 allows remote attackers to cause a denial of service via a large block value in a cpio archive...

PT-2014-8832

Name of the Vulnerable Software and Affected Versions GNU Cpio version 2.11 Description A heap-based buffer overflow issue exists in the process copy in function, allowing remote attackers to cause a denial of service. This can be achieved by including a large block value in a cpio archive...

UBUNTU-CVE-2014-9112

Heap-based buffer overflow in the processcopyin function in GNU Cpio 2.11 allows remote attackers to cause a denial of service via a large block value in a cpio archive...

GNU TAR <= 1.15.91 and CPIO <= 2.5.90 safer_name_suffix Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/26445/info GNU's tar and cpio utilities are prone to a denial-of-service vulnerability because of insecure use of the 'alloca' function. Successfully exploiting this issue allows attackers to crash the affected utilities...

openSUSE Security Update : build (openSUSE-SU-2011:0174-1)

The build script uses cpio to extract untrusted rpm packages for bootstrapping virtual machines. cpio is not safe to use for this task, therefore the build script now uses bsdtar instead CVE-2010-4226. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

CVE-2010-4226

cpio, as used in build 2007.05.10, 2010.07.28, and possibly other versions, allows remote attackers to overwrite arbitrary files via a symlink within an RPM package archive...

Code injection

cpio, as used in build 2007.05.10, 2010.07.28, and possibly other versions, allows remote attackers to overwrite arbitrary files via a symlink within an RPM package archive...

CVE-2010-4226

cpio, as used in build 2007.05.10, 2010.07.28, and possibly other versions, allows remote attackers to overwrite arbitrary files via a symlink within an RPM package archive...

CVE-2010-4226

The cpio utility, specifically in build 2007.05.10 , 2010.07.28 , and potentially other versions, contains a vulnerability where a remote attacker can overwrite arbitrary files . This occurs due to improper link resolution (CWE-59 ) when processing a symlink within an RPM package archive . In ope...

CVE-2010-4226

cpio, as used in build 2007.05.10, 2010.07.28, and possibly other versions, allows remote attackers to overwrite arbitrary files via a symlink within an RPM package archive...

CVE-2010-4226

cpio, as used in build 2007.05.10, 2010.07.28, and possibly other versions, allows remote attackers to overwrite arbitrary files via a symlink within an RPM package archive...

CVE-2010-4226: Improper Link Resolution Before File Access

cpio, as used in build 2007.05.10, 2010.07.28, and possibly other versions, allows remote attackers to overwrite arbitrary files via a symlink within an RPM package archive...

GLSA-201311-21 : cpio: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201311-21 cpio: Arbitrary code execution Cpio contains a heap-based buffer overflow in the rmtread function in lib/rtapelib.c. Impact : A remote server could sending more data than was requested, related to archive filenames that...

Oracle Linux 5 : cpio (ELSA-2010-0144)

The remote Oracle Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2010-0144 advisory. - CVE-2010-0624 fix heap-based buffer overflow by expanding a specially-crafted archive Tenable has extracted the preceding description block directly...

Oracle Linux 3 : cpio (ELSA-2010-0145)

From Red Hat Security Advisory 2010:0145 : An updated cpio package that fixes two security issues is now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GNU cpio copies files into or out of a cpio or ta...

Oracle Linux 4 : cpio (ELSA-2010-0143)

From Red Hat Security Advisory 2010:0143 : An updated cpio package that fixes one security issue is now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GNU cpio copies files into or out of a cpio or tar...

CentOS 4 : cpio (CESA-2007:0245)

An updated cpio package that fixes a security issue and various bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. GNU cpio copies files into or out of a cpio or tar archive. A buffer overflow was found in cpio on 64-bit platform...

Fedora Update for libarchive FEDORA-2013-4537

Check for the Version of libarchive OpenVAS Vulnerability Test Fedora Update for libarchive FEDORA-2013-4537 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

[SECURITY] Fedora 17 Update: libarchive-3.0.4-3.fc17

Libarchive is a programming library that can create and read several differ ent streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...