971 matches found
OSV-2020-2324 Heap-buffer-overflow in archive_read_format_cpio_read_header
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21048 Crash type: Heap-buffer-overflow READ Crash state: archivereadformatcpioreadheader archivereadnextheader2 archivereadnextheader...
Huawei EulerOS: Security Advisory for cpio (EulerOS-SA-2021-2749)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for cpio (EulerOS-SA-2021-2781)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP5 : cpio (EulerOS-SA-2021-2494)
According to the versions of the cpio package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The cpiosafernamesuffix function in util.c in cpio 2.11 allows remote attackers to cause a denial of service out-of-bounds write via a crafted cpio...
EulerOS Virtualization 2.9.0 : cpio (EulerOS-SA-2021-2781)
According to the versions of the cpio package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c dsfgetstr intege...
EulerOS Virtualization 2.9.1 : cpio (EulerOS-SA-2021-2749)
According to the versions of the cpio package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c dsfgetstr intege...
Huawei EulerOS: Security Advisory for cpio (EulerOS-SA-2021-2681)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for cpio (EulerOS-SA-2021-2706)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP9 : cpio (EulerOS-SA-2021-2706)
According to the versions of the cpio package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c dsfgetstr integer overflow that...
EulerOS 2.0 SP5 : cpio (EulerOS-SA-2021-2654)
According to the versions of the cpio package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c dsfgetstr integer overflow that...
EulerOS 2.0 SP9 : cpio (EulerOS-SA-2021-2681)
According to the versions of the cpio package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c dsfgetstr integer overflow that...
Huawei EulerOS: Security Advisory for cpio (EulerOS-SA-2021-2626)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability of the cpio command in the Klibc environment library on 32-bit systems, related to integer overflow, allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the cpio command in the Klibc environment library on 32-bit systems is related to integer overflow. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
EulerOS 2.0 SP8 : cpio (EulerOS-SA-2021-2626)
According to the versions of the cpio package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c dsfgetstr integer overflow that...
The vulnerability of the cpio command in the Klibc environment library on 64-bit systems, related to integer overflow, allows a attacker to cause a service failure.
The vulnerability of the cpio command in the Klibc environment library on 64-bit systems is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
NewStart CGSL CORE 5.05 / MAIN 5.05 : cpio Vulnerability (NS-SA-2021-0169)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has cpio packages installed that are affected by a vulnerability: - In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives. When cpio is used to create TAR archives from paths an...
Huawei EulerOS: Security Advisory for cpio (EulerOS-SA-2021-2576)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP3 : cpio (EulerOS-SA-2021-2576)
According to the versions of the cpio package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The cpiosafernamesuffix function in util.c in cpio 2.11 allows remote attackers to cause a denial of service out-of-bounds write via a crafted cpio...
The vulnerability in the dstring.c component of the cpio package in the Debian GNU/Linux operating system allows a hacker to execute arbitrary code through the created file.
The vulnerability of the dstring.c component in the cpio package of the Debian GNU/Linux operating system is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker to trigger a stack overflow through the created file...
USN-5064-1: GNU cpio vulnerability | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description Maverick Chung and Qiaoyi Fang discovered that cpio incorrectly handled certain pattern files. A remote attacker could use this issue to cause cpio to crash, resulting in a denial of service, or possibly...