USN-2906-1: GNU cpio vulnerabilities

Alexander Cherepanov discovered that GNU cpio incorrectly handled symbolic links when used with the --no-absolute-filenames option. If a user or automated system were tricked into extracting a specially-crafted cpio archive, a remote attacker could possibly use this issue to write arbitrary files...

Out-of-bounds

The cpiosafernamesuffix function in util.c in cpio 2.11 allows remote attackers to cause a denial of service out-of-bounds write via a crafted cpio file...

DEBIAN-CVE-2016-2037

The cpiosafernamesuffix function in util.c in cpio 2.11 allows remote attackers to cause a denial of service out-of-bounds write via a crafted cpio file...

CVE-2016-2037

The cpiosafernamesuffix function in util.c in cpio 2.11 allows remote attackers to cause a denial of service out-of-bounds write via a crafted cpio file...

CVE-2016-2037

The cpiosafernamesuffix function in util.c in cpio 2.11 allows remote attackers to cause a denial of service out-of-bounds write via a crafted cpio file...

CVE-2016-2037

CVE-2016-2037 affects the cpio utility (cpio 2.11) via the cpio_safer_name_suffix function in util.c, enabling an attacker to cause an out-of-bounds write through a crafted cpio file, resulting in a denial of service. Related entries note additional issues (e.g., CVE-2021-38185) in GNU cpio, incl...

CVE-2016-2037

The cpiosafernamesuffix function in util.c in cpio 2.11 allows remote attackers to cause a denial of service out-of-bounds write via a crafted cpio file...

Debian DSA-3483-1 : cpio - security update

Gustavo Grieco discovered an out-of-bounds write vulnerability in cpio, a tool for creating and extracting cpio archive files, leading to a denial of service application crash. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extract...

[SECURITY] [DSA 3483-1] cpio security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3483-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 19, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3483-1] cpio security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3483-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 19, 2016 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3483-1 (cpio - security update)

Gustavo Grieco discovered an out-of-bounds write vulnerability in cpio, a tool for creating and extracting cpio archive files, leading to a denial of service application crash. OpenVAS Vulnerability Test $Id: deb3483.nasl 6608 2017-07-07 12:05:05Z cfischer $ Auto-generated from advisory DSA 3483-...

DSA-3483-1 cpio - security update

Bulletin has no description...

Mageia: Security Advisory (MGASA-2016-0063)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-3483-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated cpio packages fix CVE-2016-2037

Updated cpio package fixes security vulnerability: An out-of-bounds write in cpio was found in the parsing of cpio files, in the processcopyin function in src/copyin.c CVE-2016-2037...

MGASA-2016-0063 Updated cpio packages fix CVE-2016-2037

Updated cpio package fixes security vulnerability: An out-of-bounds write in cpio was found in the parsing of cpio files, in the processcopyin function in src/copyin.c CVE-2016-2037...

Debian DLA-415-1 : cpio security update

An out-of-bounds write was discovered in the parsing of cpio files. For Debian 6 'Squeeze', this issue has been fixed in cpio version 2.11-4+deb6u2. We recommend you to upgrade your cpio package. Learn more about the Debian Long Term Support LTS Project and how to apply these updates at:...

[SECURITY] [DLA 415-1] cpio security update

Package : cpio Version : 2.11-4+deb6u2 CVE ID : CVE-2016-2037 Debian Bug : 812401 An out-of-bounds write was discovered in the parsing of cpio files. For Debian 6 "Squeeze", this issue has been fixed in cpio version 2.11-4+deb6u2. We recommend you to upgrade your cpio package. Learn more about th...

DLA-415-1 cpio - security update

Bulletin has no description...

cpio denial of service vulnerability

cpio is a set of file backup tools developed by the GNU Project for use in UNIX operating systems. A security vulnerability exists in cpio that could be exploited by an attacker to crash a cpio instance and cause a denial of service...