RHEL 8 : cpio (RHSA-2022:1991)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2022:1991 advisory. The cpio packages provide the GNU cpio utility for creating and extracting archives, or copying files from one place to another. Security Fixes: cpio...

The vulnerability in the dstring.c component of the cpio package in the Debian GNU/Linux operating system allows a hacker to execute arbitrary code through the created file.

The vulnerability of the dstring.c component in the cpio package of the Debian GNU/Linux operating system is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker to trigger a stack overflow through the created file...

SUSE SLES11 Security Update : cpio (SUSE-SU-2021:14788-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2021:14788-1 advisory. - A patch previously applied to remedy CVE-2021-38185 introduced a regression that had the potential to cause a segmentation fault in cpio. bsc1189465...

CVE-2021-38185: Integer Overflow or Wraparound

GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c dsfgetstr integer overflow that triggers an out-of-bounds heap write. NOTE: it is unclear whether there are common cases where the pattern file, associated with the -E option, is...