Cpio Security Vulnerabilities and Issues — Cpio CVE List

Lucene search

GnuCpio

2 matches found

CVE•added 2014/02/06 5:0 p.m.•178 views

CVE-2010-4226

cpio, as used in build 2007.05.10, 2010.07.28, and possibly other versions, allows remote attackers to overwrite arbitrary files via a symlink within an RPM package archive.

7.2CVSS7.4AI score0.00508EPSS

CVE•added 2014/12/02 4:59 p.m.•151 views

CVE-2014-9112

Heap-based buffer overflow in the process_copy_in function in GNU Cpio 2.11 allows remote attackers to cause a denial of service via a large block value in a cpio archive.

5CVSS6.6AI score0.01343EPSS