cpio vulnerability

2008-10-0200:00:00

ubuntu.com

7.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

78.8%

JSON

Releases

Ubuntu 7.10
Ubuntu 7.04
Ubuntu 6.06

Packages

cpio -

Details

A buffer overflow was discovered in cpio. If a user were tricked into
opening a crafted cpio archive, an attacker could cause a denial of
service via application crash, or possibly execute code with the
privileges of the user invoking the program. (CVE-2007-4476)

OSVersionArchitecturePackageVersionFilename
Ubuntu7.10noarchcpio< 2.8-1ubuntu2.2UNKNOWN
Ubuntu7.04noarchcpio< 2.6-17ubuntu0.7.04.1UNKNOWN
Ubuntu6.06noarchcpio< 2.6-10ubuntu0.3UNKNOWN