Lucene search
MitreCVELIST:CVE-2021-38185HistoryAug 07, 2021 - 12:00 a.m.
CVE-2021-38185
2021-08-0700:00:00
mitre
www.cve.org
6
cve-2021-38185
cpio
integer overflow
out-of-bounds heap write
pattern file
untrusted data
GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c ds_fgetstr integer overflow that triggers an out-of-bounds heap write. NOTE: it is unclear whether there are common cases where the pattern file, associated with the -E option, is untrusted data.
Related
nessus
nessus
RHEL 8 : cpio (RHSA-2022:1991)
2022-05-11 00:00:00
Photon OS 1.0: Cpio PHSA-2021-1.0-0430
2021-08-27 00:00:00
AlmaLinux 8 : cpio (ALSA-2022:1991)
2022-05-12 00:00:00
prion
prion
Integer overflow
2021-08-08 00:15:00
photon
photon
cbl_mariner
cbl_mariner
CVE-2021-38185 affecting package cpio 2.13-3
2021-09-13 03:23:36
CVE-2021-38185 affecting package cpio for versions less than 2.13-4
2022-06-03 17:54:03
openvas
openvas
Huawei EulerOS: Security Advisory for cpio (EulerOS-SA-2021-2749)
2021-11-17 00:00:00
Ubuntu: Security Advisory (USN-5064-3)
2023-08-04 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:14788-1)
2021-08-24 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2021-08-12 14:00:18
osv
osv
cpio vulnerability
2022-01-27 17:25:42
cpio vulnerability
2021-09-08 11:14:41
CVE-2021-38185
2021-08-08 00:15:00
almalinux
almalinux
Moderate: cpio security update
2022-05-10 06:43:49
oraclelinux
oraclelinux
cpio security update
2022-05-17 00:00:00
ubuntu
ubuntu
GNU cpio vulnerability
2022-01-27 00:00:00
GNU cpio vulnerability
2021-09-08 00:00:00
GNU cpio vulnerability
2023-08-03 00:00:00
ubuntucve
ubuntucve
CVE-2021-38185
2021-08-08 00:00:00
suse
suse
Security update for cpio (important)
2021-08-16 00:00:00
ibm
ibm
Security Bulletin: IBM Sterling Connect:Direct for UNIX Certified Container is affected by arbitrary code executiondue to GNU cpio (CVE-2021-38185)
2022-08-01 10:01:49
redhat
redhat
alpinelinux
alpinelinux
CVE-2021-38185
2021-08-08 00:15:07
redhatcve
redhatcve
CVE-2021-38185
2021-08-09 20:19:57
mageia
mageia
Updated cpio packages fix security vulnerability
2021-09-23 07:49:29
githubexploit
githubexploit
Exploit for Integer Overflow or Wraparound in Gnu Cpio
2021-07-19 20:10:13
debiancve
debiancve
CVE-2021-38185
2021-08-08 00:15:07
cve
cve
CVE-2021-38185
2021-08-08 00:15:07
redos
redos
ROS-20240730-03
2024-07-30 00:00:00
amazon
amazon
Medium: cpio
2023-03-02 22:35:00
rocky
rocky
cpio security update
2022-05-10 06:43:49
nvd
nvd
CVE-2021-38185
2021-08-08 00:15:07
cloudfoundry
cloudfoundry
USN-5064-1: GNU cpio vulnerability | Cloud Foundry
2021-10-04 00:00:00
debian
debian
[SECURITY] [DLA 3445-1] cpio security update
2023-06-04 20:12:22
gentoo
gentoo
cpio: Arbitrary Code Execution
2024-07-01 00:00:00
avleonov
avleonov