[SECURITY] [DLA 111-1] cpio security update

2014-12-1514:18:40

lists.debian.org

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.8 Medium

AI Score

Confidence

High

0.022 Low

EPSS

Percentile

89.5%

JSON

Package : cpio
Version : 2.11-4+deb6u1
CVE ID : CVE-2014-9112
Debian Bug : 772793

Multiple issues have been identified in cpio, including a buffer overflow
and multiple NULL pointer dereference, resulting at least in a denial of
service and possibly also in an unwanted code execution.

This has been fixed in Debian 6 Squeeze with version 2.11-4+deb6u1 by
applying the upstream patches.

Raphaël Hertzog ◈ Debian Developer

Support Debian LTS: http://www.freexian.com/services/debian-lts.html
Learn to master Debian: http://debian-handbook.info/get/
Attachment:
signature.asc
Description: Digital signature

OSVersionArchitecturePackageVersionFilename
Debian7allcpio-win32< 2.11+dfsg-0.1+deb7u1cpio-win32_2.11+dfsg-0.1+deb7u1_all.deb
Debian7amd64cpio< 2.11+dfsg-0.1+deb7u1cpio_2.11+dfsg-0.1+deb7u1_amd64.deb
Debian6i386cpio< 2.11-4+deb6u1cpio_2.11-4+deb6u1_i386.deb
Debian7s390xcpio< 2.11+dfsg-0.1+deb7u1cpio_2.11+dfsg-0.1+deb7u1_s390x.deb
Debian7armhfcpio< 2.11+dfsg-0.1+deb7u1cpio_2.11+dfsg-0.1+deb7u1_armhf.deb
Debian7kfreebsd-amd64cpio< 2.11+dfsg-0.1+deb7u1cpio_2.11+dfsg-0.1+deb7u1_kfreebsd-amd64.deb
Debian6allcpio-win32< 2.11-4+deb6u1cpio-win32_2.11-4+deb6u1_all.deb
Debian7mipselcpio< 2.11+dfsg-0.1+deb7u1cpio_2.11+dfsg-0.1+deb7u1_mipsel.deb
Debian7sparccpio< 2.11+dfsg-0.1+deb7u1cpio_2.11+dfsg-0.1+deb7u1_sparc.deb
Debian7i386cpio< 2.11+dfsg-0.1+deb7u1cpio_2.11+dfsg-0.1+deb7u1_i386.deb

OS	Version	Architecture	Package	Version	Filename
Debian	7	all	cpio-win32	< 2.11+dfsg-0.1+deb7u1	cpio-win32_2.11+dfsg-0.1+deb7u1_all.deb
Debian	7	amd64	cpio	< 2.11+dfsg-0.1+deb7u1	cpio_2.11+dfsg-0.1+deb7u1_amd64.deb
Debian	6	i386	cpio	< 2.11-4+deb6u1	cpio_2.11-4+deb6u1_i386.deb
Debian	7	s390x	cpio	< 2.11+dfsg-0.1+deb7u1	cpio_2.11+dfsg-0.1+deb7u1_s390x.deb
Debian	7	armhf	cpio	< 2.11+dfsg-0.1+deb7u1	cpio_2.11+dfsg-0.1+deb7u1_armhf.deb
Debian	7	kfreebsd-amd64	cpio	< 2.11+dfsg-0.1+deb7u1	cpio_2.11+dfsg-0.1+deb7u1_kfreebsd-amd64.deb
Debian	6	all	cpio-win32	< 2.11-4+deb6u1	cpio-win32_2.11-4+deb6u1_all.deb
Debian	7	mipsel	cpio	< 2.11+dfsg-0.1+deb7u1	cpio_2.11+dfsg-0.1+deb7u1_mipsel.deb
Debian	7	sparc	cpio	< 2.11+dfsg-0.1+deb7u1	cpio_2.11+dfsg-0.1+deb7u1_sparc.deb
Debian	7	i386	cpio	< 2.11+dfsg-0.1+deb7u1	cpio_2.11+dfsg-0.1+deb7u1_i386.deb