Lucene search
Gentoo FoundationMGASA-2014-0528HistoryDec 14, 2014 - 5:10 p.m.
Updated cpio package fixes security vulnerability
2014-12-1417:10:39
Gentoo Foundation
advisories.mageia.org
23
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS
0.016
Percentile
87.6%
Heap-based buffer overflow in the process_copy_in function in GNU Cpio 2.11 allows remote attackers to cause a denial of service via a large block value in a cpio archive (CVE-2014-9112). Additionally, a null pointer dereference in the copyin_link function which could cause a denial of service has also been fixed.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 4 | noarch | cpio | < 2.11-6.2 | cpio-2.11-6.2.mga4 |
Related
openvas
openvas
Debian: Security Advisory (DLA-111-1)
2023-03-08 00:00:00
Mageia: Security Advisory (MGASA-2014-0528)
2022-01-28 00:00:00
Fedora Update for cpio FEDORA-2014-16168
2015-01-05 00:00:00
prion
prion
Heap overflow
2014-12-02 16:59:00
debian
debian
[SECURITY] [DLA 111-1] cpio security update
2014-12-15 14:18:40
[SECURITY] [DSA 3111-1] cpio security update
2014-12-23 00:55:26
[SECURITY] [DSA 3111-1] cpio security update
2014-12-23 00:55:26
oraclelinux
oraclelinux
cpio security and bug fix update
2015-11-23 00:00:00
nessus
nessus
Debian DLA-111-1 : cpio security update
2015-03-26 00:00:00
Fedora 21 : cpio-2.11-33.fc21 (2014-16168)
2014-12-18 00:00:00
Debian DSA-3111-1 : cpio - security update
2014-12-30 00:00:00
ubuntucve
ubuntucve
CVE-2014-9112
2014-12-02 00:00:00
securityvulns
securityvulns
GNU cpio buffer overflow
2014-12-22 00:00:00
[ MDVSA-2014:250 ] cpio
2014-12-22 00:00:00
cvelist
cvelist
CVE-2014-9112
2014-12-02 16:00:00
nvd
nvd
CVE-2014-9112
2014-12-02 16:59:05
redhat
redhat
(RHSA-2015:2108) Moderate: cpio security and bug fix update
2015-11-19 14:43:07
fedora
fedora
[SECURITY] Fedora 21 Update: cpio-2.11-33.fc21
2014-12-18 06:06:28
[SECURITY] Fedora 20 Update: cpio-2.11-28.fc20
2015-01-06 06:09:24
debiancve
debiancve
CVE-2014-9112
2014-12-02 16:59:05
cve
cve
CVE-2014-9112
2014-12-02 16:59:05
centos
centos
cpio security update
2015-11-30 19:26:10
archlinux
archlinux
cpio: heap buffer overflow
2015-01-14 00:00:00
ibm
ibm
Security Bulletin: Vulnerability in cpio affects PowerKVM (CVE-2014-9112)
2018-06-18 01:30:30
gentoo
gentoo
GNU cpio: Multiple vulnerabilities
2015-02-15 00:00:00
ubuntu
ubuntu
GNU cpio vulnerabilities
2015-01-08 00:00:00
freebsd
freebsd
cpio -- multiple vulnerabilities
2015-03-27 00:00:00
osv
osv
cpio-2.12-3.90 on GA media
2024-06-15 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS
0.016
Percentile
87.6%
Related for MGASA-2014-0528