Lucene search

K
osvGoogleOSV:USN-5064-1
HistorySep 08, 2021 - 11:14 a.m.

cpio vulnerability

2021-09-0811:14:41
Google
osv.dev
6

7.8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.2%

Maverick Chung and Qiaoyi Fang discovered that cpio incorrectly handled
certain pattern files. A remote attacker could use this issue to cause cpio
to crash, resulting in a denial of service, or possibly execute arbitrary
code.