Lucene search
PRIOn knowledge basePRION:CVE-2014-9112HistoryDec 02, 2014 - 4:59 p.m.
Heap overflow
2014-12-0216:59:00
PRIOn knowledge base
www.prio-n.com
8
Heap-based buffer overflow in the process_copy_in function in GNU Cpio 2.11 allows remote attackers to cause a denial of service via a large block value in a cpio archive.
| CPE | Name | Operator | Version |
|---|---|---|---|
| debian_linux | eq | 7.0 | |
| cpio | eq | 2.11 |
References
seclists.org/fulldisclosure/2014/Nov/74
secunia.com/advisories/60167
secunia.com/advisories/62145
www.debian.org/security/2014/dsa-3111
www.openwall.com/lists/oss-security/2014/11/23/2
www.openwall.com/lists/oss-security/2014/11/25/2
www.openwall.com/lists/oss-security/2014/11/26/20
www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
www.securityfocus.com/bid/71248
www.ubuntu.com/usn/USN-2456-1
exchange.xforce.ibmcloud.com/vulnerabilities/98918
savannah.gnu.org/bugs/?43709
Related
redhat
redhat
(RHSA-2015:2108) Moderate: cpio security and bug fix update
2015-11-19 14:43:07
nessus
nessus
Fedora 20 : cpio-2.11-28.fc20 (2014-16250)
2015-01-06 00:00:00
Mandriva Linux Security Advisory : cpio (MDVSA-2014:250)
2014-12-15 00:00:00
Scientific Linux Security Update : cpio on SL7.x x86_64 (20151119)
2015-12-22 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: cpio-2.11-33.fc21
2014-12-18 06:06:28
[SECURITY] Fedora 20 Update: cpio-2.11-28.fc20
2015-01-06 06:09:24
openvas
openvas
RedHat Update for cpio RHSA-2015:2108-03
2015-11-20 00:00:00
Debian: Security Advisory (DLA-111-1)
2023-03-08 00:00:00
Mageia: Security Advisory (MGASA-2014-0528)
2022-01-28 00:00:00
cve
cve
CVE-2014-9112
2014-12-02 16:59:05
securityvulns
securityvulns
[ MDVSA-2014:250 ] cpio
2014-12-22 00:00:00
GNU cpio buffer overflow
2014-12-22 00:00:00
debiancve
debiancve
CVE-2014-9112
2014-12-02 16:59:05
debian
debian
[SECURITY] [DSA 3111-1] cpio security update
2014-12-23 00:55:26
[SECURITY] [DLA 111-1] cpio security update
2014-12-15 14:18:40
[SECURITY] [DSA 3111-1] cpio security update
2014-12-23 00:55:26
mageia
mageia
Updated cpio package fixes security vulnerability
2014-12-14 17:10:39
oraclelinux
oraclelinux
cpio security and bug fix update
2015-11-23 00:00:00
nvd
nvd
CVE-2014-9112
2014-12-02 16:59:05
ubuntucve
ubuntucve
CVE-2014-9112
2014-12-02 00:00:00
cvelist
cvelist
CVE-2014-9112
2014-12-02 16:00:00
ibm
ibm
Security Bulletin: Vulnerability in cpio affects PowerKVM (CVE-2014-9112)
2018-06-18 01:30:30
archlinux
archlinux
cpio: heap buffer overflow
2015-01-14 00:00:00
centos
centos
cpio security update
2015-11-30 19:26:10
gentoo
gentoo
GNU cpio: Multiple vulnerabilities
2015-02-15 00:00:00
freebsd
freebsd
cpio -- multiple vulnerabilities
2015-03-27 00:00:00
ubuntu
ubuntu
GNU cpio vulnerabilities
2015-01-08 00:00:00