CVE-2014-9112

Опубликовано: 02 дек. 2014

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Heap-based buffer overflow in the process_copy_in function in GNU Cpio 2.11 allows remote attackers to cause a denial of service via a large block value in a cpio archive.

Ссылки

http://seclists.org/fulldisclosure/2014/Nov/74
Exploit
Mailing List
Third Party Advisory
http://secunia.com/advisories/60167
Exploit
http://secunia.com/advisories/62145
http://www.debian.org/security/2014/dsa-3111
Third Party Advisory
VDB Entry
http://www.openwall.com/lists/oss-security/2014/11/23/2
Exploit
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/11/25/2
Exploit
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/11/26/20
Exploit
Mailing List
Third Party Advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
http://www.securityfocus.com/bid/71248
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-2456-1
https://exchange.xforce.ibmcloud.com/vulnerabilities/98918
https://savannah.gnu.org/bugs/?43709
Exploit
Issue Tracking
http://seclists.org/fulldisclosure/2014/Nov/74
Exploit
Mailing List
Third Party Advisory
http://secunia.com/advisories/60167
Exploit
http://secunia.com/advisories/62145
http://www.debian.org/security/2014/dsa-3111
Third Party Advisory
VDB Entry
http://www.openwall.com/lists/oss-security/2014/11/23/2
Exploit
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/11/25/2
Exploit
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/11/26/20
Exploit
Mailing List
Third Party Advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gnu:cpio:2.11:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

EPSS

Процентиль: 79%

0.01343

Низкий

5 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2014-9112

ubuntu

больше 10 лет назад

Heap-based buffer overflow in the process_copy_in function in GNU Cpio 2.11 allows remote attackers to cause a denial of service via a large block value in a cpio archive.

CVE-2014-9112

redhat

почти 11 лет назад

Heap-based buffer overflow in the process_copy_in function in GNU Cpio 2.11 allows remote attackers to cause a denial of service via a large block value in a cpio archive.

CVE-2014-9112

debian

больше 10 лет назад

Heap-based buffer overflow in the process_copy_in function in GNU Cpio ...

GHSA-wvrh-73qw-9vj9

github

больше 3 лет назад

Heap-based buffer overflow in the process_copy_in function in GNU Cpio 2.11 allows remote attackers to cause a denial of service via a large block value in a cpio archive.

ELSA-2015-2108

oracle-oval

почти 10 лет назад

ELSA-2015-2108: cpio security and bug fix update (MODERATE)

EPSS

Процентиль: 79%

0.01343

Низкий

5 Medium

CVSS2

Дефекты

CWE-119