Поиск уязвимостей
Количество 20
Количество 20
BDU:2021-05090
Уязвимость компонента dstring.c пакета cpio операционной системы Debian GNU/Linux, позволяющая нарушителю выполнить произвольный код через созданный файл
ROS-20240730-15
Уязвимость automake
ROS-20240730-03
Уязвимость cpio
ALT-PU-2023-5721
ALT-PU-2023-5721: package `cpio` update to version 2.14.0.4.e3cc-alt1
ALT-PU-2025-5537
ALT-PU-2025-5537: package `cpio` update to version 2.12-alt2.c10.1
CVE-2021-38185
GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c ds_fgetstr integer overflow that triggers an out-of-bounds heap write. NOTE: it is unclear whether there are common cases where the pattern file, associated with the -E option, is untrusted data.
CVE-2021-38185
GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c ds_fgetstr integer overflow that triggers an out-of-bounds heap write. NOTE: it is unclear whether there are common cases where the pattern file, associated with the -E option, is untrusted data.
CVE-2021-38185
GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c ds_fgetstr integer overflow that triggers an out-of-bounds heap write. NOTE: it is unclear whether there are common cases where the pattern file, associated with the -E option, is untrusted data.
CVE-2021-38185
GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file because of a dstring.c ds_fgetstr integer overflow that triggers an out-of-bounds heap write. NOTE: it is unclear whether there are common cases where the pattern file associated with the -E option is untrusted data.
CVE-2021-38185
GNU cpio through 2.13 allows attackers to execute arbitrary code via a ...
openSUSE-SU-2021:2689-1
Security update for cpio
SUSE-SU-2021:2808-1
Security update for cpio
SUSE-SU-2021:2686-1
Security update for cpio
SUSE-SU-2021:14788-1
Security update for cpio
SUSE-SU-2021:14777-1
Security update for cpio
SUSE-RU-2021:2780-1
Recommended update for cpio
SUSE-RU-2021:2779-1
Recommended update for cpio
RLSA-2022:1991
Moderate: cpio security update
GHSA-pp74-ghrg-jwfh
GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c ds_fgetstr integer overflow that triggers an out-of-bounds heap write. NOTE: it is unclear whether there are common cases where the pattern file, associated with the -E option, is untrusted data.
ELSA-2022-1991
ELSA-2022-1991: cpio security update (MODERATE)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2021-05090 Уязвимость компонента dstring.c пакета cpio операционной системы Debian GNU/Linux, позволяющая нарушителю выполнить произвольный код через созданный файл | CVSS3: 7.3 | 4% Низкий | больше 5 лет назад |
 | ROS-20240730-15 Уязвимость automake | CVSS3: 7.3 | 4% Низкий | больше 2 лет назад |
| ROS-20240730-03 Уязвимость cpio | CVSS3: 7.3 | 4% Низкий | больше 2 лет назад |
| ALT-PU-2023-5721 ALT-PU-2023-5721: package `cpio` update to version 2.14.0.4.e3cc-alt1 | CVSS3: 7.8 | около 3 лет назад | |
| ALT-PU-2025-5537 ALT-PU-2025-5537: package `cpio` update to version 2.12-alt2.c10.1 | CVSS3: 7.8 | больше 1 года назад | |
 | CVE-2021-38185 GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c ds_fgetstr integer overflow that triggers an out-of-bounds heap write. NOTE: it is unclear whether there are common cases where the pattern file, associated with the -E option, is untrusted data. | CVSS3: 7.8 | 4% Низкий | больше 5 лет назад |
 | CVE-2021-38185 GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c ds_fgetstr integer overflow that triggers an out-of-bounds heap write. NOTE: it is unclear whether there are common cases where the pattern file, associated with the -E option, is untrusted data. | CVSS3: 7 | 4% Низкий | больше 5 лет назад |
 | CVE-2021-38185 GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c ds_fgetstr integer overflow that triggers an out-of-bounds heap write. NOTE: it is unclear whether there are common cases where the pattern file, associated with the -E option, is untrusted data. | CVSS3: 7.8 | 4% Низкий | больше 5 лет назад |
 | CVE-2021-38185 GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file because of a dstring.c ds_fgetstr integer overflow that triggers an out-of-bounds heap write. NOTE: it is unclear whether there are common cases where the pattern file associated with the -E option is untrusted data. | CVSS3: 7.8 | 4% Низкий | около 5 лет назад |
| CVE-2021-38185 GNU cpio through 2.13 allows attackers to execute arbitrary code via a ... | CVSS3: 7.8 | 4% Низкий | больше 5 лет назад |
 | openSUSE-SU-2021:2689-1 Security update for cpio | 4% Низкий | около 5 лет назад | |
| SUSE-SU-2021:2808-1 Security update for cpio | 4% Низкий | около 5 лет назад | |
| SUSE-SU-2021:2686-1 Security update for cpio | 4% Низкий | около 5 лет назад | |
| SUSE-SU-2021:14788-1 Security update for cpio | 4% Низкий | около 5 лет назад | |
| SUSE-SU-2021:14777-1 Security update for cpio | 4% Низкий | около 5 лет назад | |
| SUSE-RU-2021:2780-1 Recommended update for cpio | 4% Низкий | около 5 лет назад | |
| SUSE-RU-2021:2779-1 Recommended update for cpio | 4% Низкий | около 5 лет назад | |
 | RLSA-2022:1991 Moderate: cpio security update | 4% Низкий | больше 4 лет назад | |
| GHSA-pp74-ghrg-jwfh GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c ds_fgetstr integer overflow that triggers an out-of-bounds heap write. NOTE: it is unclear whether there are common cases where the pattern file, associated with the -E option, is untrusted data. | CVSS3: 7.8 | 4% Низкий | больше 4 лет назад |
| ELSA-2022-1991 ELSA-2022-1991: cpio security update (MODERATE) | 4% Низкий | больше 4 лет назад |
Уязвимостей на страницу