CVE-2014-9112 Heap-based buffer overflow in the process_copy_in function in GNU Cpio 2.11 allows remote attackers to cause a denial of service via a large block value in a cpio archive.
MediumCVSS 5.0
EPSS 7.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the process_copy_in function in GNU Cpio 2.11 allows remote attackers to cause a denial of service via a large block value in a cpio archive.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/cpio(Debian:12) | < 2.11+dfsg-4 | 2.11+dfsg-4 |
| debian/cpio(Debian:13) | < 2.11+dfsg-4 | 2.11+dfsg-4 |
| debian/cpio(Debian:14) | < 2.11+dfsg-4 | 2.11+dfsg-4 |
| GNU cpio | = 2.11 | No fix listed |
| debian linux | = 7.0 | No fix listed |
References
- Debian Security Tracker CVE-2014-9112 vendor-advisory
- 20141123 on Linux, 'less' can probably get you owned exploit mailing-list third-party-advisory
- 60167 exploit third-party-advisory
- 62145 third-party-advisory
- DSA-3111 third-party-advisory vdb-entry vendor-advisory
- [oss-security] 20141123 so, can we do something about lesspipe? (+ a cpio bug to back up the argument) exploit mailing-list third-party-advisory
- [oss-security] 20141125 CVE request: cpio heap-based buffer overflow [was Re: so, can we do something about lesspipe? (+ a cpio bug to back up the argument)] exploit mailing-list third-party-advisory
- [oss-security] 20141126 CVE request: cpio heap-based buffer overflow [was Re: so, can we do something about lesspipe? (+ a cpio bug to back up the argument)] exploit mailing-list third-party-advisory
- www.oracle.com
- 71248 third-party-advisory vdb-entry
- USN-2456-1 vendor-advisory
- linux-kernel-lesspipe-code-exec(98918) vdb-entry
- savannah.gnu.org exploit issue-tracking
- bugs.debian.org issue-tracking