Red Hat Security AdvisoryRHSA-2010:0145
cpio security update
Released 2010-03-16 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 cpio-2.5-6.RHEL3, cpio-2.5-6.RHEL3.i386
- Red Hat Enterprise Linux AS version 3 cpio-2.5-6.RHEL3, cpio-2.5-6.RHEL3.i386, cpio-2.5-6.RHEL3.ia64 +1
- Red Hat Enterprise Linux ES version 3 cpio-2.5-6.RHEL3, cpio-2.5-6.RHEL3.i386, cpio-2.5-6.RHEL3.ia64
- Red Hat Enterprise Linux WS version 3 cpio-2.5-6.RHEL3, cpio-2.5-6.RHEL3.i386, cpio-2.5-6.RHEL3.ia64
Fixes 2 records
Priority LOW 38
Heap-based buffer overflow in the rmt_read__ function in lib/rtapelib.c in the rmt client functionality in GNU tar before 1.23 and GNU cpio before 2.11 allows remote rmt servers to cause a denial of service (memory corru…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04747 · Published 2010-03-12 · Fixed CWE-119
Priority LOW 18
Buffer overflow in cpio 2.6-8.FC4 on 64-bit platforms, when creating a cpio archive, allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a file whose size is represented by mor…
CVSS 2.0LOW 3.7· Local · No auth · Interaction — · EPSS 0.00543 · Published 2005-12-15 · Fixed CWE-119
