Red Hat Security AdvisoryRHSA-2015:2108
cpio security and bug fix update
Released 2015-11-19 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) cpio-2.11-24.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) cpio-2.11-24.el7
- Red Hat Enterprise Linux Server (v. 7) cpio-2.11-24.el7
- Red Hat Enterprise Linux Workstation (v. 7) cpio-2.11-24.el7
Fixes 1 record
Priority LOW 33
Heap-based buffer overflow in the process_copy_in function in GNU Cpio 2.11 allows remote attackers to cause a denial of service via a large block value in a cpio archive.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.07093 · Published 2014-12-02 · Partial fix CWE-119
