CVE-2005-4268
Fixed in a distro release EPSS <1%
Buffer overflow in cpio 2.6-8.FC4 on 64-bit platforms, when creating a cpio archive, allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a file whose size is represented by more than 8 digits.
Products: gnu cpio
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cpio | 2.6-10 |
| Debian 13 | cpio | 2.6-10 |
| Debian 14 | cpio | 2.6-10 |
| Red Hat Enterprise Linux 3 | cpio | 0:2.5-6.RHEL3 |
| Red Hat Enterprise Linux 3 | cpio-debuginfo | 0:2.5-6.RHEL3 |
| Red Hat Enterprise Linux 4 | cpio | 0:2.5-13.RHEL4 |
| Red Hat Enterprise Linux 4 | cpio-debuginfo | 0:2.5-13.RHEL4 |