CVE-2014-9112
Fixed in a distro release EPSS 7%
Heap-based buffer overflow in the process_copy_in function in GNU Cpio 2.11 allows remote attackers to cause a denial of service via a large block value in a cpio archive.
Products: gnu cpio, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cpio | 2.11+dfsg-4 |
| Debian 13 | cpio | 2.11+dfsg-4 |
| Debian 14 | cpio | 2.11+dfsg-4 |
| Debian 6.0 | cpio | 2.11-4+deb6u1 |
| Debian 7 | cpio | 2.11+dfsg-0.1+deb7u1 |
| Red Hat Enterprise Linux 7 | cpio | 0:2.11-24.el7 |
| Red Hat Enterprise Linux 7 | cpio-debuginfo | 0:2.11-24.el7 |
| Ubuntu 14.04 LTS | cpio | 2.11+dfsg-1ubuntu1.1 |
| openSUSE Tumbleweed | cpio | 2.12-3.90 |