CVE-2014-9112

GNU Cpio 2.11 - Denial of Service via Large Block Value in Cpio Archive

Title source: llm
STIX 2.1

Description

Heap-based buffer overflow in the process_copy_in function in GNU Cpio 2.11 allows remote attackers to cause a denial of service via a large block value in a cpio archive.

References (12)

Core 12
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/62145
Exploit third-party-advisory x_refsource_secunia
http://secunia.com/advisories/60167
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/98918
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/71248
Exploit, Mailing List, Third Party Advisory mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2014/Nov/74
Exploit, Issue Tracking x_refsource_misc
https://savannah.gnu.org/bugs/?43709
Exploit, Mailing List, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2014/11/25/2
Exploit, Mailing List, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2014/11/26/20
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-2456-1
Exploit, Mailing List, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2014/11/23/2
Third Party Advisory, VDB Entry vendor-advisory x_refsource_debian
http://www.debian.org/security/2014/dsa-3111

Scores

EPSS 0.0134
EPSS Percentile 80.3%

Details

CWE
CWE-119
Status published
Products (2)
debian/debian_linux 7.0
gnu/cpio 2.11
Published Dec 02, 2014
Tracked Since Feb 18, 2026