NVD

Id
35892  
Name
CVE-2014-9112  
Description
Heap-based buffer overflow in the process_copy_in function in GNU Cpio 2.11 allows remote attackers to cause a denial of service via a large block value in a cpio archive.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2014-12-02  
Modified Date
2017-01-02  
Seq
2014-9112  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
183746 35892 CVE-2014-9112 20141123 on Linux, "less" can probably get you owned  View
183747 35892 CVE-2014-9112 62145  View
183748 35892 CVE-2014-9112 DSA-3111  View
183749 35892 CVE-2014-9112 [oss-security] 20141123 so, can we do something about lesspipe? (+ a cpio bug to back up the argument)  View
183750 35892 CVE-2014-9112 [oss-security] 20141125 CVE request: cpio heap-based buffer overflow [was Re: so, can we do something about lesspipe? (+ a cpio bug to back up the argument)]  View
183751 35892 CVE-2014-9112 [oss-security] 20141126 CVE request: cpio heap-based buffer overflow [was Re: so, can we do something about lesspipe? (+ a cpio bug to back up the argument)]  View
183752 35892 CVE-2014-9112 http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html  View
183753 35892 CVE-2014-9112 71248  View
183754 35892 CVE-2014-9112 USN-2456-1  View
183755 35892 CVE-2014-9112 linux-kernel-lesspipe-code-exec(98918)  View
183756 35892 CVE-2014-9112 https://savannah.gnu.org/bugs/?43709  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16868 JVNDB-2014-005743 GNU Cpio の process_copy_in 関数におけるヒープベースのバッファオーバーフローの脆弱性 GNU Cpio の process_copy_in 関数には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2014-9112 76405 CVE-2014-9112 35892 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005743.html 2014-11-27 2014-12-03 View