Buffer overflow in Gnu Cpio

CVE-2005-4268

Buffer overflow in cpio 2.6-8.FC4 on 64-bit platforms, when creating a cpio archive, allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a file whose size is represented by more than 8 digits.

Vulnerability class: Buffer Overflow

EPSS: 0.005 (41.3th percentile) — read the EPSS interpretation.

Affected products

  • Gnu Cpio — versions 2.6-8
  • N/a — versions n/a

Weakness classification (CWE)

References