CVE-2016-2037

CWE-119 — Buffer OverflowCWE-787 — Out-of-bounds Write10 documents8 sources
Severity
6.5MEDIUM
EPSS
19.4%
top 4.61%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Debian Debian LinuxGNU Cpio
Timeline
PublishedFeb 22
Latest updateMay 17

Description

The cpio_safer_name_suffix function in util.c in cpio 2.11 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted cpio file.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶Debiancpio< 2.11+dfsg-5+3
▶NVDgnu/cpio2.11

Also affects: Debian Linux 7.0, 8.0

🔴Vulnerability Details

4
GHSA
GHSA-g3qq-8w29-572m: The cpio_safer_name_suffix function in util↗2022-05-17
▶
CVEList
CVE-2016-2037: The cpio_safer_name_suffix function in util↗2016-02-22
▶
OSV
CVE-2016-2037: The cpio_safer_name_suffix function in util↗2016-02-22
▶
OSV
cpio vulnerabilities↗2016-02-22
▶

📋Vendor Advisories

3
Ubuntu
GNU cpio vulnerabilities↗2016-02-22
▶
Red Hat
cpio: out of bounds write↗2016-01-19
▶
Debian
CVE-2016-2037: cpio - The cpio_safer_name_suffix function in util.c in cpio 2.11 allows remote attacke...↗2016
▶

💬Community

2
Bugzilla
CVE-2016-2037 cpio: out of bounds write↗2016-01-20
▶
Bugzilla
CVE-2016-2037 cpio: out of bounds write [fedora-all]↗2016-01-20
▶