[ GLSA 201311-21 ] cpio: Arbitrary code execution

[GLSA]

Gentoo Linux Security Advisory

Title: cpio: Arbitrary code execution (GLSA 201311-21)
Severity: normal
Exploitable: remote
Date: November 28, 2013
Bug(s): #314663
ID: 201311-21

Synopsis

A heap-based buffer overflow in cpio might allow a remote rmt
server to execute arbitrary code or cause a Denial of Service condition.


Background

GNU cpio copies files into or out of a cpio or tar archive.

Affected Packages

Package: app-arch/cpio
Vulnerable: < 2.11
Unaffected: >= 2.11
Architectures: All supported architectures


Description

Cpio contains a heap-based buffer overflow in the rmt_read__ function in
lib/rtapelib.c.


Impact

A remote server could sending more data than was requested, related to
archive filenames that contain a : (colon) character, possibly resulting
in execution of arbitrary code or a Denial of Service condition.


Workaround

There is no known workaround at this time.

Resolution

All cpio users should upgrade to the latest version: