CVE-2005-4268

Severity: low (CVSS 3.7 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-12-15 · updated 2026-06-16
Weakness: CWE-119

Description

Buffer overflow in cpio 2.6-8.FC4 on 64-bit platforms, when creating a cpio archive, allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a file whose size is represented by more than 8 digits.

Affected products

GNU cpio: 2.6-8

References

http://frontal1.mandriva.com/security/advisories?name=MDKSA-2005:237
http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html
http://secunia.com/advisories/18251
http://secunia.com/advisories/18278
http://secunia.com/advisories/18280
http://secunia.com/advisories/18395
http://secunia.com/advisories/20117
http://secunia.com/advisories/25098
http://secunia.com/advisories/25161
http://www.osvdb.org/22194
http://www.redhat.com/support/errata/RHSA-2007-0245.html

Get alerted when CVE-2005-4268 or the next vulnerability affects your stack