CVE ID:	CVE-2014-9112
Description:	Heap-based buffer overflow in the process_copy_in function in GNU Cpio 2.11 allows remote attackers to cause a denial of service via a large block value in a cpio archive.
Test IDs:	1.3.6.1.4.1.25623.1.0.122738   1.3.6.1.4.1.25623.1.0.703111   1.3.6.1.4.1.25623.1.1.10.2014.0528   1.3.6.1.4.1.25623.1.1.4.2014.1652.1   1.3.6.1.4.1.25623.1.0.871486   1.3.6.1.4.1.25623.1.1.4.2014.1675.1   1.3.6.1.4.1.25623.1.1.1.2.2014.111   1.3.6.1.4.1.25623.1.0.868805
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2014-9112 BugTraq ID: 71248 http://www.securityfocus.com/bid/71248 Debian Security Information: DSA-3111 (Google Search) http://www.debian.org/security/2014/dsa-3111 http://seclists.org/fulldisclosure/2014/Nov/74 https://savannah.gnu.org/bugs/?43709 http://www.openwall.com/lists/oss-security/2014/11/23/2 http://www.openwall.com/lists/oss-security/2014/11/25/2 http://www.openwall.com/lists/oss-security/2014/11/26/20 http://secunia.com/advisories/60167 http://secunia.com/advisories/62145 http://www.ubuntu.com/usn/USN-2456-1 XForce ISS Database: linux-kernel-lesspipe-code-exec(98918) https://exchange.xforce.ibmcloud.com/vulnerabilities/98918