Every CVE Search/ Get API key

CVE-2005-4268

Buffer overflow in cpio 2.6-8.FC4 on 64-bit platforms, when creating a cpio archive, allows local...

3.7 LowFix available

Buffer overflow in cpio 2.6-8.FC4 on 64-bit platforms, when creating a cpio archive, allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a file whose size is represented by more than 8 digits.

Exploit likelihood

0.54%Down 1.6 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 3.7

Buffer overflow in cpio 2.6-8.FC4 on 64-bit platforms, when creating a cpio archive, allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a file whose size is represented by more than 8 digits.

Record
CVE-2005-4268
CVSS 2.0
3.7 LowAV:L/AC:H/Au:N/C:P/I:P/A:P
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

Buffer overflow in cpio 2.6-8.FC4 on 64-bit platforms, when creating a cpio archive, allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a file whose size is represented by more than 8 digits.

Record
CVE-2005-4268
Updated
2026-11-02
EUVDEUVD-2005-4263 No score

Buffer overflow in cpio 2.6-8.FC4 on 64-bit platforms, when creating a cpio archive, allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a file whose size is represented by more than 8 digits.

Record
EUVD-2005-4263
Updated
2026-11-03
GitHub AdvisoriesGHSA-gf47-4488-9gh6 No score

Buffer overflow in cpio 2.6-8.FC4 on 64-bit platforms, when creating a cpio archive, allows local...

Buffer overflow in cpio 2.6-8.FC4 on 64-bit platforms, when creating a cpio archive, allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a file whose size is represented by more than 8 digits.

Record
GHSA-gf47-4488-9gh6
Weakness
CWE-119
Updated
2026-11-02
OSV No score

Buffer overflow in cpio 2.6-8.FC4 on 64-bit platforms, when creating a cpio archive, allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a file whose size is represented by more than 8 digits.

Record
CVE-2005-4268
Updated
2026-11-02
OSVDEBIAN-CVE-2005-4268 No score

Buffer overflow in cpio 2.6-8.FC4 on 64-bit platforms, when creating a cpio archive, allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a file whose size is represented by more than 8 digits.

Record
DEBIAN-CVE-2005-4268
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
cpio
Debian:12
 before 2.6-10
2.6-10
cpio
Debian:13
 before 2.6-10
2.6-10
cpio
Debian:14
 before 2.6-10
2.6-10
cpio
Red Hat:enterprise_linux:4::as
 before 0:2.5-13.RHEL4
0:2.5-13.RHEL4
cpio-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:2.5-13.RHEL4
0:2.5-13.RHEL4
cpio
Red Hat:enterprise_linux:4::desktop
 before 0:2.5-13.RHEL4
0:2.5-13.RHEL4
cpio-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:2.5-13.RHEL4
0:2.5-13.RHEL4
cpio
Red Hat:enterprise_linux:4::es
 before 0:2.5-13.RHEL4
0:2.5-13.RHEL4
cpio-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:2.5-13.RHEL4
0:2.5-13.RHEL4
cpio
Red Hat:enterprise_linux:4::ws
 before 0:2.5-13.RHEL4
0:2.5-13.RHEL4
Show 9 moreShow less
Affected packages
PackageAffectedFixed
cpio-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:2.5-13.RHEL4
0:2.5-13.RHEL4
cpio
Red Hat:enterprise_linux:3::as
 before 0:2.5-6.RHEL3
0:2.5-6.RHEL3
cpio-debuginfo
Red Hat:enterprise_linux:3::as
 before 0:2.5-6.RHEL3
0:2.5-6.RHEL3
cpio
Red Hat:enterprise_linux:3::desktop
 before 0:2.5-6.RHEL3
0:2.5-6.RHEL3
cpio-debuginfo
Red Hat:enterprise_linux:3::desktop
 before 0:2.5-6.RHEL3
0:2.5-6.RHEL3
cpio
Red Hat:enterprise_linux:3::es
 before 0:2.5-6.RHEL3
0:2.5-6.RHEL3
cpio-debuginfo
Red Hat:enterprise_linux:3::es
 before 0:2.5-6.RHEL3
0:2.5-6.RHEL3
cpio
Red Hat:enterprise_linux:3::ws
 before 0:2.5-6.RHEL3
0:2.5-6.RHEL3
cpio-debuginfo
Red Hat:enterprise_linux:3::ws
 before 0:2.5-6.RHEL3
0:2.5-6.RHEL3

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-4268 is a low vulnerability (CVSS 3.7) in Gnu Cpio, published December 15, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.54%, the 45th percentile. Fixed in cpio 2.6-10.

References

Show 29 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open