Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-s96y-8z6t-3yff
Vulnerability ID VCID-s96y-8z6t-3yff
Aliases CVE-2021-31872
Summary An issue was discovered in klibc before 2.0.9. Multiple possible integer overflows in the cpio command on 32-bit systems may result in a buffer overflow or other security impact.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.01173 https://api.first.org/data/v1/epss?cve=CVE-2021-31872
epss 0.01173 https://api.first.org/data/v1/epss?cve=CVE-2021-31872
epss 0.01173 https://api.first.org/data/v1/epss?cve=CVE-2021-31872
epss 0.01173 https://api.first.org/data/v1/epss?cve=CVE-2021-31872
epss 0.01173 https://api.first.org/data/v1/epss?cve=CVE-2021-31872
epss 0.01173 https://api.first.org/data/v1/epss?cve=CVE-2021-31872
epss 0.01173 https://api.first.org/data/v1/epss?cve=CVE-2021-31872
epss 0.01173 https://api.first.org/data/v1/epss?cve=CVE-2021-31872
epss 0.01173 https://api.first.org/data/v1/epss?cve=CVE-2021-31872
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2021-31872
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-31872
989505 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=989505
USN-5379-1 https://usn.ubuntu.com/5379-1/
No exploits are available.
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.78639
EPSS Score 0.01173
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T16:34:50.465579+00:00 Debian Oval Importer Import https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.0.0