Unscored severity · published Jun 4, 2012
CVE-2012-0815
The headerVerifyInfo function in lib/header.c in RPM before 4.9.1.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a negative…
–
CVSS
4.2%
EPSS
No
On KEV
Description
The headerVerifyInfo function in lib/header.c in RPM before 4.9.1.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a negative value in a region offset of a package header, which is not properly handled in a numeric range comparison.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.2% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RP
Rpm · Rpm
through 4.9.1.2; 1.2; 1.3; 1.3.1; 1.4; 1.4.1; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-0815
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-0815
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077960.html
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078819.html
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078907.html
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2012-0451.html
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2012-0531.html
rpm.org
http://rpm.org/gitweb?p=rpm.git%3Ba=commitdiff%3Bh=472e569562d4c90d7a298080e0052856aa7fa86b
More from Rpm
7.8
CVE-2017-7500
It was found that rpm did not properly handle RPM installations when a destination path was a symbolic link to a directory, possibly changing ownership and permissions of an…
7.8
CVE-2017-7501
It was found that versions of rpm before 4.13.0.2 use temporary files with predictable names when installing an RPM
7.0
CVE-2021-20271
A flaw was found in RPM's signature check functionality when reading a package file
6.7
CVE-2021-35939
It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created
6.7
CVE-2021-35938
A symbolic link issue was found in rpm