Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2012-0060
HistoryApr 03, 2012 - 12:00 a.m.

CVE-2012-0060

2012-04-0300:00:00
ubuntu.com
ubuntu.com
9

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.044 Low

EPSS

Percentile

92.3%

JSON

RPM before 4.9.1.3 does not properly validate region tags, which allows
remote attackers to cause a denial of service (crash) and possibly execute
arbitrary code via an invalid region tag in a package header to the (1)
headerLoad, (2) rpmReadSignature, or (3) headerVerify function.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchrpm< 4.7.2-1lubuntu0.1UNKNOWN
ubuntu11.10noarchrpm< 4.9.0-7ubuntu0.1UNKNOWN
ubuntu12.04noarchrpm< 4.9.1.1-1ubuntu0.1UNKNOWN

Related

veracode 1
cve 1
prion 1
debiancve 1
openvas 25
nessus 23
redhat 2
fedora 3
amazon 1
oraclelinux 1
centos 1
ubuntu 1
osv 1
debian 1
gentoo 1
vmware 2
veracode
veracode
Arbitrary Code Execution
2020-04-10 01:10:31
cve
cve
CVE-2012-0060
2012-06-04 20:55:00
prion
prion
Design/Logic Flaw
2012-06-04 20:55:00
debiancve
debiancve
CVE-2012-0060
2012-06-04 20:55:00
openvas
openvas
Fedora Update for rpm FEDORA-2012-5421
2012-04-23 00:00:00
Amazon Linux: Security Advisory (ALAS-2012-61)
2015-09-08 00:00:00
CentOS Update for popt CESA-2012:0451 centos5
2012-07-30 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : rpm (MDVSA-2012:056)
2012-04-12 00:00:00
Scientific Linux Security Update : rpm on SL5.x, SL6.x i386/x86_64 (20120403)
2012-08-01 00:00:00
SuSE 10 Security Update : RPM (ZYPP Patch Number 8184)
2012-07-17 00:00:00
redhat
redhat
(RHSA-2012:0451) Important: rpm security update
2012-04-03 00:00:00
(RHSA-2012:0531) Important: rhev-hypervisor6 security and bug fix update
2012-04-30 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: rpm-4.9.1.3-1.fc17
2012-04-12 03:27:10
[SECURITY] Fedora 16 Update: rpm-4.9.1.3-1.fc16
2012-04-22 03:42:55
[SECURITY] Fedora 15 Update: rpm-4.9.1.3-1.fc15
2012-04-22 03:24:37
amazon
amazon
Important: rpm
2012-04-05 12:49:00
oraclelinux
oraclelinux
rpm security update
2012-04-03 00:00:00
centos
centos
popt, rpm security update
2012-04-03 17:07:58
ubuntu
ubuntu
RPM vulnerabilities
2013-01-17 00:00:00
osv
osv
rpm - security update
2015-01-28 00:00:00
debian
debian
[SECURITY] [DLA 140-1] rpm security update
2015-01-28 18:07:09
gentoo
gentoo
RPM: Multiple vulnerabilities
2012-06-24 00:00:00
vmware
vmware
VMware vSphere and vCOps updates to third party libraries
2012-08-30 00:00:00
VMware vSphere and vCOps updates to third party libraries
2012-08-30 00:00:00

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.044 Low

EPSS

Percentile

92.3%

JSON
Related for UB:CVE-2012-0060
veracode1cve1prion1debiancve1openvas25nessus23redhat2fedora3amazon1oraclelinux1centos1ubuntu1osv1debian1gentoo1vmware2