NVD

Id
42206  
Name
CVE-2012-0061  
Description
The headerLoad function in lib/header.c in RPM before 4.9.1.3 does not properly validate region tags, which allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large region size in a package header.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-06-04  
Modified Date
2016-09-08  
Seq
2012-0061  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
213119 42206 CVE-2012-0061 FEDORA-2012-5298  View
213120 42206 CVE-2012-0061 FEDORA-2012-5420  View
213121 42206 CVE-2012-0061 FEDORA-2012-5421  View
213122 42206 CVE-2012-0061 RHSA-2012:0451  View
213123 42206 CVE-2012-0061 RHSA-2012:0531  View
213124 42206 CVE-2012-0061 http://rpm.org/gitweb?p=rpm.git;a=commitdiff;h=472e569562d4c90d7a298080e0052856aa7fa86b  View
213125 42206 CVE-2012-0061 http://rpm.org/gitweb?p=rpm.git;a=commitdiff;h=858a328cd0f7d4bcd8500c78faaf00e4f8033df6  View
213126 42206 CVE-2012-0061 http://rpm.org/wiki/Releases/4.9.1.3  View
213127 42206 CVE-2012-0061 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html  View
213128 42206 CVE-2012-0061 52865  View
213129 42206 CVE-2012-0061 1026882  View
213130 42206 CVE-2012-0061 USN-1695-1  View
213131 42206 CVE-2012-0061 rpm-headerload-code-execution(74583)  View
213132 42206 CVE-2012-0061 https://bugzilla.redhat.com/show_bug.cgi?id=798585  View
213133 42206 CVE-2012-0061 openSUSE-SU-2012:0588  View
213134 42206 CVE-2012-0061 openSUSE-SU-2012:0589  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26896 JVNDB-2012-002603 RPM の headerLoad 関数におけるサービス運用妨害 (クラッシュ) の脆弱性 RPM の lib/header.c 内の headerLoad 関数は、region タグを適切に検証しないため、サービス運用妨害 (クラッシュ) 状態にされる、および任意のコードを実行される脆弱性が存在します。 CVE-2012-0061 53299 CVE-2012-0061 42206 6.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002603.html 2012-06-04 2012-12-17 View