NVD

Id
42887  
Name
CVE-2012-0815  
Description
The headerVerifyInfo function in lib/header.c in RPM before 4.9.1.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a negative value in a region offset of a package header, which is not properly handled in a numeric range comparison.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-06-04  
Modified Date
2016-09-08  
Seq
2012-0815  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
215788 42887 CVE-2012-0815 FEDORA-2012-5298  View
215789 42887 CVE-2012-0815 FEDORA-2012-5420  View
215790 42887 CVE-2012-0815 FEDORA-2012-5421  View
215791 42887 CVE-2012-0815 RHSA-2012:0451  View
215792 42887 CVE-2012-0815 RHSA-2012:0531  View
215793 42887 CVE-2012-0815 http://rpm.org/gitweb?p=rpm.git;a=commitdiff;h=472e569562d4c90d7a298080e0052856aa7fa86b  View
215794 42887 CVE-2012-0815 http://rpm.org/gitweb?p=rpm.git;a=commitdiff;h=858a328cd0f7d4bcd8500c78faaf00e4f8033df6  View
215795 42887 CVE-2012-0815 http://rpm.org/wiki/Releases/4.9.1.3  View
215796 42887 CVE-2012-0815 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html  View
215797 42887 CVE-2012-0815 52865  View
215798 42887 CVE-2012-0815 1026882  View
215799 42887 CVE-2012-0815 USN-1695-1  View
215800 42887 CVE-2012-0815 rpm-headerverifyinfo-code-execution(74581)  View
215801 42887 CVE-2012-0815 https://bugzilla.redhat.com/show_bug.cgi?id=744104  View
215802 42887 CVE-2012-0815 openSUSE-SU-2012:0588  View
215803 42887 CVE-2012-0815 openSUSE-SU-2012:0589  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26897 JVNDB-2012-002604 RPM の headerVerifyInfo 関数におけるサービス運用妨害 (クラッシュ) の脆弱性 RPM の lib/header.c 内の headerVerifyInfo 関数は、サービス運用妨害 (クラッシュ) 状態にされる、および任意のコードを実行される脆弱性が存在します。 CVE-2012-0815 54053 CVE-2012-0815 42887 6.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002604.html 2012-06-04 2012-12-17 View