Patchwire CVEs, their patch status, and feeds to follow them

CVE-2012-0060

Fixed in a distro release EPSS 4%

RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an invalid region tag in a package header to the (1) headerLoad, (2) rpmReadSignature, or (3) headerVerify function.

Published 2012-06-04 · CVE record · OSV

Products: rpm

Distro releases

ReleasePackageFixed in
Debian 12rpm4.9.1.3-1
Debian 13rpm4.9.1.3-1
Debian 14rpm4.9.1.3-1
Debian 6.0rpm4.8.1-6+squeeze2
Red Hat Enterprise Linux 5popt0:1.10.2.3-28.el5_8
Red Hat Enterprise Linux 5rpm0:4.4.2.3-28.el5_8
Red Hat Enterprise Linux 5rpm-apidocs0:4.4.2.3-28.el5_8
Red Hat Enterprise Linux 5rpm-build0:4.4.2.3-28.el5_8
Red Hat Enterprise Linux 5rpm-debuginfo0:4.4.2.3-28.el5_8
Red Hat Enterprise Linux 5rpm-devel0:4.4.2.3-28.el5_8
Red Hat Enterprise Linux 5rpm-libs0:4.4.2.3-28.el5_8
Red Hat Enterprise Linux 5rpm-python0:4.4.2.3-28.el5_8
Red Hat Enterprise Linux 6rpm0:4.8.0-19.el6_2.1
Red Hat Enterprise Linux 6rpm-apidocs0:4.8.0-19.el6_2.1
Red Hat Enterprise Linux 6rpm-build0:4.8.0-19.el6_2.1
Red Hat Enterprise Linux 6rpm-cron0:4.8.0-19.el6_2.1
Red Hat Enterprise Linux 6rpm-debuginfo0:4.8.0-19.el6_2.1
Red Hat Enterprise Linux 6rpm-devel0:4.8.0-19.el6_2.1
Red Hat Enterprise Linux 6rpm-libs0:4.8.0-19.el6_2.1
Red Hat Enterprise Linux 6rpm-python0:4.8.0-19.el6_2.1
Red Hat rhel els 3popt0:1.8.2-36_nonptl
Red Hat rhel els 3rpm0:4.2.3-36_nonptl
Red Hat rhel els 3rpm-build0:4.2.3-36_nonptl
Red Hat rhel els 3rpm-debuginfo0:4.2.3-36_nonptl
Red Hat rhel els 3rpm-devel0:4.2.3-36_nonptl
Red Hat rhel els 3rpm-libs0:4.2.3-36_nonptl
Red Hat rhel els 3rpm-python0:4.2.3-36_nonptl
Red Hat rhel els 4popt0:1.9.1-36_nonptl.el4
Red Hat rhel els 4rpm0:4.3.3-36_nonptl.el4
Red Hat rhel els 4rpm-build0:4.3.3-36_nonptl.el4
Red Hat rhel els 4rpm-debuginfo0:4.3.3-36_nonptl.el4
Red Hat rhel els 4rpm-devel0:4.3.3-36_nonptl.el4
Red Hat rhel els 4rpm-libs0:4.3.3-36_nonptl.el4
Red Hat rhel els 4rpm-python0:4.3.3-36_nonptl.el4
Red Hat rhel eus 5.6popt0:1.10.2.3-22.el5_6.3
Red Hat rhel eus 5.6rpm0:4.4.2.3-22.el5_6.3
Red Hat rhel eus 5.6rpm-apidocs0:4.4.2.3-22.el5_6.3
Red Hat rhel eus 5.6rpm-build0:4.4.2.3-22.el5_6.3
Red Hat rhel eus 5.6rpm-debuginfo0:4.4.2.3-22.el5_6.3
Red Hat rhel eus 5.6rpm-devel0:4.4.2.3-22.el5_6.3
Red Hat rhel eus 5.6rpm-libs0:4.4.2.3-22.el5_6.3
Red Hat rhel eus 5.6rpm-python0:4.4.2.3-22.el5_6.3
Red Hat rhel eus 6.0rpm0:4.8.0-12.el6_0.2
Red Hat rhel eus 6.0rpm-apidocs0:4.8.0-12.el6_0.2
Red Hat rhel eus 6.0rpm-build0:4.8.0-12.el6_0.2
Red Hat rhel eus 6.0rpm-cron0:4.8.0-12.el6_0.2
Red Hat rhel eus 6.0rpm-debuginfo0:4.8.0-12.el6_0.2
Red Hat rhel eus 6.0rpm-devel0:4.8.0-12.el6_0.2
Red Hat rhel eus 6.0rpm-libs0:4.8.0-12.el6_0.2
Red Hat rhel eus 6.0rpm-python0:4.8.0-12.el6_0.2
Red Hat rhel eus 6.1rpm0:4.8.0-16.el6_1.2
Red Hat rhel eus 6.1rpm-apidocs0:4.8.0-16.el6_1.2
Red Hat rhel eus 6.1rpm-build0:4.8.0-16.el6_1.2
Red Hat rhel eus 6.1rpm-cron0:4.8.0-16.el6_1.2
Red Hat rhel eus 6.1rpm-debuginfo0:4.8.0-16.el6_1.2
Red Hat rhel eus 6.1rpm-devel0:4.8.0-16.el6_1.2
Red Hat rhel eus 6.1rpm-libs0:4.8.0-16.el6_1.2
Red Hat rhel eus 6.1rpm-python0:4.8.0-16.el6_1.2
Red Hat rhel mission critical 5.3popt0:1.10.2.3-9.el5_3.3
Red Hat rhel mission critical 5.3rpm0:4.4.2.3-9.el5_3.3
Red Hat rhel mission critical 5.3rpm-apidocs0:4.4.2.3-9.el5_3.3
Red Hat rhel mission critical 5.3rpm-build0:4.4.2.3-9.el5_3.3
Red Hat rhel mission critical 5.3rpm-debuginfo0:4.4.2.3-9.el5_3.3
Red Hat rhel mission critical 5.3rpm-devel0:4.4.2.3-9.el5_3.3
Red Hat rhel mission critical 5.3rpm-libs0:4.4.2.3-9.el5_3.3
Red Hat rhel mission critical 5.3rpm-python0:4.4.2.3-9.el5_3.3