CVE-2012-0061
Fixed in a distro release EPSS 4%
The headerLoad function in lib/header.c in RPM before 4.9.1.3 does not properly validate region tags, which allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large region size in a package header.
Products: rpm
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | rpm | 4.9.1.3-1 |
| Debian 13 | rpm | 4.9.1.3-1 |
| Debian 14 | rpm | 4.9.1.3-1 |
| Debian 6.0 | rpm | 4.8.1-6+squeeze2 |
| Red Hat Enterprise Linux 5 | popt | 0:1.10.2.3-28.el5_8 |
| Red Hat Enterprise Linux 5 | rpm | 0:4.4.2.3-28.el5_8 |
| Red Hat Enterprise Linux 5 | rpm-apidocs | 0:4.4.2.3-28.el5_8 |
| Red Hat Enterprise Linux 5 | rpm-build | 0:4.4.2.3-28.el5_8 |
| Red Hat Enterprise Linux 5 | rpm-debuginfo | 0:4.4.2.3-28.el5_8 |
| Red Hat Enterprise Linux 5 | rpm-devel | 0:4.4.2.3-28.el5_8 |
| Red Hat Enterprise Linux 5 | rpm-libs | 0:4.4.2.3-28.el5_8 |
| Red Hat Enterprise Linux 5 | rpm-python | 0:4.4.2.3-28.el5_8 |
| Red Hat Enterprise Linux 6 | rpm | 0:4.8.0-19.el6_2.1 |
| Red Hat Enterprise Linux 6 | rpm-apidocs | 0:4.8.0-19.el6_2.1 |
| Red Hat Enterprise Linux 6 | rpm-build | 0:4.8.0-19.el6_2.1 |
| Red Hat Enterprise Linux 6 | rpm-cron | 0:4.8.0-19.el6_2.1 |
| Red Hat Enterprise Linux 6 | rpm-debuginfo | 0:4.8.0-19.el6_2.1 |
| Red Hat Enterprise Linux 6 | rpm-devel | 0:4.8.0-19.el6_2.1 |
| Red Hat Enterprise Linux 6 | rpm-libs | 0:4.8.0-19.el6_2.1 |
| Red Hat Enterprise Linux 6 | rpm-python | 0:4.8.0-19.el6_2.1 |
| Red Hat rhel els 3 | popt | 0:1.8.2-36_nonptl |
| Red Hat rhel els 3 | rpm | 0:4.2.3-36_nonptl |
| Red Hat rhel els 3 | rpm-build | 0:4.2.3-36_nonptl |
| Red Hat rhel els 3 | rpm-debuginfo | 0:4.2.3-36_nonptl |
| Red Hat rhel els 3 | rpm-devel | 0:4.2.3-36_nonptl |
| Red Hat rhel els 3 | rpm-libs | 0:4.2.3-36_nonptl |
| Red Hat rhel els 3 | rpm-python | 0:4.2.3-36_nonptl |
| Red Hat rhel els 4 | popt | 0:1.9.1-36_nonptl.el4 |
| Red Hat rhel els 4 | rpm | 0:4.3.3-36_nonptl.el4 |
| Red Hat rhel els 4 | rpm-build | 0:4.3.3-36_nonptl.el4 |
| Red Hat rhel els 4 | rpm-debuginfo | 0:4.3.3-36_nonptl.el4 |
| Red Hat rhel els 4 | rpm-devel | 0:4.3.3-36_nonptl.el4 |
| Red Hat rhel els 4 | rpm-libs | 0:4.3.3-36_nonptl.el4 |
| Red Hat rhel els 4 | rpm-python | 0:4.3.3-36_nonptl.el4 |
| Red Hat rhel eus 5.6 | popt | 0:1.10.2.3-22.el5_6.3 |
| Red Hat rhel eus 5.6 | rpm | 0:4.4.2.3-22.el5_6.3 |
| Red Hat rhel eus 5.6 | rpm-apidocs | 0:4.4.2.3-22.el5_6.3 |
| Red Hat rhel eus 5.6 | rpm-build | 0:4.4.2.3-22.el5_6.3 |
| Red Hat rhel eus 5.6 | rpm-debuginfo | 0:4.4.2.3-22.el5_6.3 |
| Red Hat rhel eus 5.6 | rpm-devel | 0:4.4.2.3-22.el5_6.3 |
| Red Hat rhel eus 5.6 | rpm-libs | 0:4.4.2.3-22.el5_6.3 |
| Red Hat rhel eus 5.6 | rpm-python | 0:4.4.2.3-22.el5_6.3 |
| Red Hat rhel eus 6.0 | rpm | 0:4.8.0-12.el6_0.2 |
| Red Hat rhel eus 6.0 | rpm-apidocs | 0:4.8.0-12.el6_0.2 |
| Red Hat rhel eus 6.0 | rpm-build | 0:4.8.0-12.el6_0.2 |
| Red Hat rhel eus 6.0 | rpm-cron | 0:4.8.0-12.el6_0.2 |
| Red Hat rhel eus 6.0 | rpm-debuginfo | 0:4.8.0-12.el6_0.2 |
| Red Hat rhel eus 6.0 | rpm-devel | 0:4.8.0-12.el6_0.2 |
| Red Hat rhel eus 6.0 | rpm-libs | 0:4.8.0-12.el6_0.2 |
| Red Hat rhel eus 6.0 | rpm-python | 0:4.8.0-12.el6_0.2 |
| Red Hat rhel eus 6.1 | rpm | 0:4.8.0-16.el6_1.2 |
| Red Hat rhel eus 6.1 | rpm-apidocs | 0:4.8.0-16.el6_1.2 |
| Red Hat rhel eus 6.1 | rpm-build | 0:4.8.0-16.el6_1.2 |
| Red Hat rhel eus 6.1 | rpm-cron | 0:4.8.0-16.el6_1.2 |
| Red Hat rhel eus 6.1 | rpm-debuginfo | 0:4.8.0-16.el6_1.2 |
| Red Hat rhel eus 6.1 | rpm-devel | 0:4.8.0-16.el6_1.2 |
| Red Hat rhel eus 6.1 | rpm-libs | 0:4.8.0-16.el6_1.2 |
| Red Hat rhel eus 6.1 | rpm-python | 0:4.8.0-16.el6_1.2 |
| Red Hat rhel mission critical 5.3 | popt | 0:1.10.2.3-9.el5_3.3 |
| Red Hat rhel mission critical 5.3 | rpm | 0:4.4.2.3-9.el5_3.3 |
| Red Hat rhel mission critical 5.3 | rpm-apidocs | 0:4.4.2.3-9.el5_3.3 |
| Red Hat rhel mission critical 5.3 | rpm-build | 0:4.4.2.3-9.el5_3.3 |
| Red Hat rhel mission critical 5.3 | rpm-debuginfo | 0:4.4.2.3-9.el5_3.3 |
| Red Hat rhel mission critical 5.3 | rpm-devel | 0:4.4.2.3-9.el5_3.3 |
| Red Hat rhel mission critical 5.3 | rpm-libs | 0:4.4.2.3-9.el5_3.3 |
| Red Hat rhel mission critical 5.3 | rpm-python | 0:4.4.2.3-9.el5_3.3 |