CVE-2012-0060

RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary…

published June 4, 2012

CVSS
—
EPSS
4%
Percentile
91.0
In the wild
Unconfirmed
What it is

RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an invalid region tag in a package header to the (1) headerLoad, (2) rpmReadSignature, or (3) headerVerify function.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04294 · 91.0th percentile
Published
2012-06-04T20:00Z
EPSS history
Timeline
  • 04 JUN 20:00Z
    RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary…
    cvelistv5