CVE-2012-0061

The headerLoad function in lib/header.c in RPM before 4.9.1.3 does not properly validate region tags, which allows user-assisted remote attackers to cause a…

published June 4, 2012

CVSS
—
EPSS
4%
Percentile
91.0
In the wild
Unconfirmed
What it is

The headerLoad function in lib/header.c in RPM before 4.9.1.3 does not properly validate region tags, which allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large region size in a package header.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04294 · 91.0th percentile
Published
2012-06-04T20:00Z
EPSS history
Timeline
  • 04 JUN 20:00Z
    The headerLoad function in lib/header.c in RPM before 4.9.1.3 does not properly validate region tags, which allows user-assisted remote attackers to cause a…
    cvelistv5