CVE-2012-6088

The rpmpkgRead function in lib/package.c in RPM 4.10.x before 4.10.2 does not return an error code in certain situations involving an "unparseable signature,"…

published January 18, 2013

CVSS
—
EPSS
2%
Percentile
82.6
In the wild
Unconfirmed
What it is

The rpmpkgRead function in lib/package.c in RPM 4.10.x before 4.10.2 does not return an error code in certain situations involving an "unparseable signature," which allows remote attackers to bypass RPM signature checks via a crafted package.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02246 · 82.6th percentile
Published
2013-01-18T11:00Z
EPSS history
Timeline
  • 18 JAN 11:00Z
    The rpmpkgRead function in lib/package.c in RPM 4.10.x before 4.10.2 does not return an error code in certain situations involving an "unparseable signature,"…
    cvelistv5