--%> SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)
[Forgot Password]
Login  Register Subscribe

23631

 
 

115038

 
 

96174

 
 

909

 
 

78077

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2012-0815

Date: (C)2012-06-04   (M)2017-08-29
 
CVSS Score: 6.8Access Vector: NETWORK
Exploitability Subscore: 8.6Access Complexity: MEDIUM
Impact Subscore: 6.4Authentication: NONE
 Confidentiality: PARTIAL
 Integrity: PARTIAL
 Availability: PARTIAL











The headerVerifyInfo function in lib/header.c in RPM before 4.9.1.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a negative value in a region offset of a package header, which is not properly handled in a numeric range comparison.

Reference:
SECTRACK-1026882
SECUNIA-48651
SECUNIA-48716
SECUNIA-49110
BID-52865
OSVDB-81009
FEDORA-2012-5298
FEDORA-2012-5420
FEDORA-2012-5421
IAVM:2012-A-0148
IAVM:2012-A-0153
RHSA-2012:0451
RHSA-2012:0531
USN-1695-1
http://rpm.org/gitweb?p=rpm.git;a=commitdiff;h=472e569562d4c90d7a298080e0052856aa7fa86b
http://rpm.org/gitweb?p=rpm.git;a=commitdiff;h=858a328cd0f7d4bcd8500c78faaf00e4f8033df6
http://rpm.org/wiki/Releases/4.9.1.3
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
https://bugzilla.redhat.com/show_bug.cgi?id=744104
openSUSE-SU-2012:0588
openSUSE-SU-2012:0589
rpm-headerverifyinfo-code-execution(74581)

CPE    104
cpe:/a:rpm:rpm:4.0.2
cpe:/a:rpm:rpm:4.0.3
cpe:/a:rpm:rpm:4.0.1
cpe:/a:rpm:rpm:2.5.5
...
CWE    1
CWE-189
OVAL    9
oval:org.secpod.oval:def:302832
oval:org.secpod.oval:def:103624
oval:org.secpod.oval:def:202307
oval:org.secpod.oval:def:202308
...

© 2013 SecPod Technologies