Every CVE Search/ Get API key

CVE-2012-0060

RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause...

6.8 MediumFix available

RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an invalid region tag in a package header to the (1) headerLoad, (2) rpmReadSignature, or (3) headerVerify function.

Exploit likelihood

4.29%Down 2.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.8

RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an invalid region tag in a package header to the (1) headerLoad, (2) rpmReadSignature, or (3) headerVerify function.

Record
CVE-2012-0060
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an invalid region tag in a package header to the (1) headerLoad, (2) rpmReadSignature, or (3) headerVerify function.

Record
CVE-2012-0060
Updated
2026-11-02
EUVDEUVD-2012-0098 No score

RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an invalid region tag in a package header to the (1) headerLoad, (2) rpmReadSignature, or (3) headerVerify function.

Record
EUVD-2012-0098
Updated
2026-11-03
GitHub AdvisoriesGHSA-j6wj-cqmg-hvcm No score

RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause...

RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an invalid region tag in a package header to the (1) headerLoad, (2) rpmReadSignature, or (3) headerVerify function.

Record
GHSA-j6wj-cqmg-hvcm
Weakness
CWE-20
Updated
2026-11-02
OSVBELL-CVE-2012-0060 6.8

CVE-2012-0060 does not affect BellSoft software

Record
BELL-CVE-2012-0060
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Updated
2026-11-02
OSV No score

RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an invalid region tag in a package header to the (1) headerLoad, (2) rpmReadSignature, or (3) headerVerify function.

Record
CVE-2012-0060
Updated
2026-11-02
OSVDEBIAN-CVE-2012-0060 No score

RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an invalid region tag in a package header to the (1) headerLoad, (2) rpmReadSignature, or (3) headerVerify function.

Record
DEBIAN-CVE-2012-0060
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
rpm
Debian:12
 before 4.9.1.3-1
4.9.1.3-1
rpm
Debian:13
 before 4.9.1.3-1
4.9.1.3-1
rpm
Debian:14
 before 4.9.1.3-1
4.9.1.3-1
rpm
Debian:6.0
 before 4.8.1-6+squeeze2, plus listed versions
4.8.1-64.8.1-6+squeeze1
4.8.1-6+squeeze2
popt
Red Hat:rhel_els:3::as
 before 0:1.8.2-36_nonptl
0:1.8.2-36_nonptl
rpm
Red Hat:rhel_els:3::as
 before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
rpm-build
Red Hat:rhel_els:3::as
 before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
rpm-debuginfo
Red Hat:rhel_els:3::as
 before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
rpm-devel
Red Hat:rhel_els:3::as
 before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
rpm-libs
Red Hat:rhel_els:3::as
 before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
Show 104 moreShow less
Affected packages
PackageAffectedFixed
rpm-python
Red Hat:rhel_els:3::as
 before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
popt
Red Hat:rhel_els:3::es
 before 0:1.8.2-36_nonptl
0:1.8.2-36_nonptl
rpm
Red Hat:rhel_els:3::es
 before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
rpm-build
Red Hat:rhel_els:3::es
 before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
rpm-debuginfo
Red Hat:rhel_els:3::es
 before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
rpm-devel
Red Hat:rhel_els:3::es
 before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
rpm-libs
Red Hat:rhel_els:3::es
 before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
rpm-python
Red Hat:rhel_els:3::es
 before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
popt
Red Hat:rhel_els:4::as
 before 0:1.9.1-36_nonptl.el4
0:1.9.1-36_nonptl.el4
rpm
Red Hat:rhel_els:4::as
 before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
rpm-build
Red Hat:rhel_els:4::as
 before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
rpm-debuginfo
Red Hat:rhel_els:4::as
 before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
rpm-devel
Red Hat:rhel_els:4::as
 before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
rpm-libs
Red Hat:rhel_els:4::as
 before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
rpm-python
Red Hat:rhel_els:4::as
 before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
popt
Red Hat:rhel_els:4::es
 before 0:1.9.1-36_nonptl.el4
0:1.9.1-36_nonptl.el4
rpm
Red Hat:rhel_els:4::es
 before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
rpm-build
Red Hat:rhel_els:4::es
 before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
rpm-debuginfo
Red Hat:rhel_els:4::es
 before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
rpm-devel
Red Hat:rhel_els:4::es
 before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
rpm-libs
Red Hat:rhel_els:4::es
 before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
rpm-python
Red Hat:rhel_els:4::es
 before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
popt
Red Hat:enterprise_linux:5::client
 before 0:1.10.2.3-28.el5_8
0:1.10.2.3-28.el5_8
rpm
Red Hat:enterprise_linux:5::client
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-libs
Red Hat:enterprise_linux:5::client
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-python
Red Hat:enterprise_linux:5::client
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm
Red Hat:enterprise_linux:5::client_workstation
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-apidocs
Red Hat:enterprise_linux:5::client_workstation
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-build
Red Hat:enterprise_linux:5::client_workstation
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
popt
Red Hat:rhel_mission_critical:5.3
 before 0:1.10.2.3-9.el5_3.3
0:1.10.2.3-9.el5_3.3
rpm
Red Hat:rhel_mission_critical:5.3
 before 0:4.4.2.3-9.el5_3.3
0:4.4.2.3-9.el5_3.3
rpm-apidocs
Red Hat:rhel_mission_critical:5.3
 before 0:4.4.2.3-9.el5_3.3
0:4.4.2.3-9.el5_3.3
rpm-build
Red Hat:rhel_mission_critical:5.3
 before 0:4.4.2.3-9.el5_3.3
0:4.4.2.3-9.el5_3.3
rpm-debuginfo
Red Hat:rhel_mission_critical:5.3
 before 0:4.4.2.3-9.el5_3.3
0:4.4.2.3-9.el5_3.3
rpm-devel
Red Hat:rhel_mission_critical:5.3
 before 0:4.4.2.3-9.el5_3.3
0:4.4.2.3-9.el5_3.3
rpm-libs
Red Hat:rhel_mission_critical:5.3
 before 0:4.4.2.3-9.el5_3.3
0:4.4.2.3-9.el5_3.3
rpm-python
Red Hat:rhel_mission_critical:5.3
 before 0:4.4.2.3-9.el5_3.3
0:4.4.2.3-9.el5_3.3
popt
Red Hat:rhel_eus:5.6
 before 0:1.10.2.3-22.el5_6.3
0:1.10.2.3-22.el5_6.3
rpm
Red Hat:rhel_eus:5.6
 before 0:4.4.2.3-22.el5_6.3
0:4.4.2.3-22.el5_6.3
rpm-apidocs
Red Hat:rhel_eus:5.6
 before 0:4.4.2.3-22.el5_6.3
0:4.4.2.3-22.el5_6.3
rpm-build
Red Hat:rhel_eus:5.6
 before 0:4.4.2.3-22.el5_6.3
0:4.4.2.3-22.el5_6.3
rpm-debuginfo
Red Hat:rhel_eus:5.6
 before 0:4.4.2.3-22.el5_6.3
0:4.4.2.3-22.el5_6.3
rpm-devel
Red Hat:rhel_eus:5.6
 before 0:4.4.2.3-22.el5_6.3
0:4.4.2.3-22.el5_6.3
rpm-libs
Red Hat:rhel_eus:5.6
 before 0:4.4.2.3-22.el5_6.3
0:4.4.2.3-22.el5_6.3
rpm-python
Red Hat:rhel_eus:5.6
 before 0:4.4.2.3-22.el5_6.3
0:4.4.2.3-22.el5_6.3
popt
Red Hat:enterprise_linux:5::server
 before 0:1.10.2.3-28.el5_8
0:1.10.2.3-28.el5_8
rpm
Red Hat:enterprise_linux:5::server
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-apidocs
Red Hat:enterprise_linux:5::server
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-build
Red Hat:enterprise_linux:5::server
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-devel
Red Hat:enterprise_linux:5::server
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-libs
Red Hat:enterprise_linux:5::server
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-python
Red Hat:enterprise_linux:5::server
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm
Red Hat:enterprise_linux:6::client
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-libs
Red Hat:enterprise_linux:6::client
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-python
Red Hat:enterprise_linux:6::client
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-apidocs
Red Hat:enterprise_linux:6::client
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-build
Red Hat:enterprise_linux:6::client
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-cron
Red Hat:enterprise_linux:6::client
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-devel
Red Hat:enterprise_linux:6::client
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm
Red Hat:enterprise_linux:6::computenode
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-libs
Red Hat:enterprise_linux:6::computenode
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-python
Red Hat:enterprise_linux:6::computenode
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-apidocs
Red Hat:enterprise_linux:6::computenode
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-build
Red Hat:enterprise_linux:6::computenode
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-cron
Red Hat:enterprise_linux:6::computenode
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-devel
Red Hat:enterprise_linux:6::computenode
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm
Red Hat:rhel_eus:6.0
 before 0:4.8.0-12.el6_0.2
0:4.8.0-12.el6_0.2
rpm-build
Red Hat:rhel_eus:6.0
 before 0:4.8.0-12.el6_0.2
0:4.8.0-12.el6_0.2
rpm-debuginfo
Red Hat:rhel_eus:6.0
 before 0:4.8.0-12.el6_0.2
0:4.8.0-12.el6_0.2
rpm-devel
Red Hat:rhel_eus:6.0
 before 0:4.8.0-12.el6_0.2
0:4.8.0-12.el6_0.2
rpm-libs
Red Hat:rhel_eus:6.0
 before 0:4.8.0-12.el6_0.2
0:4.8.0-12.el6_0.2
rpm-python
Red Hat:rhel_eus:6.0
 before 0:4.8.0-12.el6_0.2
0:4.8.0-12.el6_0.2
rpm
Red Hat:rhel_eus:6.1
 before 0:4.8.0-16.el6_1.2
0:4.8.0-16.el6_1.2
rpm-build
Red Hat:rhel_eus:6.1
 before 0:4.8.0-16.el6_1.2
0:4.8.0-16.el6_1.2
rpm-debuginfo
Red Hat:rhel_eus:6.1
 before 0:4.8.0-16.el6_1.2
0:4.8.0-16.el6_1.2
rpm-devel
Red Hat:rhel_eus:6.1
 before 0:4.8.0-16.el6_1.2
0:4.8.0-16.el6_1.2
rpm-libs
Red Hat:rhel_eus:6.1
 before 0:4.8.0-16.el6_1.2
0:4.8.0-16.el6_1.2
rpm-python
Red Hat:rhel_eus:6.1
 before 0:4.8.0-16.el6_1.2
0:4.8.0-16.el6_1.2
rpm
Red Hat:enterprise_linux:6::server
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-build
Red Hat:enterprise_linux:6::server
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-devel
Red Hat:enterprise_linux:6::server
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-libs
Red Hat:enterprise_linux:6::server
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-python
Red Hat:enterprise_linux:6::server
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-apidocs
Red Hat:rhel_eus:6.0
 before 0:4.8.0-12.el6_0.2
0:4.8.0-12.el6_0.2
rpm-cron
Red Hat:rhel_eus:6.0
 before 0:4.8.0-12.el6_0.2
0:4.8.0-12.el6_0.2
rpm-apidocs
Red Hat:rhel_eus:6.1
 before 0:4.8.0-16.el6_1.2
0:4.8.0-16.el6_1.2
rpm-cron
Red Hat:rhel_eus:6.1
 before 0:4.8.0-16.el6_1.2
0:4.8.0-16.el6_1.2
rpm-apidocs
Red Hat:enterprise_linux:6::server
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-cron
Red Hat:enterprise_linux:6::server
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm
Red Hat:enterprise_linux:6::workstation
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-build
Red Hat:enterprise_linux:6::workstation
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-devel
Red Hat:enterprise_linux:6::workstation
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-libs
Red Hat:enterprise_linux:6::workstation
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-python
Red Hat:enterprise_linux:6::workstation
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-apidocs
Red Hat:enterprise_linux:6::workstation
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-cron
Red Hat:enterprise_linux:6::workstation
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-0060 is a medium vulnerability (CVSS 6.8) in Rpm, published June 4, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.29%, the 91st percentile. Fixed in rpm 4.9.1.3-1.

References

Show 34 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open