Every CVE Search/ Get API key

CVE-2012-0815

The headerVerifyInfo function in lib/header.c in RPM before 4.9.1.3 allows remote attackers to...

6.8 MediumFix available

The headerVerifyInfo function in lib/header.c in RPM before 4.9.1.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a negative value in a region offset of a package header, which is not properly handled in a numeric range comparison.

Exploit likelihood

4.23%Down 2.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.8

The headerVerifyInfo function in lib/header.c in RPM before 4.9.1.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a negative value in a region offset of a package header, which is not properly handled in a numeric range comparison.

Record
CVE-2012-0815
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-189
Updated
2026-11-02
CVE List No score

The headerVerifyInfo function in lib/header.c in RPM before 4.9.1.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a negative value in a region offset of a package header, which is not properly handled in a numeric range comparison.

Record
CVE-2012-0815
Updated
2026-11-02
EUVDEUVD-2012-0842 No score

The headerVerifyInfo function in lib/header.c in RPM before 4.9.1.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a negative value in a region offset of a package header, which is not properly handled in a numeric range comparison.

Record
EUVD-2012-0842
Updated
2026-11-03
GitHub AdvisoriesGHSA-6grx-55mc-2wmq No score

The headerVerifyInfo function in lib/header.c in RPM before 4.9.1.3 allows remote attackers to...

The headerVerifyInfo function in lib/header.c in RPM before 4.9.1.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a negative value in a region offset of a package header, which is not properly handled in a numeric range comparison.

Record
GHSA-6grx-55mc-2wmq
Updated
2026-11-02
OSVBELL-CVE-2012-0815 6.8

CVE-2012-0815 does not affect BellSoft software

Record
BELL-CVE-2012-0815
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Updated
2026-11-02
OSV No score

The headerVerifyInfo function in lib/header.c in RPM before 4.9.1.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a negative value in a region offset of a package header, which is not properly handled in a numeric range comparison.

Record
CVE-2012-0815
Updated
2026-11-02
OSVDEBIAN-CVE-2012-0815 No score

The headerVerifyInfo function in lib/header.c in RPM before 4.9.1.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a negative value in a region offset of a package header, which is not properly handled in a numeric range comparison.

Record
DEBIAN-CVE-2012-0815
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
rpm
Debian:12
 before 4.9.1.3-1
4.9.1.3-1
rpm
Debian:13
 before 4.9.1.3-1
4.9.1.3-1
rpm
Debian:14
 before 4.9.1.3-1
4.9.1.3-1
rpm
Debian:6.0
 before 4.8.1-6+squeeze2, plus listed versions
4.8.1-64.8.1-6+squeeze1
4.8.1-6+squeeze2
popt
Red Hat:rhel_els:3::as
 before 0:1.8.2-36_nonptl
0:1.8.2-36_nonptl
rpm
Red Hat:rhel_els:3::as
 before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
rpm-build
Red Hat:rhel_els:3::as
 before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
rpm-debuginfo
Red Hat:rhel_els:3::as
 before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
rpm-devel
Red Hat:rhel_els:3::as
 before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
rpm-libs
Red Hat:rhel_els:3::as
 before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
Show 104 moreShow less
Affected packages
PackageAffectedFixed
rpm-python
Red Hat:rhel_els:3::as
 before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
popt
Red Hat:rhel_els:3::es
 before 0:1.8.2-36_nonptl
0:1.8.2-36_nonptl
rpm
Red Hat:rhel_els:3::es
 before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
rpm-build
Red Hat:rhel_els:3::es
 before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
rpm-debuginfo
Red Hat:rhel_els:3::es
 before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
rpm-devel
Red Hat:rhel_els:3::es
 before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
rpm-libs
Red Hat:rhel_els:3::es
 before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
rpm-python
Red Hat:rhel_els:3::es
 before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
popt
Red Hat:rhel_els:4::as
 before 0:1.9.1-36_nonptl.el4
0:1.9.1-36_nonptl.el4
rpm
Red Hat:rhel_els:4::as
 before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
rpm-build
Red Hat:rhel_els:4::as
 before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
rpm-debuginfo
Red Hat:rhel_els:4::as
 before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
rpm-devel
Red Hat:rhel_els:4::as
 before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
rpm-libs
Red Hat:rhel_els:4::as
 before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
rpm-python
Red Hat:rhel_els:4::as
 before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
popt
Red Hat:rhel_els:4::es
 before 0:1.9.1-36_nonptl.el4
0:1.9.1-36_nonptl.el4
rpm
Red Hat:rhel_els:4::es
 before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
rpm-build
Red Hat:rhel_els:4::es
 before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
rpm-debuginfo
Red Hat:rhel_els:4::es
 before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
rpm-devel
Red Hat:rhel_els:4::es
 before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
rpm-libs
Red Hat:rhel_els:4::es
 before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
rpm-python
Red Hat:rhel_els:4::es
 before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
popt
Red Hat:enterprise_linux:5::client
 before 0:1.10.2.3-28.el5_8
0:1.10.2.3-28.el5_8
rpm
Red Hat:enterprise_linux:5::client
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-libs
Red Hat:enterprise_linux:5::client
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-python
Red Hat:enterprise_linux:5::client
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm
Red Hat:enterprise_linux:5::client_workstation
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-apidocs
Red Hat:enterprise_linux:5::client_workstation
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-build
Red Hat:enterprise_linux:5::client_workstation
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
popt
Red Hat:rhel_mission_critical:5.3
 before 0:1.10.2.3-9.el5_3.3
0:1.10.2.3-9.el5_3.3
rpm
Red Hat:rhel_mission_critical:5.3
 before 0:4.4.2.3-9.el5_3.3
0:4.4.2.3-9.el5_3.3
rpm-apidocs
Red Hat:rhel_mission_critical:5.3
 before 0:4.4.2.3-9.el5_3.3
0:4.4.2.3-9.el5_3.3
rpm-build
Red Hat:rhel_mission_critical:5.3
 before 0:4.4.2.3-9.el5_3.3
0:4.4.2.3-9.el5_3.3
rpm-debuginfo
Red Hat:rhel_mission_critical:5.3
 before 0:4.4.2.3-9.el5_3.3
0:4.4.2.3-9.el5_3.3
rpm-devel
Red Hat:rhel_mission_critical:5.3
 before 0:4.4.2.3-9.el5_3.3
0:4.4.2.3-9.el5_3.3
rpm-libs
Red Hat:rhel_mission_critical:5.3
 before 0:4.4.2.3-9.el5_3.3
0:4.4.2.3-9.el5_3.3
rpm-python
Red Hat:rhel_mission_critical:5.3
 before 0:4.4.2.3-9.el5_3.3
0:4.4.2.3-9.el5_3.3
popt
Red Hat:rhel_eus:5.6
 before 0:1.10.2.3-22.el5_6.3
0:1.10.2.3-22.el5_6.3
rpm
Red Hat:rhel_eus:5.6
 before 0:4.4.2.3-22.el5_6.3
0:4.4.2.3-22.el5_6.3
rpm-apidocs
Red Hat:rhel_eus:5.6
 before 0:4.4.2.3-22.el5_6.3
0:4.4.2.3-22.el5_6.3
rpm-build
Red Hat:rhel_eus:5.6
 before 0:4.4.2.3-22.el5_6.3
0:4.4.2.3-22.el5_6.3
rpm-debuginfo
Red Hat:rhel_eus:5.6
 before 0:4.4.2.3-22.el5_6.3
0:4.4.2.3-22.el5_6.3
rpm-devel
Red Hat:rhel_eus:5.6
 before 0:4.4.2.3-22.el5_6.3
0:4.4.2.3-22.el5_6.3
rpm-libs
Red Hat:rhel_eus:5.6
 before 0:4.4.2.3-22.el5_6.3
0:4.4.2.3-22.el5_6.3
rpm-python
Red Hat:rhel_eus:5.6
 before 0:4.4.2.3-22.el5_6.3
0:4.4.2.3-22.el5_6.3
popt
Red Hat:enterprise_linux:5::server
 before 0:1.10.2.3-28.el5_8
0:1.10.2.3-28.el5_8
rpm
Red Hat:enterprise_linux:5::server
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-apidocs
Red Hat:enterprise_linux:5::server
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-build
Red Hat:enterprise_linux:5::server
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-devel
Red Hat:enterprise_linux:5::server
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-libs
Red Hat:enterprise_linux:5::server
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-python
Red Hat:enterprise_linux:5::server
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm
Red Hat:enterprise_linux:6::client
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-libs
Red Hat:enterprise_linux:6::client
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-python
Red Hat:enterprise_linux:6::client
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-apidocs
Red Hat:enterprise_linux:6::client
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-build
Red Hat:enterprise_linux:6::client
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-cron
Red Hat:enterprise_linux:6::client
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-devel
Red Hat:enterprise_linux:6::client
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm
Red Hat:enterprise_linux:6::computenode
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-libs
Red Hat:enterprise_linux:6::computenode
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-python
Red Hat:enterprise_linux:6::computenode
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-apidocs
Red Hat:enterprise_linux:6::computenode
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-build
Red Hat:enterprise_linux:6::computenode
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-cron
Red Hat:enterprise_linux:6::computenode
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-devel
Red Hat:enterprise_linux:6::computenode
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm
Red Hat:rhel_eus:6.0
 before 0:4.8.0-12.el6_0.2
0:4.8.0-12.el6_0.2
rpm-build
Red Hat:rhel_eus:6.0
 before 0:4.8.0-12.el6_0.2
0:4.8.0-12.el6_0.2
rpm-debuginfo
Red Hat:rhel_eus:6.0
 before 0:4.8.0-12.el6_0.2
0:4.8.0-12.el6_0.2
rpm-devel
Red Hat:rhel_eus:6.0
 before 0:4.8.0-12.el6_0.2
0:4.8.0-12.el6_0.2
rpm-libs
Red Hat:rhel_eus:6.0
 before 0:4.8.0-12.el6_0.2
0:4.8.0-12.el6_0.2
rpm-python
Red Hat:rhel_eus:6.0
 before 0:4.8.0-12.el6_0.2
0:4.8.0-12.el6_0.2
rpm
Red Hat:rhel_eus:6.1
 before 0:4.8.0-16.el6_1.2
0:4.8.0-16.el6_1.2
rpm-build
Red Hat:rhel_eus:6.1
 before 0:4.8.0-16.el6_1.2
0:4.8.0-16.el6_1.2
rpm-debuginfo
Red Hat:rhel_eus:6.1
 before 0:4.8.0-16.el6_1.2
0:4.8.0-16.el6_1.2
rpm-devel
Red Hat:rhel_eus:6.1
 before 0:4.8.0-16.el6_1.2
0:4.8.0-16.el6_1.2
rpm-libs
Red Hat:rhel_eus:6.1
 before 0:4.8.0-16.el6_1.2
0:4.8.0-16.el6_1.2
rpm-python
Red Hat:rhel_eus:6.1
 before 0:4.8.0-16.el6_1.2
0:4.8.0-16.el6_1.2
rpm
Red Hat:enterprise_linux:6::server
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-build
Red Hat:enterprise_linux:6::server
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-devel
Red Hat:enterprise_linux:6::server
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-libs
Red Hat:enterprise_linux:6::server
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-python
Red Hat:enterprise_linux:6::server
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-apidocs
Red Hat:rhel_eus:6.0
 before 0:4.8.0-12.el6_0.2
0:4.8.0-12.el6_0.2
rpm-cron
Red Hat:rhel_eus:6.0
 before 0:4.8.0-12.el6_0.2
0:4.8.0-12.el6_0.2
rpm-apidocs
Red Hat:rhel_eus:6.1
 before 0:4.8.0-16.el6_1.2
0:4.8.0-16.el6_1.2
rpm-cron
Red Hat:rhel_eus:6.1
 before 0:4.8.0-16.el6_1.2
0:4.8.0-16.el6_1.2
rpm-apidocs
Red Hat:enterprise_linux:6::server
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-cron
Red Hat:enterprise_linux:6::server
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm
Red Hat:enterprise_linux:6::workstation
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-build
Red Hat:enterprise_linux:6::workstation
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-devel
Red Hat:enterprise_linux:6::workstation
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-libs
Red Hat:enterprise_linux:6::workstation
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-python
Red Hat:enterprise_linux:6::workstation
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-apidocs
Red Hat:enterprise_linux:6::workstation
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-cron
Red Hat:enterprise_linux:6::workstation
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-0815 is a medium vulnerability (CVSS 6.8) in Rpm, published June 4, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.23%, the 91st percentile. Fixed in rpm 4.9.1.3-1.

References

Show 34 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open