CVE-2012-4556
The token processing system (pki-tps) in Red Hat Certificate System (RHCS) before 8.1.3 allows...
CVE-2012-4556 is a medium vulnerability (CVSS 4.0) in Redhat Certificate System, published January 4, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.19%, the 68th percentile. Fixed in pki-common 0:8.1.3-2.el5pki.
The token processing system (pki-tps) in Red Hat Certificate System (RHCS) before 8.1.3 allows remote attackers to cause a denial of service (Apache httpd web server child process restart) via certain unspecified empty search fields in a user certificate search query.
Exploit likelihood
What each source reports
NVD Score used
4.0
The token processing system (pki-tps) in Red Hat Certificate System (RHCS) before 8.1.3 allows remote attackers to cause a denial of service (Apache httpd web server child process restart) via certain unspecified empty search fields in a user certificate search query.
- Record
CVE-2012-4556- CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
The token processing system (pki-tps) in Red Hat Certificate System (RHCS) before 8.1.3 allows remote attackers to cause a denial of service (Apache httpd web server child process restart) via certain unspecified empty search fields in a user certificate search query.
- Record
CVE-2012-4556- Updated
- 2026-11-02
EUVDEUVD-2012-4484 No score
The token processing system (pki-tps) in Red Hat Certificate System (RHCS) before 8.1.3 allows remote attackers to cause a denial of service (Apache httpd web server child process restart) via certain unspecified empty search fields in a user certificate search query.
- Record
EUVD-2012-4484- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fw6f-r68r-6fjx No score
The token processing system (pki-tps) in Red Hat Certificate System (RHCS) before 8.1.3 allows...
The token processing system (pki-tps) in Red Hat Certificate System (RHCS) before 8.1.3 allows remote attackers to cause a denial of service (Apache httpd web server child process restart) via certain unspecified empty search fields in a user certificate search query.
- Record
GHSA-fw6f-r68r-6fjx- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
pki-commonRed Hat:certificate_system:8::el5 |
before 0:8.1.3-2.el5pki | 0:8.1.3-2.el5pki |
pki-common-javadocRed Hat:certificate_system:8::el5 |
before 0:8.1.3-2.el5pki | 0:8.1.3-2.el5pki |
pki-tpsRed Hat:certificate_system:8::el5 |
before 0:8.1.3-2.el5pki | 0:8.1.3-2.el5pki |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
securitytracker.com/id?1027846
rhn.redhat.com/errata/RHSA-2012-1550.html
bugzilla.redhat.com/show_bug.cgi?id=869579
secunia.com/advisories/51482
securityfocus.com/bid/56843
nvd.nist.gov/vuln/detail/CVE-2012-4556
Show 14 moreShow less
github.com/advisories/GHSA-fw6f-r68r-6fjx
access.redhat.com/errata/RHSA-2012:1550
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=864397
bugzilla.redhat.com/show_bug.cgi?id=869570
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1550.json
access.redhat.com/security/cve/CVE-2012-4543
cve.org/CVERecord?id=CVE-2012-4543
nvd.nist.gov/vuln/detail/CVE-2012-4543
access.redhat.com/security/cve/CVE-2012-4555
cve.org/CVERecord?id=CVE-2012-4555
nvd.nist.gov/vuln/detail/CVE-2012-4555
access.redhat.com/security/cve/CVE-2012-4556
cve.org/CVERecord?id=CVE-2012-4556