Every CVE Search/ Get API key

CVE-2012-0060

RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause...

6.8 MediumFix available

RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an invalid region tag in a package header to the (1) headerLoad, (2) rpmReadSignature, or (3) headerVerify function.

Exploit likelihood

4.29%Down 2.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.8

RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an invalid region tag in a package header to the (1) headerLoad, (2) rpmReadSignature, or (3) headerVerify function.

Record
CVE-2012-0060
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an invalid region tag in a package header to the (1) headerLoad, (2) rpmReadSignature, or (3) headerVerify function.

Record
CVE-2012-0060
Updated
2026-11-02
EUVDEUVD-2012-0098 No score

RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an invalid region tag in a package header to the (1) headerLoad, (2) rpmReadSignature, or (3) headerVerify function.

Record
EUVD-2012-0098
Updated
2026-11-03
GitHub AdvisoriesGHSA-j6wj-cqmg-hvcm No score

RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause...

RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an invalid region tag in a package header to the (1) headerLoad, (2) rpmReadSignature, or (3) headerVerify function.

Record
GHSA-j6wj-cqmg-hvcm
Weakness
CWE-20
Updated
2026-11-02
OSVBELL-CVE-2012-0060 6.8

CVE-2012-0060 does not affect BellSoft software

Record
BELL-CVE-2012-0060
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Updated
2026-11-02
OSV No score

RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an invalid region tag in a package header to the (1) headerLoad, (2) rpmReadSignature, or (3) headerVerify function.

Record
CVE-2012-0060
Updated
2026-11-02
OSVDEBIAN-CVE-2012-0060 No score

RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an invalid region tag in a package header to the (1) headerLoad, (2) rpmReadSignature, or (3) headerVerify function.

Record
DEBIAN-CVE-2012-0060
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
rpm
Debian:12
before 4.9.1.3-1
4.9.1.3-1
rpm
Debian:13
before 4.9.1.3-1
4.9.1.3-1
rpm
Debian:14
before 4.9.1.3-1
4.9.1.3-1
rpm
Debian:6.0
From an advisory covering 5 CVEs
before 4.8.1-6+squeeze2, plus listed versions
4.8.1-64.8.1-6+squeeze1
4.8.1-6+squeeze2
popt
Red Hat:rhel_els:3::as
From an advisory covering 3 CVEs
before 0:1.8.2-36_nonptl
0:1.8.2-36_nonptl
rpm
Red Hat:rhel_els:3::as
From an advisory covering 3 CVEs
before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
rpm-build
Red Hat:rhel_els:3::as
From an advisory covering 3 CVEs
before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
rpm-debuginfo
Red Hat:rhel_els:3::as
From an advisory covering 3 CVEs
before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
rpm-devel
Red Hat:rhel_els:3::as
From an advisory covering 3 CVEs
before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
rpm-libs
Red Hat:rhel_els:3::as
From an advisory covering 3 CVEs
before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
Show 104 moreShow less
Affected packages
PackageAffectedFixed
rpm-python
Red Hat:rhel_els:3::as
From an advisory covering 3 CVEs
before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
popt
Red Hat:rhel_els:3::es
From an advisory covering 3 CVEs
before 0:1.8.2-36_nonptl
0:1.8.2-36_nonptl
rpm
Red Hat:rhel_els:3::es
From an advisory covering 3 CVEs
before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
rpm-build
Red Hat:rhel_els:3::es
From an advisory covering 3 CVEs
before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
rpm-debuginfo
Red Hat:rhel_els:3::es
From an advisory covering 3 CVEs
before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
rpm-devel
Red Hat:rhel_els:3::es
From an advisory covering 3 CVEs
before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
rpm-libs
Red Hat:rhel_els:3::es
From an advisory covering 3 CVEs
before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
rpm-python
Red Hat:rhel_els:3::es
From an advisory covering 3 CVEs
before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
popt
Red Hat:rhel_els:4::as
From an advisory covering 3 CVEs
before 0:1.9.1-36_nonptl.el4
0:1.9.1-36_nonptl.el4
rpm
Red Hat:rhel_els:4::as
From an advisory covering 3 CVEs
before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
rpm-build
Red Hat:rhel_els:4::as
From an advisory covering 3 CVEs
before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
rpm-debuginfo
Red Hat:rhel_els:4::as
From an advisory covering 3 CVEs
before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
rpm-devel
Red Hat:rhel_els:4::as
From an advisory covering 3 CVEs
before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
rpm-libs
Red Hat:rhel_els:4::as
From an advisory covering 3 CVEs
before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
rpm-python
Red Hat:rhel_els:4::as
From an advisory covering 3 CVEs
before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
popt
Red Hat:rhel_els:4::es
From an advisory covering 3 CVEs
before 0:1.9.1-36_nonptl.el4
0:1.9.1-36_nonptl.el4
rpm
Red Hat:rhel_els:4::es
From an advisory covering 3 CVEs
before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
rpm-build
Red Hat:rhel_els:4::es
From an advisory covering 3 CVEs
before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
rpm-debuginfo
Red Hat:rhel_els:4::es
From an advisory covering 3 CVEs
before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
rpm-devel
Red Hat:rhel_els:4::es
From an advisory covering 3 CVEs
before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
rpm-libs
Red Hat:rhel_els:4::es
From an advisory covering 3 CVEs
before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
rpm-python
Red Hat:rhel_els:4::es
From an advisory covering 3 CVEs
before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
popt
Red Hat:enterprise_linux:5::client
From an advisory covering 3 CVEs
before 0:1.10.2.3-28.el5_8
0:1.10.2.3-28.el5_8
rpm
Red Hat:enterprise_linux:5::client
From an advisory covering 3 CVEs
before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 3 CVEs
before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-libs
Red Hat:enterprise_linux:5::client
From an advisory covering 3 CVEs
before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-python
Red Hat:enterprise_linux:5::client
From an advisory covering 3 CVEs
before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 3 CVEs
before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-apidocs
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 3 CVEs
before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-build
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 3 CVEs
before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-debuginfo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 3 CVEs
before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-devel
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 3 CVEs
before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
popt
Red Hat:rhel_mission_critical:5.3
From an advisory covering 3 CVEs
before 0:1.10.2.3-9.el5_3.3
0:1.10.2.3-9.el5_3.3
rpm
Red Hat:rhel_mission_critical:5.3
From an advisory covering 3 CVEs
before 0:4.4.2.3-9.el5_3.3
0:4.4.2.3-9.el5_3.3
rpm-apidocs
Red Hat:rhel_mission_critical:5.3
From an advisory covering 3 CVEs
before 0:4.4.2.3-9.el5_3.3
0:4.4.2.3-9.el5_3.3
rpm-build
Red Hat:rhel_mission_critical:5.3
From an advisory covering 3 CVEs
before 0:4.4.2.3-9.el5_3.3
0:4.4.2.3-9.el5_3.3
rpm-debuginfo
Red Hat:rhel_mission_critical:5.3
From an advisory covering 3 CVEs
before 0:4.4.2.3-9.el5_3.3
0:4.4.2.3-9.el5_3.3
rpm-devel
Red Hat:rhel_mission_critical:5.3
From an advisory covering 3 CVEs
before 0:4.4.2.3-9.el5_3.3
0:4.4.2.3-9.el5_3.3
rpm-libs
Red Hat:rhel_mission_critical:5.3
From an advisory covering 3 CVEs
before 0:4.4.2.3-9.el5_3.3
0:4.4.2.3-9.el5_3.3
rpm-python
Red Hat:rhel_mission_critical:5.3
From an advisory covering 3 CVEs
before 0:4.4.2.3-9.el5_3.3
0:4.4.2.3-9.el5_3.3
popt
Red Hat:rhel_eus:5.6
From an advisory covering 3 CVEs
before 0:1.10.2.3-22.el5_6.3
0:1.10.2.3-22.el5_6.3
rpm
Red Hat:rhel_eus:5.6
From an advisory covering 3 CVEs
before 0:4.4.2.3-22.el5_6.3
0:4.4.2.3-22.el5_6.3
rpm-apidocs
Red Hat:rhel_eus:5.6
From an advisory covering 3 CVEs
before 0:4.4.2.3-22.el5_6.3
0:4.4.2.3-22.el5_6.3
rpm-build
Red Hat:rhel_eus:5.6
From an advisory covering 3 CVEs
before 0:4.4.2.3-22.el5_6.3
0:4.4.2.3-22.el5_6.3
rpm-debuginfo
Red Hat:rhel_eus:5.6
From an advisory covering 3 CVEs
before 0:4.4.2.3-22.el5_6.3
0:4.4.2.3-22.el5_6.3
rpm-devel
Red Hat:rhel_eus:5.6
From an advisory covering 3 CVEs
before 0:4.4.2.3-22.el5_6.3
0:4.4.2.3-22.el5_6.3
rpm-libs
Red Hat:rhel_eus:5.6
From an advisory covering 3 CVEs
before 0:4.4.2.3-22.el5_6.3
0:4.4.2.3-22.el5_6.3
rpm-python
Red Hat:rhel_eus:5.6
From an advisory covering 3 CVEs
before 0:4.4.2.3-22.el5_6.3
0:4.4.2.3-22.el5_6.3
popt
Red Hat:enterprise_linux:5::server
From an advisory covering 3 CVEs
before 0:1.10.2.3-28.el5_8
0:1.10.2.3-28.el5_8
rpm
Red Hat:enterprise_linux:5::server
From an advisory covering 3 CVEs
before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-apidocs
Red Hat:enterprise_linux:5::server
From an advisory covering 3 CVEs
before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-build
Red Hat:enterprise_linux:5::server
From an advisory covering 3 CVEs
before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 3 CVEs
before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 3 CVEs
before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-libs
Red Hat:enterprise_linux:5::server
From an advisory covering 3 CVEs
before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-python
Red Hat:enterprise_linux:5::server
From an advisory covering 3 CVEs
before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-libs
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-python
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-apidocs
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-build
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-cron
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-devel
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-libs
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-python
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-apidocs
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-build
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-cron
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-devel
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm
Red Hat:rhel_eus:6.0
From an advisory covering 3 CVEs
before 0:4.8.0-12.el6_0.2
0:4.8.0-12.el6_0.2
rpm-build
Red Hat:rhel_eus:6.0
From an advisory covering 3 CVEs
before 0:4.8.0-12.el6_0.2
0:4.8.0-12.el6_0.2
rpm-debuginfo
Red Hat:rhel_eus:6.0
From an advisory covering 3 CVEs
before 0:4.8.0-12.el6_0.2
0:4.8.0-12.el6_0.2
rpm-devel
Red Hat:rhel_eus:6.0
From an advisory covering 3 CVEs
before 0:4.8.0-12.el6_0.2
0:4.8.0-12.el6_0.2
rpm-libs
Red Hat:rhel_eus:6.0
From an advisory covering 3 CVEs
before 0:4.8.0-12.el6_0.2
0:4.8.0-12.el6_0.2
rpm-python
Red Hat:rhel_eus:6.0
From an advisory covering 3 CVEs
before 0:4.8.0-12.el6_0.2
0:4.8.0-12.el6_0.2
rpm
Red Hat:rhel_eus:6.1
From an advisory covering 3 CVEs
before 0:4.8.0-16.el6_1.2
0:4.8.0-16.el6_1.2
rpm-build
Red Hat:rhel_eus:6.1
From an advisory covering 3 CVEs
before 0:4.8.0-16.el6_1.2
0:4.8.0-16.el6_1.2
rpm-debuginfo
Red Hat:rhel_eus:6.1
From an advisory covering 3 CVEs
before 0:4.8.0-16.el6_1.2
0:4.8.0-16.el6_1.2
rpm-devel
Red Hat:rhel_eus:6.1
From an advisory covering 3 CVEs
before 0:4.8.0-16.el6_1.2
0:4.8.0-16.el6_1.2
rpm-libs
Red Hat:rhel_eus:6.1
From an advisory covering 3 CVEs
before 0:4.8.0-16.el6_1.2
0:4.8.0-16.el6_1.2
rpm-python
Red Hat:rhel_eus:6.1
From an advisory covering 3 CVEs
before 0:4.8.0-16.el6_1.2
0:4.8.0-16.el6_1.2
rpm
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-build
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-libs
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-python
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-apidocs
Red Hat:rhel_eus:6.0
From an advisory covering 3 CVEs
before 0:4.8.0-12.el6_0.2
0:4.8.0-12.el6_0.2
rpm-cron
Red Hat:rhel_eus:6.0
From an advisory covering 3 CVEs
before 0:4.8.0-12.el6_0.2
0:4.8.0-12.el6_0.2
rpm-apidocs
Red Hat:rhel_eus:6.1
From an advisory covering 3 CVEs
before 0:4.8.0-16.el6_1.2
0:4.8.0-16.el6_1.2
rpm-cron
Red Hat:rhel_eus:6.1
From an advisory covering 3 CVEs
before 0:4.8.0-16.el6_1.2
0:4.8.0-16.el6_1.2
rpm-apidocs
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-cron
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-build
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-devel
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-libs
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-python
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-apidocs
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-cron
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-0060 is a medium vulnerability (CVSS 6.8) in Rpm, published June 4, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.29%, the 91st percentile. Fixed in rpm 4.9.1.3-1.

References

Show 34 moreShow less
MoveEnter Open