Every CVE Search/ Get API key

CVE-2012-0061

The headerLoad function in lib/header.c in RPM before 4.9.1.3 does not properly validate region...

6.8 MediumFix available

The headerLoad function in lib/header.c in RPM before 4.9.1.3 does not properly validate region tags, which allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large region size in a package header.

Exploit likelihood

4.29%Down 2.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.8

The headerLoad function in lib/header.c in RPM before 4.9.1.3 does not properly validate region tags, which allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large region size in a package header.

Record
CVE-2012-0061
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

The headerLoad function in lib/header.c in RPM before 4.9.1.3 does not properly validate region tags, which allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large region size in a package header.

Record
CVE-2012-0061
Updated
2026-11-02
EUVDEUVD-2012-0099 No score

The headerLoad function in lib/header.c in RPM before 4.9.1.3 does not properly validate region tags, which allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large region size in a package header.

Record
EUVD-2012-0099
Updated
2026-11-03
GitHub AdvisoriesGHSA-v3v4-hffr-vr89 No score

The headerLoad function in lib/header.c in RPM before 4.9.1.3 does not properly validate region...

The headerLoad function in lib/header.c in RPM before 4.9.1.3 does not properly validate region tags, which allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large region size in a package header.

Record
GHSA-v3v4-hffr-vr89
Weakness
CWE-20
Updated
2026-11-02
OSVBELL-CVE-2012-0061 6.8

CVE-2012-0061 does not affect BellSoft software

Record
BELL-CVE-2012-0061
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Updated
2026-11-02
OSV No score

The headerLoad function in lib/header.c in RPM before 4.9.1.3 does not properly validate region tags, which allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large region size in a package header.

Record
CVE-2012-0061
Updated
2026-11-02
OSVDEBIAN-CVE-2012-0061 No score

The headerLoad function in lib/header.c in RPM before 4.9.1.3 does not properly validate region tags, which allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large region size in a package header.

Record
DEBIAN-CVE-2012-0061
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
rpm
Debian:12
 before 4.9.1.3-1
4.9.1.3-1
rpm
Debian:13
 before 4.9.1.3-1
4.9.1.3-1
rpm
Debian:14
 before 4.9.1.3-1
4.9.1.3-1
rpm
Debian:6.0
 before 4.8.1-6+squeeze2, plus listed versions
4.8.1-64.8.1-6+squeeze1
4.8.1-6+squeeze2
popt
Red Hat:rhel_els:3::as
 before 0:1.8.2-36_nonptl
0:1.8.2-36_nonptl
rpm
Red Hat:rhel_els:3::as
 before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
rpm-build
Red Hat:rhel_els:3::as
 before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
rpm-debuginfo
Red Hat:rhel_els:3::as
 before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
rpm-devel
Red Hat:rhel_els:3::as
 before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
rpm-libs
Red Hat:rhel_els:3::as
 before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
Show 104 moreShow less
Affected packages
PackageAffectedFixed
rpm-python
Red Hat:rhel_els:3::as
 before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
popt
Red Hat:rhel_els:3::es
 before 0:1.8.2-36_nonptl
0:1.8.2-36_nonptl
rpm
Red Hat:rhel_els:3::es
 before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
rpm-build
Red Hat:rhel_els:3::es
 before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
rpm-debuginfo
Red Hat:rhel_els:3::es
 before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
rpm-devel
Red Hat:rhel_els:3::es
 before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
rpm-libs
Red Hat:rhel_els:3::es
 before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
rpm-python
Red Hat:rhel_els:3::es
 before 0:4.2.3-36_nonptl
0:4.2.3-36_nonptl
popt
Red Hat:rhel_els:4::as
 before 0:1.9.1-36_nonptl.el4
0:1.9.1-36_nonptl.el4
rpm
Red Hat:rhel_els:4::as
 before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
rpm-build
Red Hat:rhel_els:4::as
 before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
rpm-debuginfo
Red Hat:rhel_els:4::as
 before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
rpm-devel
Red Hat:rhel_els:4::as
 before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
rpm-libs
Red Hat:rhel_els:4::as
 before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
rpm-python
Red Hat:rhel_els:4::as
 before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
popt
Red Hat:rhel_els:4::es
 before 0:1.9.1-36_nonptl.el4
0:1.9.1-36_nonptl.el4
rpm
Red Hat:rhel_els:4::es
 before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
rpm-build
Red Hat:rhel_els:4::es
 before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
rpm-debuginfo
Red Hat:rhel_els:4::es
 before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
rpm-devel
Red Hat:rhel_els:4::es
 before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
rpm-libs
Red Hat:rhel_els:4::es
 before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
rpm-python
Red Hat:rhel_els:4::es
 before 0:4.3.3-36_nonptl.el4
0:4.3.3-36_nonptl.el4
popt
Red Hat:enterprise_linux:5::client
 before 0:1.10.2.3-28.el5_8
0:1.10.2.3-28.el5_8
rpm
Red Hat:enterprise_linux:5::client
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-libs
Red Hat:enterprise_linux:5::client
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-python
Red Hat:enterprise_linux:5::client
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm
Red Hat:enterprise_linux:5::client_workstation
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-apidocs
Red Hat:enterprise_linux:5::client_workstation
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-build
Red Hat:enterprise_linux:5::client_workstation
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
popt
Red Hat:rhel_mission_critical:5.3
 before 0:1.10.2.3-9.el5_3.3
0:1.10.2.3-9.el5_3.3
rpm
Red Hat:rhel_mission_critical:5.3
 before 0:4.4.2.3-9.el5_3.3
0:4.4.2.3-9.el5_3.3
rpm-apidocs
Red Hat:rhel_mission_critical:5.3
 before 0:4.4.2.3-9.el5_3.3
0:4.4.2.3-9.el5_3.3
rpm-build
Red Hat:rhel_mission_critical:5.3
 before 0:4.4.2.3-9.el5_3.3
0:4.4.2.3-9.el5_3.3
rpm-debuginfo
Red Hat:rhel_mission_critical:5.3
 before 0:4.4.2.3-9.el5_3.3
0:4.4.2.3-9.el5_3.3
rpm-devel
Red Hat:rhel_mission_critical:5.3
 before 0:4.4.2.3-9.el5_3.3
0:4.4.2.3-9.el5_3.3
rpm-libs
Red Hat:rhel_mission_critical:5.3
 before 0:4.4.2.3-9.el5_3.3
0:4.4.2.3-9.el5_3.3
rpm-python
Red Hat:rhel_mission_critical:5.3
 before 0:4.4.2.3-9.el5_3.3
0:4.4.2.3-9.el5_3.3
popt
Red Hat:rhel_eus:5.6
 before 0:1.10.2.3-22.el5_6.3
0:1.10.2.3-22.el5_6.3
rpm
Red Hat:rhel_eus:5.6
 before 0:4.4.2.3-22.el5_6.3
0:4.4.2.3-22.el5_6.3
rpm-apidocs
Red Hat:rhel_eus:5.6
 before 0:4.4.2.3-22.el5_6.3
0:4.4.2.3-22.el5_6.3
rpm-build
Red Hat:rhel_eus:5.6
 before 0:4.4.2.3-22.el5_6.3
0:4.4.2.3-22.el5_6.3
rpm-debuginfo
Red Hat:rhel_eus:5.6
 before 0:4.4.2.3-22.el5_6.3
0:4.4.2.3-22.el5_6.3
rpm-devel
Red Hat:rhel_eus:5.6
 before 0:4.4.2.3-22.el5_6.3
0:4.4.2.3-22.el5_6.3
rpm-libs
Red Hat:rhel_eus:5.6
 before 0:4.4.2.3-22.el5_6.3
0:4.4.2.3-22.el5_6.3
rpm-python
Red Hat:rhel_eus:5.6
 before 0:4.4.2.3-22.el5_6.3
0:4.4.2.3-22.el5_6.3
popt
Red Hat:enterprise_linux:5::server
 before 0:1.10.2.3-28.el5_8
0:1.10.2.3-28.el5_8
rpm
Red Hat:enterprise_linux:5::server
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-apidocs
Red Hat:enterprise_linux:5::server
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-build
Red Hat:enterprise_linux:5::server
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-devel
Red Hat:enterprise_linux:5::server
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-libs
Red Hat:enterprise_linux:5::server
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm-python
Red Hat:enterprise_linux:5::server
 before 0:4.4.2.3-28.el5_8
0:4.4.2.3-28.el5_8
rpm
Red Hat:enterprise_linux:6::client
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-libs
Red Hat:enterprise_linux:6::client
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-python
Red Hat:enterprise_linux:6::client
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-apidocs
Red Hat:enterprise_linux:6::client
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-build
Red Hat:enterprise_linux:6::client
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-cron
Red Hat:enterprise_linux:6::client
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-devel
Red Hat:enterprise_linux:6::client
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm
Red Hat:enterprise_linux:6::computenode
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-libs
Red Hat:enterprise_linux:6::computenode
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-python
Red Hat:enterprise_linux:6::computenode
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-apidocs
Red Hat:enterprise_linux:6::computenode
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-build
Red Hat:enterprise_linux:6::computenode
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-cron
Red Hat:enterprise_linux:6::computenode
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-devel
Red Hat:enterprise_linux:6::computenode
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm
Red Hat:rhel_eus:6.0
 before 0:4.8.0-12.el6_0.2
0:4.8.0-12.el6_0.2
rpm-build
Red Hat:rhel_eus:6.0
 before 0:4.8.0-12.el6_0.2
0:4.8.0-12.el6_0.2
rpm-debuginfo
Red Hat:rhel_eus:6.0
 before 0:4.8.0-12.el6_0.2
0:4.8.0-12.el6_0.2
rpm-devel
Red Hat:rhel_eus:6.0
 before 0:4.8.0-12.el6_0.2
0:4.8.0-12.el6_0.2
rpm-libs
Red Hat:rhel_eus:6.0
 before 0:4.8.0-12.el6_0.2
0:4.8.0-12.el6_0.2
rpm-python
Red Hat:rhel_eus:6.0
 before 0:4.8.0-12.el6_0.2
0:4.8.0-12.el6_0.2
rpm
Red Hat:rhel_eus:6.1
 before 0:4.8.0-16.el6_1.2
0:4.8.0-16.el6_1.2
rpm-build
Red Hat:rhel_eus:6.1
 before 0:4.8.0-16.el6_1.2
0:4.8.0-16.el6_1.2
rpm-debuginfo
Red Hat:rhel_eus:6.1
 before 0:4.8.0-16.el6_1.2
0:4.8.0-16.el6_1.2
rpm-devel
Red Hat:rhel_eus:6.1
 before 0:4.8.0-16.el6_1.2
0:4.8.0-16.el6_1.2
rpm-libs
Red Hat:rhel_eus:6.1
 before 0:4.8.0-16.el6_1.2
0:4.8.0-16.el6_1.2
rpm-python
Red Hat:rhel_eus:6.1
 before 0:4.8.0-16.el6_1.2
0:4.8.0-16.el6_1.2
rpm
Red Hat:enterprise_linux:6::server
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-build
Red Hat:enterprise_linux:6::server
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-devel
Red Hat:enterprise_linux:6::server
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-libs
Red Hat:enterprise_linux:6::server
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-python
Red Hat:enterprise_linux:6::server
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-apidocs
Red Hat:rhel_eus:6.0
 before 0:4.8.0-12.el6_0.2
0:4.8.0-12.el6_0.2
rpm-cron
Red Hat:rhel_eus:6.0
 before 0:4.8.0-12.el6_0.2
0:4.8.0-12.el6_0.2
rpm-apidocs
Red Hat:rhel_eus:6.1
 before 0:4.8.0-16.el6_1.2
0:4.8.0-16.el6_1.2
rpm-cron
Red Hat:rhel_eus:6.1
 before 0:4.8.0-16.el6_1.2
0:4.8.0-16.el6_1.2
rpm-apidocs
Red Hat:enterprise_linux:6::server
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-cron
Red Hat:enterprise_linux:6::server
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm
Red Hat:enterprise_linux:6::workstation
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-build
Red Hat:enterprise_linux:6::workstation
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-devel
Red Hat:enterprise_linux:6::workstation
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-libs
Red Hat:enterprise_linux:6::workstation
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-python
Red Hat:enterprise_linux:6::workstation
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-apidocs
Red Hat:enterprise_linux:6::workstation
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1
rpm-cron
Red Hat:enterprise_linux:6::workstation
 before 0:4.8.0-19.el6_2.1
0:4.8.0-19.el6_2.1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-0061 is a medium vulnerability (CVSS 6.8) in Rpm, published June 4, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.29%, the 91st percentile. Fixed in rpm 4.9.1.3-1.

References

Show 34 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open