CVE-2012-2150
xfs_metadump in xfsprogs before 3.2.4 does not properly obfuscate file data, which allows remote...
xfs_metadump in xfsprogs before 3.2.4 does not properly obfuscate file data, which allows remote attackers to obtain sensitive information by reading a generated image.
Exploit likelihood
What each source reports
NVD Score used
xfs_metadump in xfsprogs before 3.2.4 does not properly obfuscate file data, which allows remote attackers to obtain sensitive information by reading a generated image.
- Record
CVE-2012-2150- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
xfs_metadump in xfsprogs before 3.2.4 does not properly obfuscate file data, which allows remote attackers to obtain sensitive information by reading a generated image.
- Record
CVE-2012-2150- Updated
- 2026-11-02
EUVDEUVD-2012-2145 No score
xfs_metadump in xfsprogs before 3.2.4 does not properly obfuscate file data, which allows remote attackers to obtain sensitive information by reading a generated image.
- Record
EUVD-2012-2145- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8hmv-9ggr-4xmc No score
xfs_metadump in xfsprogs before 3.2.4 does not properly obfuscate file data, which allows remote...
xfs_metadump in xfsprogs before 3.2.4 does not properly obfuscate file data, which allows remote attackers to obtain sensitive information by reading a generated image.
- Record
GHSA-8hmv-9ggr-4xmc- Weakness
- CWE-200
- Updated
- 2026-11-02
OSV No score
xfs_metadump in xfsprogs before 3.2.4 does not properly obfuscate file data, which allows remote attackers to obtain sensitive information by reading a generated image.
- Record
CVE-2012-2150- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-2150 No score
xfs_metadump in xfsprogs before 3.2.4 does not properly obfuscate file data, which allows remote attackers to obtain sensitive information by reading a generated image.
- Record
DEBIAN-CVE-2012-2150- Updated
- 2026-11-02
Show 4 moreShow less
OSVMGASA-2015-0361 No score
Updated xfsprogs packages fix CVE-2012-2150
Updated xfsprogs packages fix security vulnerability:
xfs_metadump in xfsprogs before 3.2.4 does not properly obfuscate file data, which allows remote attackers to obtain sensitive information by reading a generated image (CVE-2012-2150).
- Record
MGASA-2015-0361- Updated
- 2026-11-02
OSVSUSE-SU-2015:2383-1 No score
Security update for xfsprogs
xfsprogs was updated to fix one security vulnerability and several bugs.
- Handle unwanted data disclosure in xfs_metadump (bsc#939367, CVE-2012-2150)
- Fix segfault during xfs_repair run (bsc#911866)
- Fix definition of leaf attribute block to avoid gcc optimization xfsprogs-fix-leaf-block-definition
- Record
SUSE-SU-2015:2383-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:2384-1 No score
Security update for xfsprogs
xfsprogs was updated to fix one security vulnerability and several bugs.
- Handle unwanted data disclosure in xfs_metadump (bsc#939367, CVE-2012-2150)
- Record
SUSE-SU-2015:2384-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2012-2150 No score
xfs_metadump in xfsprogs before 3.2.4 does not properly obfuscate file data, which allows remote attackers to obtain sensitive information by reading a generated image.
- Record
UBUNTU-CVE-2012-2150- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xfsprogsDebian:12 |
before 3.2.4-1 | 3.2.4-1 |
xfsprogsDebian:13 |
before 3.2.4-1 | 3.2.4-1 |
xfsprogsDebian:14 |
before 3.2.4-1 | 3.2.4-1 |
xfsprogsMageia:5 |
before 3.2.4-1.mga5 | 3.2.4-1.mga5 |
xfsprogs-debuginfoRed Hat:enterprise_linux:7::client |
before 0:3.2.2-2.el7 | 0:3.2.2-2.el7 |
xfsprogs-develRed Hat:enterprise_linux:7::client |
before 0:3.2.2-2.el7 | 0:3.2.2-2.el7 |
xfsprogs-qa-develRed Hat:enterprise_linux:7::client |
before 0:3.2.2-2.el7 | 0:3.2.2-2.el7 |
xfsprogsRed Hat:enterprise_linux:7::client |
before 0:3.2.2-2.el7 | 0:3.2.2-2.el7 |
xfsprogs-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:3.2.2-2.el7 | 0:3.2.2-2.el7 |
xfsprogs-develRed Hat:enterprise_linux:7::computenode |
before 0:3.2.2-2.el7 | 0:3.2.2-2.el7 |
Show 28 moreShow less
| Package | Affected | Fixed |
|---|---|---|
xfsprogs-qa-develRed Hat:enterprise_linux:7::computenode |
before 0:3.2.2-2.el7 | 0:3.2.2-2.el7 |
xfsprogsRed Hat:enterprise_linux:7::computenode |
before 0:3.2.2-2.el7 | 0:3.2.2-2.el7 |
xfsprogs-debuginfoRed Hat:enterprise_linux:7::server |
before 0:3.2.2-2.el7 | 0:3.2.2-2.el7 |
xfsprogs-develRed Hat:enterprise_linux:7::server |
before 0:3.2.2-2.el7 | 0:3.2.2-2.el7 |
xfsprogs-qa-develRed Hat:enterprise_linux:7::server |
before 0:3.2.2-2.el7 | 0:3.2.2-2.el7 |
xfsprogsRed Hat:enterprise_linux:7::server |
before 0:3.2.2-2.el7 | 0:3.2.2-2.el7 |
xfsprogs-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:3.2.2-2.el7 | 0:3.2.2-2.el7 |
xfsprogs-develRed Hat:enterprise_linux:7::workstation |
before 0:3.2.2-2.el7 | 0:3.2.2-2.el7 |
xfsprogs-qa-develRed Hat:enterprise_linux:7::workstation |
before 0:3.2.2-2.el7 | 0:3.2.2-2.el7 |
xfsprogsRed Hat:enterprise_linux:7::workstation |
before 0:3.2.2-2.el7 | 0:3.2.2-2.el7 |
xfsprogsSUSE:Linux Enterprise Software Development Kit 11 SP3 |
before 3.1.8-0.7.1 | 3.1.8-0.7.1 |
xfsprogsSUSE:Linux Enterprise Software Development Kit 11 SP4 |
before 3.1.8-0.7.1 | 3.1.8-0.7.1 |
xfsprogsSUSE:Linux Enterprise Desktop 11 SP3 |
before 3.1.8-0.7.1 | 3.1.8-0.7.1 |
xfsprogsSUSE:Linux Enterprise Desktop 11 SP4 |
before 3.1.8-0.7.1 | 3.1.8-0.7.1 |
xfsprogsSUSE:Linux Enterprise Server 11 SP3 |
before 3.1.8-0.7.1 | 3.1.8-0.7.1 |
xfsprogsSUSE:Linux Enterprise Server 11 SP3-TERADATA |
before 3.1.8-0.7.1 | 3.1.8-0.7.1 |
xfsprogsSUSE:Linux Enterprise Server for SAP Applications 11 SP3 |
before 3.1.8-0.7.1 | 3.1.8-0.7.1 |
xfsprogsSUSE:Linux Enterprise Server 11 SP4 |
before 3.1.8-0.7.1 | 3.1.8-0.7.1 |
xfsprogsSUSE:Linux Enterprise Server for SAP Applications 11 SP4 |
before 3.1.8-0.7.1 | 3.1.8-0.7.1 |
xfsprogsSUSE:Linux Enterprise Desktop 12 |
before 3.2.1-3.5 | 3.2.1-3.5 |
xfsprogsSUSE:Linux Enterprise Desktop 12 SP1 |
before 3.2.1-3.5 | 3.2.1-3.5 |
xfsprogsSUSE:Linux Enterprise Software Development Kit 12 |
before 3.2.1-3.5 | 3.2.1-3.5 |
xfsprogsSUSE:Linux Enterprise Software Development Kit 12 SP1 |
before 3.2.1-3.5 | 3.2.1-3.5 |
xfsprogsSUSE:Linux Enterprise Server 12 |
before 3.2.1-3.5 | 3.2.1-3.5 |
xfsprogsSUSE:Linux Enterprise Server for SAP Applications 12 |
before 3.2.1-3.5 | 3.2.1-3.5 |
xfsprogsSUSE:Linux Enterprise Server 12 SP1 |
before 3.2.1-3.5 | 3.2.1-3.5 |
xfsprogsSUSE:Linux Enterprise Server for SAP Applications 12 SP1 |
before 3.2.1-3.5 | 3.2.1-3.5 |
xfsprogsUbuntu:14.04:LTS |
All versions, plus listed versions 3.1.9ubuntu13.1.9ubuntu23.1.9ubuntu2.1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-2150 is a medium vulnerability (CVSS 5.0) in Sgi Xfsprogs, published August 25, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.50%, the 91st percentile. Fixed in xfsprogs 3.2.4-1.
References
openwall.com/lists/oss-security/2015/07/30/3
lists.fedoraproject.org/pipermail/package-announce/2015-August/164189.html
lists.opensuse.org/opensuse-updates/2015-08/msg00027.html
oss.sgi.com/pipermail/xfs/2015-July/042726.html
bugzilla.redhat.com/show_bug.cgi?id=817696
oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
Show 23 moreShow less
securityfocus.com/bid/76013
nvd.nist.gov/vuln/detail/CVE-2012-2150
github.com/advisories/GHSA-8hmv-9ggr-4xmc
security-tracker.debian.org/tracker/CVE-2012-2150
advisories.mageia.org/MGASA-2015-0361.html
bugs.mageia.org/show_bug.cgi?id=16455
access.redhat.com/errata/RHSA-2015:2151
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2151.json
cve.org/CVERecord?id=CVE-2012-2150
suse.com/support/update/announcement/2015/suse-su-20152383-1
bugzilla.suse.com/911866
ubuntu.com/security/CVE-2012-2150