CVE-2012-0061 (retired)

Priority
Description
The headerLoad function in lib/header.c in RPM before 4.9.1.3 does not
properly validate region tags, which allows user-assisted remote attackers
to cause a denial of service (crash) and possibly execute arbitrary code
via a large region size in a package header.
Assigned-to
mdeslaur
More Information

Updated: 2019-03-26 11:59:52 UTC (commit ccdecfcf0fead22bd291e5f4ea745a46872dcb15)