Unrated severityNVD Advisory· Published Jan 18, 2013· Updated Apr 29, 2026
CVE-2012-6088
CVE-2012-6088
Description
The rpmpkgRead function in lib/package.c in RPM 4.10.x before 4.10.2 does not return an error code in certain situations involving an "unparseable signature," which allows remote attackers to bypass RPM signature checks via a crafted package.
Affected products
2Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
8- rpm.org/wiki/Releases/4.10.2nvdPatchVendor Advisory
- secunia.com/advisories/51706nvdVendor Advisory
- rpm.org/gitwebnvd
- www.openwall.com/lists/oss-security/2013/01/03/9nvd
- www.securityfocus.com/bid/57138nvd
- www.ubuntu.com/usn/USN-1694-1nvd
- bugzilla.novell.com/show_bug.cginvd
- exchange.xforce.ibmcloud.com/vulnerabilities/80953nvd
News mentions
0No linked articles in our index yet.