RPM Multiple Denial of Service Vulnerabilities

http://www.securityfocus.com/bid/52865

Security Info

Bugtraq ID:	52865
Class:	Input Validation Error
CVE:	CVE-2012-0061 CVE-2012-0060 CVE-2012-0815
Remote:	Yes
Local:	No
Published:	Apr 03 2012 12:00AM
Updated:	Apr 03 2012 12:00AM
Credit:	Tomas Hoger
Vulnerable:	RPM RPM Package Manager 4.8 RPM RPM Package Manager 4.1

Not Vulnerable:

Security Discussion

RPM is prone to multiple remote denial-of-service vulnerabilities.

An attacker can exploit these issues to cause an affected application to crash, denying service to legitimate users.

Proof of Concept and Security Exploits

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: vuldb@securityfocus.com.

Security Solution(s)

Solution:
Updates are available. Please see the references for more information.

Security References(s)

References:

Differentiate between non-existent and invalid region tag (Panu Matilainen)
Fix dribble length calculation on headerLoad() (Panu Matilainen)
Fw: [vs] RPM issues (Tomas Hoger)
RPM Homepage (RPM)
Sanity check region length on header load (Panu Matilainen)
Specifically validate region tag on header import (Panu Matilainen)
Validate negated offsets too in headerVerifyInfo() (Panu Matilainen)

Emagined Security Blog featuring Dr. Eugene Schultz

Secure Web Programming
by Vizual Services