CVE-2012-2150

MEDIO 5.0CVE-2012-2150 · Published 25/08/2015 · updated 16/06/2026

En resumen

CVE-2012-2150 es una vulnerabilidad MEDIO (CVSS 5.0) que afecta a xfsprogs (sgi).
Probabilidad de explotación en los próximos 30 días (EPSS): 4.5%, mayor que el 91.5% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
xfsprogs sgi	`≤ 3.2.3`	No fix yet

Description

xfs_metadump in xfsprogs before 3.2.4 does not properly obfuscate file data, which allows remote attackers to obtain sensitive information by reading a generated image.

References

lists.fedoraproject.org/pipermail/package-announce/2015-August/163690.html
lists.fedoraproject.org/pipermail/package-announce/2015-August/164180.html
lists.fedoraproject.org/pipermail/package-announce/2015-August/164189.html
lists.opensuse.org/opensuse-updates/2015-08/msg00027.html
lists.opensuse.org/opensuse-updates/2016-01/msg00007.html
oss.sgi.com/pipermail/xfs/2015-July/042726.html
openwall.com/lists/oss-security/2015/07/23/12
openwall.com/lists/oss-security/2015/07/30/3
oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
securityfocus.com/bid/76013
bugzilla.redhat.com/show_bug.cgi

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free