CVE-2012-2150

MEDIO 5.0CVE-2012-2150 · Published 25/08/2015 · updated 16/06/2026

In breve

CVE-2012-2150 è una vulnerabilità MEDIO (CVSS 5.0) che riguarda xfsprogs (sgi).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 4.5%, superiore al 91.5% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
xfsprogs sgi	`≤ 3.2.3`	No fix yet

Description

xfs_metadump in xfsprogs before 3.2.4 does not properly obfuscate file data, which allows remote attackers to obtain sensitive information by reading a generated image.

References

lists.fedoraproject.org/pipermail/package-announce/2015-August/163690.html
lists.fedoraproject.org/pipermail/package-announce/2015-August/164180.html
lists.fedoraproject.org/pipermail/package-announce/2015-August/164189.html
lists.opensuse.org/opensuse-updates/2015-08/msg00027.html
lists.opensuse.org/opensuse-updates/2016-01/msg00007.html
oss.sgi.com/pipermail/xfs/2015-July/042726.html
openwall.com/lists/oss-security/2015/07/23/12
openwall.com/lists/oss-security/2015/07/30/3
oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
securityfocus.com/bid/76013
bugzilla.redhat.com/show_bug.cgi

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free