CVE-2012-2150 xfs_metadump in xfsprogs before 3.2.4 does not properly obfuscate file data, which allows remote attackers to obtain sensitive information by reading a generated image.
MediumCVSS 5.0
EPSS 4.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
xfs_metadump in xfsprogs before 3.2.4 does not properly obfuscate file data, which allows remote attackers to obtain sensitive information by reading a generated image.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/xfsprogs(Debian:12) | < 3.2.4-1 | 3.2.4-1 |
| debian/xfsprogs(Debian:13) | < 3.2.4-1 | 3.2.4-1 |
| debian/xfsprogs(Debian:14) | < 3.2.4-1 | 3.2.4-1 |
| sgi xfsprogs | <= 3.2.3 | No fix listed |
References
- Debian Security Tracker CVE-2012-2150 vendor-advisory
- FEDORA-2015-12435 vendor-advisory
- FEDORA-2015-12380 vendor-advisory
- FEDORA-2015-12406 vendor-advisory
- openSUSE-SU-2015:1429 vendor-advisory
- openSUSE-SU-2016:0018 vendor-advisory
- [xfs] 20150729 [ANNOUNCE] xfsprogs: v3.2.4 released mailing-list
- [oss-security] 20150723 CVE-2012-2150 xfsprogs: xfs_metadump information disclosure flaw mailing-list
- [oss-security] 20150730 Re: CVE-2012-2150 xfsprogs: xfs_metadump information disclosure flaw mailing-list
- www.oracle.com
- 76013 vdb-entry
- bugzilla.redhat.com
- bugs.debian.org issue-tracking