CVE-2012-0815

CVE-2012-0815 describes a denial-of-service vulnerability in RPM versions prior to 4.9.1.3, specifically within the headerVerifyInfo function. This flaw allows remote attackers to crash the system and potentially execute arbitrary code by providing a negative value in a package header's region offset, leading to improper numeric range comparison. With a CVSS score of 6.8 (medium severity), it can be exploited remotely with medium attack complexity, potentially leading to partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.