CVE-2012-2150: sgi xfsprogs
CVSS: 5.0v2.0MediumModified
AliasesMGASA-2015-0361SUSE-SU-2015:2383-1SUSE-SU-2015:2384-1RHSA-2015:2151UBUNTU-CVE-2012-2150DEBIAN-CVE-2012-2150
Published 25-08-2015Last modified 06-08-2024
Vulnerability summary
CVE-2012-2150 is a medium (CVSS 5.0) vulnerability in sgi xfsprogs. EPSS estimates a 4.50% chance of exploitation in the next 30 days, higher than 91.3% of scored vulnerabilities.
CVSS score
5.0/10
010
Medium · v2.0 (NVD)EPSS score
4.50%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 25-08-2015PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
xfs_metadump in xfsprogs before 3.2.4 does not properly obfuscate file data, which allows remote attackers to obtain sensitive information by reading a generated image.
CVSS metrics
1 score · 1 source · 1 versionMedium 5.0Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:N/I:N/A:PSourcesSingle source
EPSS trend
Probability
4.50%
Chance of exploitation in the next 30 days
Percentile
91%
Versus all other CVEs
30-day change
0.00 pp
From 4.50% on 18-09-2026
18-09-202618-10-2026
EPSS score4.50%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Suse17 products
- xfsprogs&distro=SUSE Linux Enterprise Desktop 11 SP3< 3.1.8-0.7.1
- xfsprogs&distro=SUSE Linux Enterprise Desktop 11 SP4< 3.1.8-0.7.1
- xfsprogs&distro=SUSE Linux Enterprise Desktop 12< 3.2.1-3.5
- xfsprogs&distro=SUSE Linux Enterprise Desktop 12 SP1< 3.2.1-3.5
- xfsprogs&distro=SUSE Linux Enterprise Server 11 SP3< 3.1.8-0.7.1
Redhat4 products
- xfsprogs< 0:3.2.2-2.el7
- xfsprogs-debuginfo< 0:3.2.2-2.el7
- xfsprogs-devel< 0:3.2.2-2.el7
- xfsprogs-qa-devel< 0:3.2.2-2.el7
Debian1 product
- xfsprogs< 3.2.4-1
Mageia1 product
- xfsprogs< 3.2.4-1.mga5
Sgi1 product
- xfsprogs≤ 3.2.3
Ubuntu1 product
- xfsprogsAll versions (No fix recorded)
6 vendors · 25 products
References
29 links- lists.fedoraproject.org/pipermail/package-announce/2015-August/164189.htmlVendor AdvisoryX Refsource FEDORA
- www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.htmlX Refsource CONFIRM
- lists.fedoraproject.org/pipermail/package-announce/2015-August/164180.htmlVendor AdvisoryX Refsource FEDORA
- lists.fedoraproject.org/pipermail/package-announce/2015-August/163690.htmlVendor AdvisoryX Refsource FEDORA
Show all 29 references
- bugzilla.suse.com/911866REPORT
- bugzilla.suse.com/939367REPORT
