CVE-2012-0867

Key facts

CVSS score

4.3 (v2.0)

Severity

MEDIUM

CVSS vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Weakness (CWE)

CWE-20

EPSS score

2.3% (84th percentile)

In CISA KEV

No

In EU EUVD

Yes (EUVD-2012-0892)

Published

July 18, 2012

NVD last modified

June 16, 2026

Status

Modified

Affected products

• debian / debian linux
• opensuse project / opensuse
• postgresql / postgresql
• postgresql / postgresql
• postgresql / postgresql
• postgresql / postgresql
• postgresql / postgresql
• postgresql / postgresql
• postgresql / postgresql
• postgresql / postgresql
• postgresql / postgresql
• postgresql / postgresql
• postgresql / postgresql
• postgresql / postgresql
• postgresql / postgresql
• postgresql / postgresql
• postgresql / postgresql
• postgresql / postgresql
• postgresql / postgresql
• postgresql / postgresql
• postgresql / postgresql
• postgresql / postgresql
• postgresql / postgresql
• redhat / desktop workstation
• redhat / enterprise linux
• redhat / enterprise linux desktop
• redhat / enterprise linux desktop
• redhat / enterprise linux hpc node
• redhat / enterprise linux server
• redhat / enterprise linux server aus
• redhat / enterprise linux server eus
• redhat / enterprise linux workstation

Certified products that may be affected

7 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

• Red Hat Enterprise Linux libgcrypt Cryptographic Module v4.0 [1] and Red Hat Enterprise Linux libgcrypt Cryptographic Module v5.0 [2] - Red Hat®, Inc. - FIPS 140 2657 - historical
• Red Hat Enterprise Linux 5 OpenSSH-Server Cryptographic Module - Red Hat®, Inc. - FIPS 140 1384 - historical
• Red Hat Enterprise Linux 5 OpenSSH Client Cryptographic Module - Red Hat®, Inc. - FIPS 140 1385 - historical
• Red Hat Enterprise Linux 5 OpenSwan Cryptographic Module - Red Hat®, Inc. - FIPS 140 1386 - historical
• Red Hat Enterprise Linux 5 Kernel Crypto API Cryptographic Module - Red Hat®, Inc. - FIPS 140 1387 - historical

See all 7 in the Security Certifications Explorer.

References

• http://lists.opensuse.org/opensuse-updates/2012-09/msg00060.html(Third Party Advisory)
• http://rhn.redhat.com/errata/RHSA-2012-0678.html(Third Party Advisory)
• http://secunia.com/advisories/49273
• http://www.debian.org/security/2012/dsa-2418(Third Party Advisory)
• http://www.mandriva.com/security/advisories?name=MDVSA-2012:026(Broken Link)
• http://www.postgresql.org/about/news/1377/(Vendor Advisory)
• http://www.postgresql.org/docs/8.4/static/release-8-4-11.html(Release Notes, Vendor Advisory)
• http://www.postgresql.org/docs/9.0/static/release-9-0-7.html(Release Notes, Vendor Advisory)
• http://www.postgresql.org/docs/9.1/static/release-9-1-3.html(Release Notes, Vendor Advisory)