CVE-2012-4429 [中] | Information Disclosure（Vino）

CVE-2012-4429 綜合評估為中等風險（50.4/100）：CVSS 技術影響為中級，利用機率（EPSS 2.38%）近一日 EPSS 上升 +1.78%，被利用關注度持續升高。梳理受影響資產並納入修補計畫。

#	日期	舊 EPSS 分數	新 EPSS 分數	變化（新 − 舊）
1	2026-06-15	0.60%	2.38%	+1.78%
2	2025-03-30	1.18%	0.60%	-0.58%
3	2025-03-29	—	1.18%	—

日期

舊 EPSS 分數

新 EPSS 分數

變化（新 − 舊）

2026-06-15

0.60%

2.38%

+1.78%

2025-03-30

1.18%

0.60%

-0.58%

2025-03-29

—

1.18%

—

底座分	版本	嚴重度	向量	可利用性	影響	分數來源
5.0	2.0	MEDIUM	`AV:N/AC:L/Au:N/C:P/I:N/A:N` 點擊展開存取路徑 (AV:N) 只要路由可達，即可從遠端發動利用。存取複雜度 (AC:L) 步驟短、路徑清楚，重現成本低。認證 (AU:N) 全程無需有效身分。機密性影響 (C:P) 機密性受到部分損害。完整性影響 (I:N) 對完整性無影響。可用性影響 (A:N) 對可用性無影響。	10.0	2.9	[email protected]

底座分

版本

嚴重度

向量

可利用性

影響

分數來源

5.0

2.0

MEDIUM

AV:N/AC:L/Au:N/C:P/I:N/A:N 點擊展開

存取路徑 (AV:N): 只要路由可達，即可從遠端發動利用。
存取複雜度 (AC:L): 步驟短、路徑清楚，重現成本低。
認證 (AU:N): 全程無需有效身分。
機密性影響 (C:P): 機密性受到部分損害。
完整性影響 (I:N): 對完整性無影響。
可用性影響 (A:N): 對可用性無影響。

10.0

2.9

[email protected]

CVE-2012-4429 的 OS 追蹤

vendor	priority	summary	link
`debian`	low	CVE-2012-4429 low priority: Debian including 1 source packages (vino), 2 status rows across 2 suites (bookworm, bullseye): resolved 2.	https://security-tracker.debian.org/tracker/CVE-2012-4429
`redhat`	medium	—	https://access.redhat.com/security/cve/CVE-2012-4429
`ubuntu`	medium	CVE-2012-4429 medium priority: Ubuntu including 1 source packages (vino), 7 status rows across 7 suites (hardy, lucid, natty, oneiric, precise, quantal, upstream): released 4, ignored 2, needs-triage 1.	https://ubuntu.com/security/CVE-2012-4429

CVE-2012-4429 的影響軟體 / 設定

廠商	產品	版本	原始 CPE
david_king	vino	<= 3.4.2	cpe:2.3:a:david_king:vino::::::::
david_king	vino	0.12	cpe:2.3:a:david_king:vino:0.12:::::::*
david_king	vino	0.14	cpe:2.3:a:david_king:vino:0.14:::::::*
david_king	vino	2.7	cpe:2.3:a:david_king:vino:2.7:::::::*
david_king	vino	2.7.3	cpe:2.3:a:david_king:vino:2.7.3:::::::*
david_king	vino	2.7.3.1	cpe:2.3:a:david_king:vino:2.7.3.1:::::::*
david_king	vino	2.7.4	cpe:2.3:a:david_king:vino:2.7.4:::::::*
david_king	vino	2.7.90	cpe:2.3:a:david_king:vino:2.7.90:::::::*
david_king	vino	2.7.91	cpe:2.3:a:david_king:vino:2.7.91:::::::*
david_king	vino	2.7.92	cpe:2.3:a:david_king:vino:2.7.92:::::::*
david_king	vino	2.8	cpe:2.3:a:david_king:vino:2.8:::::::*
david_king	vino	2.8.0	cpe:2.3:a:david_king:vino:2.8.0:::::::*
david_king	vino	2.8.0.1	cpe:2.3:a:david_king:vino:2.8.0.1:::::::*
david_king	vino	2.8.1	cpe:2.3:a:david_king:vino:2.8.1:::::::*
david_king	vino	2.9	cpe:2.3:a:david_king:vino:2.9:::::::*
david_king	vino	2.9.2	cpe:2.3:a:david_king:vino:2.9.2:::::::*
david_king	vino	2.10	cpe:2.3:a:david_king:vino:2.10:::::::*
david_king	vino	2.11	cpe:2.3:a:david_king:vino:2.11:::::::*
david_king	vino	2.11.1	cpe:2.3:a:david_king:vino:2.11.1:::::::*
david_king	vino	2.11.1.1	cpe:2.3:a:david_king:vino:2.11.1.1:::::::*
david_king	vino	2.11.1.2	cpe:2.3:a:david_king:vino:2.11.1.2:::::::*
david_king	vino	2.11.90	cpe:2.3:a:david_king:vino:2.11.90:::::::*
david_king	vino	2.11.92	cpe:2.3:a:david_king:vino:2.11.92:::::::*
david_king	vino	2.12	cpe:2.3:a:david_king:vino:2.12:::::::*
david_king	vino	2.13	cpe:2.3:a:david_king:vino:2.13:::::::*
david_king	vino	2.13.5	cpe:2.3:a:david_king:vino:2.13.5:::::::*
david_king	vino	2.14	cpe:2.3:a:david_king:vino:2.14:::::::*
david_king	vino	2.15	cpe:2.3:a:david_king:vino:2.15:::::::*
david_king	vino	2.16	cpe:2.3:a:david_king:vino:2.16:::::::*
david_king	vino	2.17	cpe:2.3:a:david_king:vino:2.17:::::::*
david_king	vino	2.17.2	cpe:2.3:a:david_king:vino:2.17.2:::::::*
david_king	vino	2.17.4	cpe:2.3:a:david_king:vino:2.17.4:::::::*
david_king	vino	2.17.5	cpe:2.3:a:david_king:vino:2.17.5:::::::*
david_king	vino	2.17.92	cpe:2.3:a:david_king:vino:2.17.92:::::::*
david_king	vino	2.18	cpe:2.3:a:david_king:vino:2.18:::::::*
david_king	vino	2.18.1	cpe:2.3:a:david_king:vino:2.18.1:::::::*
david_king	vino	2.19	cpe:2.3:a:david_king:vino:2.19:::::::*
david_king	vino	2.19.5	cpe:2.3:a:david_king:vino:2.19.5:::::::*
david_king	vino	2.19.90	cpe:2.3:a:david_king:vino:2.19.90:::::::*
david_king	vino	2.19.92	cpe:2.3:a:david_king:vino:2.19.92:::::::*
david_king	vino	2.20	cpe:2.3:a:david_king:vino:2.20:::::::*
david_king	vino	2.20.1	cpe:2.3:a:david_king:vino:2.20.1:::::::*
david_king	vino	2.21	cpe:2.3:a:david_king:vino:2.21:::::::*
david_king	vino	2.21.1	cpe:2.3:a:david_king:vino:2.21.1:::::::*
david_king	vino	2.21.2	cpe:2.3:a:david_king:vino:2.21.2:::::::*
david_king	vino	2.21.3	cpe:2.3:a:david_king:vino:2.21.3:::::::*
david_king	vino	2.21.90	cpe:2.3:a:david_king:vino:2.21.90:::::::*
david_king	vino	2.21.91	cpe:2.3:a:david_king:vino:2.21.91:::::::*
david_king	vino	2.21.92	cpe:2.3:a:david_king:vino:2.21.92:::::::*
david_king	vino	2.22	cpe:2.3:a:david_king:vino:2.22:::::::*
david_king	vino	2.22.1	cpe:2.3:a:david_king:vino:2.22.1:::::::*
david_king	vino	2.22.2	cpe:2.3:a:david_king:vino:2.22.2:::::::*
david_king	vino	2.23	cpe:2.3:a:david_king:vino:2.23:::::::*
david_king	vino	2.23.5	cpe:2.3:a:david_king:vino:2.23.5:::::::*
david_king	vino	2.23.90	cpe:2.3:a:david_king:vino:2.23.90:::::::*
david_king	vino	2.23.91	cpe:2.3:a:david_king:vino:2.23.91:::::::*
david_king	vino	2.23.92	cpe:2.3:a:david_king:vino:2.23.92:::::::*
david_king	vino	2.24	cpe:2.3:a:david_king:vino:2.24:::::::*
david_king	vino	2.24.1	cpe:2.3:a:david_king:vino:2.24.1:::::::*
david_king	vino	2.25	cpe:2.3:a:david_king:vino:2.25:::::::*
david_king	vino	2.25.3	cpe:2.3:a:david_king:vino:2.25.3:::::::*
david_king	vino	2.25.4	cpe:2.3:a:david_king:vino:2.25.4:::::::*
david_king	vino	2.25.5	cpe:2.3:a:david_king:vino:2.25.5:::::::*
david_king	vino	2.25.90	cpe:2.3:a:david_king:vino:2.25.90:::::::*
david_king	vino	2.25.91	cpe:2.3:a:david_king:vino:2.25.91:::::::*
david_king	vino	2.25.92	cpe:2.3:a:david_king:vino:2.25.92:::::::*
david_king	vino	2.26	cpe:2.3:a:david_king:vino:2.26:::::::*
david_king	vino	2.26.1	cpe:2.3:a:david_king:vino:2.26.1:::::::*
david_king	vino	2.26.2	cpe:2.3:a:david_king:vino:2.26.2:::::::*
david_king	vino	2.27	cpe:2.3:a:david_king:vino:2.27:::::::*
david_king	vino	2.27.5	cpe:2.3:a:david_king:vino:2.27.5:::::::*
david_king	vino	2.27.90	cpe:2.3:a:david_king:vino:2.27.90:::::::*
david_king	vino	2.27.91	cpe:2.3:a:david_king:vino:2.27.91:::::::*
david_king	vino	2.27.92	cpe:2.3:a:david_king:vino:2.27.92:::::::*
david_king	vino	2.28	cpe:2.3:a:david_king:vino:2.28:::::::*
david_king	vino	2.28.3	cpe:2.3:a:david_king:vino:2.28.3:::::::*
david_king	vino	2.31.4	cpe:2.3:a:david_king:vino:2.31.4:::::::*
david_king	vino	2.31.91	cpe:2.3:a:david_king:vino:2.31.91:::::::*
david_king	vino	2.32.0	cpe:2.3:a:david_king:vino:2.32.0:::::::*
david_king	vino	2.32.2	cpe:2.3:a:david_king:vino:2.32.2:::::::*

CVE-2012-4429 的參考連結

URL	標籤
http://rhn.redhat.com/errata/RHSA-2013-0169.html
http://secunia.com/advisories/50527	Vendor Advisory
http://www.openwall.com/lists/oss-security/2012/09/13/25
http://www.openwall.com/lists/oss-security/2012/09/14/1
http://www.securityfocus.com/bid/55548
http://www.ubuntu.com/usn/USN-1701-1
https://exchange.xforce.ibmcloud.com/vulnerabilities/78602

URL

標籤

http://rhn.redhat.com/errata/RHSA-2013-0169.html

http://secunia.com/advisories/50527

Vendor Advisory

http://www.openwall.com/lists/oss-security/2012/09/13/25

http://www.openwall.com/lists/oss-security/2012/09/14/1

http://www.securityfocus.com/bid/55548

http://www.ubuntu.com/usn/USN-1701-1

https://exchange.xforce.ibmcloud.com/vulnerabilities/78602