CVE-2012-0945

MediumCVSS 4.9/10Last modified Jun 16, 2026

Description

whoopsie-daisy before 0.1.26: Root user can remove arbitrary files

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-428

Affected software

VendorProductVersions
whoopsie-daisywhoopsie-daisy< 0.1.26

References

Timeline

Published
Jan 15, 2020
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2012

CVE-2012-09464.6The NVIDIA UNIX driver before 295.40 allows local users to access arbitrary memory locations by leveraging GPU device-node read/write privilCVE-2012-09476.8Heap-based buffer overflow in the vqa_decode_chunk function in the VQA codec (vqavideo.c) in libavcodec in Libav 0.5.x before 0.5.9, 0.6.x bCVE-2012-09482.1DistUpgrade/DistUpgradeMain.py in Update Manager, as used by Ubuntu 12.04 LTS, 11.10, and 11.04, uses weak permissions for (1) apt-clone_sysCVE-2012-09495.0The Apport hook in Update Manager as used by Ubuntu 12.04 LTS, 11.10, and 11.04 uploads certain system state archive files when reporting buCVE-2012-09505.0The Apport hook (DistUpgradeApport.py) in Update Manager, as used by Ubuntu 12.04 LTS, 11.10, and 11.04, uploads the /var/log/dist-upgrade dCVE-2012-09517.8A Memory Corruption Vulnerability exists in NVIDIA Graphics Drivers 29549 due to an unknown function in the file proc/driver/nvidia/registryCVE-2012-09525.0A heap buffer overflow was discovered in the device control ioctl in the Linux driver for Nvidia graphics cards, which may allow an attackerCVE-2012-09535.0A race condition was discovered in the Linux drivers for Nvidia graphics which allowed an attacker to exfiltrate kernel memory to userspace.CVE-2012-09542.6APT 0.7.x before 0.7.25 and 0.8.x before 0.8.16, when using the apt-key net-update to import keyrings, relies on GnuPG argument order and doCVE-2012-09557.4software-properties was vulnerable to a person-in-the-middle attack due to incorrect TLS certificate validation in softwareproperties/ppa.pyCVE-2012-09566.8ubiquity-slideshow-ubuntu before 58.2, during installation, allows remote man-in-the-middle attackers to execute arbitrary web script or HTMCVE-2012-09574.9The override_release function in kernel/sys.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from kern
CVE-2012-0945: Medium severity, CVSS 4.9 | Vulnix