TI-2012-01865 Aliases CVE-2012-2092 GHSA-vgq2-gxqp-v52x

Improper signature verification in Ubuntu Cobbler

LOW 33CWE-347Published 2019-12-06 · Updated 2024-08-06

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: High
Impact type: Security bypass
Confidentiality · integrity · availability: None · High · None
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-347.

Summary

A Security Bypass vulnerability exists in Ubuntu Cobbler before 2,2,2 in the cobbler-ubuntu-import script due to an error when verifying the GPG signature.

Why it matters now

EPSS 0.03662 89th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Fixed Cobbler (Ubuntu): 2.2.2

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Ubuntu	Cobbler	before 2.2.2	2.2.2	Patch available	CNA

Cobbler VendorUbuntu Affected before 2.2.2 Fixed in 2.2.2 Patch available CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:canonical:ubuntu_cobbler::::::::	before 2.2.2	Vulnerable	Canonical

cpe:2.3:a:canonical:ubuntu_cobbler:*:*:*:*:*:*:*:* Versions before 2.2.2 Vulnerable ·Canonical

Remediation

Fix · CNA Cobbler (Ubuntu) Fixed in 2.2.2

Timeline

2026-10-02 Threatist record created from CVE-2012-2092
2026-10-03 Alias added: GHSA-vgq2-gxqp-v52x

References

Exploit 1

http://www.openwall.com/lists/oss-security/2012/04/10/14

Advisory 1

https://security-tracker.debian.org/tracker/CVE-2012-2092

TI-2021-02452 Incorrect authorization in Ubuntu linux kernel KEVCVSS 3.1HIGH 8.8
TI-2007-05153 Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD… CVSS 2.0HIGH 7.2
TI-2004-01032 Multiple vulnerabilities in the IGMP functionality for Linux kernel 2.4.22 to 2.4.28, and… CVSS 2.0HIGH 10.0
TI-2004-00896 Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other… CVSS 2.0HIGH 10.0
TI-2004-00800 Buffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x through 3.0.7 may… CVSS 2.0HIGH 10.0
TI-2004-00962 Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to… CVSS 2.0HIGH 10.0

See all 129 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences