dracut_project Vulnerabilities

Browse the latest common vulnerabilities and exposures (CVEs) related to dracut_project. Use this page to track security alerts, assess risk scores, and find automated remediation steps for dracut_project products. Stay ahead of zero-day exploits and ensure your systems are patched against known threats.

Total Vulnerabilities

Critical Issues

Average CVSS Score

3.7

Search Results

Showing 1-4 of 4 vulnerabilities

Sort (this page):

Default order is newest first across all pages. Manual sort buttons apply within the current page.

CVE-2016-8637

MEDIUM

A local information disclosure issue was found in dracut before 045 when generating initramfs images with world-readable permissions when 'early cpio' is used, such as when including microcode updates. Local attacker can use this to obtain sensitive information from these files, such as encryption keys or credentials.

Score: 5•Published: 8/1/2018

Affected:

dracut project/dracut

5.0

CVE-2015-0794

UNKNOWN

modules.d/90crypt/module-setup.sh in the dracut package before 037-17.30.1 in openSUSE 13.2 allows local users to have unspecified impact via a symlink attack on /tmp/dracut_block_uuid.map.

Score: 3.6•Published: 11/19/2015

Affected:

dracut project/dracut

3.6

CVE-2012-4453

UNKNOWN

dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information.

Score: 2.1•Published: 10/9/2012

Affected:

dracut project/dracut

(+5)

2.1

CVE-2010-4176

UNKNOWN

plymouth-pretrigger.sh in dracut and udev, when running on Fedora 13 and 14, sets weak permissions for the /dev/systty device file, which allows remote authenticated users to read terminal data from tty0 for local users.

Score: 4•Published: 12/7/2010

Affected:

dracut project/dracut

(+1)

4.0