CVE-2016-8637
Published Aug 1, 2018A local information disclosure issue was found in dracut before 045 when generating initramfs images with world-readable permissions when 'early cpio' is used, such as when includ…
Vendor/product archive
dracut_project / dracut CVEs
Beta · best-effort4 CVEs tagged to dracut_project / dracut — 0 Critical, 0 High, 2 Medium, 2 Low, 0 Unrated.
CVE-2015-0794
Published Nov 19, 2015modules.d/90crypt/module-setup.sh in the dracut package before 037-17.30.1 in openSUSE 13.2 allows local users to have unspecified impact via a symlink attack on /tmp/dracut_block…
CVE-2012-4453
Published Oct 9, 2012dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might al…
CVE-2010-4176
Published Dec 7, 2010plymouth-pretrigger.sh in dracut and udev, when running on Fedora 13 and 14, sets weak permissions for the /dev/systty device file, which allows remote authenticated users to read…
Showing 1-4 of 4 CVEsPage 1 of 1