The Red Hat module-setup.sh script for kexec-tools, as distributed in the kexec-tools before 2.0.7-19 packages in Red Hat Enterprise Linux, allows local users to write to arbitrary files via a symlink attack on a temporary file.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kexec-tools-eppicUpgrade kexec-tools-anaconda-addonUpgrade kexec-tools | Dec 1, 2016 | May 19, 2015 |
| Oracle_linux | — | Upgrade kexec-toolsUpgrade kexec-tools-eppicUpgrade kexec-tools-anaconda-addon | Oct 16, 2024 | May 19, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub