dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade dracut | Jul 30, 2024 | Oct 9, 2012 |
| Oracle_linux | — | Upgrade dracut-toolsUpgrade dracut-fips-aesniUpgrade dracut-networkUpgrade dracut-capsUpgrade dracutUpgrade dracut-genericUpgrade dracut-fipsUpgrade dracut-kernel | Oct 16, 2024 | Oct 9, 2012 |
| Suse | — | Upgrade dracutUpgrade dracut-fipsUpgrade dracut-toolsUpgrade dracut-extraUpgrade dracut-ima | Aug 9, 2024 | Jun 28, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub