vulnerability

Ubuntu: (CVE-2019-13179): calamares vulnerability

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:P/I:N/A:N)

Published

Jul 2, 2019

Added

Jun 26, 2025

Modified

Jun 26, 2025

Description

Calamares versions 3.1 through 3.2.10 copies a LUKS encryption keyfile from /crypto_keyfile.bin (mode 0600 owned by root) to /boot within a globally readable initramfs image with insecure permissions, which allows this originally protected file to be read by any user, thereby disclosing decryption keys for LUKS containers created with Full Disk Encryption.

Solution

no-fix-ubuntu-package

References

CVE-2019-13179
https://attackerkb.com/topics/CVE-2019-13179
https://calamares.io/calamares-3.2.11-is-out/
https://calamares.io/calamares-cve-2019/
https://www.cve.org/CVERecord?id=CVE-2019-13179

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report