Описание
modules.d/90crypt/module-setup.sh in the dracut package before 037-17.30.1 in openSUSE 13.2 allows local users to have unspecified impact via a symlink attack on /tmp/dracut_block_uuid.map.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| dracut | not-affected | package |
Примечания
http://lists.opensuse.org/opensuse-updates/2015-11/msg00098.html
http://lists.opensuse.org/opensuse-bugs/2015-06/msg02585.html
http://lists.opensuse.org/opensuse-bugs/2015-06/msg02580.html
This seem to be a SuSE specific issue. src:dracut does not contain unsafe
handling of a /tmp/dracut_block_uuid.map file in any checked version.
Связанные уязвимости
modules.d/90crypt/module-setup.sh in the dracut package before 037-17.30.1 in openSUSE 13.2 allows local users to have unspecified impact via a symlink attack on /tmp/dracut_block_uuid.map.
modules.d/90crypt/module-setup.sh in the dracut package before 037-17.30.1 in openSUSE 13.2 allows local users to have unspecified impact via a symlink attack on /tmp/dracut_block_uuid.map.
modules.d/90crypt/module-setup.sh in the dracut package before 037-17.30.1 in openSUSE 13.2 allows local users to have unspecified impact via a symlink attack on /tmp/dracut_block_uuid.map.
Уязвимость пакета dracut операционной системы openSUSE, позволяющая нарушителю повлиять на безопасность информации