CVE-2012-4453

Опубликовано: 09 окт. 2012

Источник: nvd

CVSS2: 2.1

EPSS Низкий

Описание

dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information.

Ссылки

http://git.kernel.org/?p=boot/dracut/dracut.git%3Ba=commit%3Bh=e1b48995c26c4f06d1a71
http://rhn.redhat.com/errata/RHSA-2013-1674.html
Third Party Advisory
http://www.openwall.com/lists/oss-security/2012/09/27/3
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2012/09/27/4
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2012/09/27/6
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/55713
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=859448
Issue Tracking
Patch
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/79258
Third Party Advisory
VDB Entry
http://git.kernel.org/?p=boot/dracut/dracut.git%3Ba=commit%3Bh=e1b48995c26c4f06d1a71
http://rhn.redhat.com/errata/RHSA-2013-1674.html
Third Party Advisory
http://www.openwall.com/lists/oss-security/2012/09/27/3
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2012/09/27/4
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2012/09/27/6
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/55713
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=859448
Issue Tracking
Patch
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/79258
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:dracut_project:dracut:*:*:*:*:*:*:*:*

Версия до 024 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:16:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:17:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

EPSS

Процентиль: 11%

0.00039

Низкий

2.1 Low

CVSS2

Дефекты

CWE-276

Связанные уязвимости

CVE-2012-4453

ubuntu

почти 13 лет назад

CVE-2012-4453

redhat

почти 13 лет назад

CVE-2012-4453

debian

почти 13 лет назад

dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 ...

GHSA-84vh-967q-qr87

github

больше 3 лет назад

ELSA-2013-1674

oracle-oval

больше 11 лет назад

ELSA-2013-1674: dracut security, bug fix, and enhancement update (MODERATE)

EPSS

Процентиль: 11%

0.00039

Низкий

2.1 Low

CVSS2

Дефекты

CWE-276