CVE-2019-13178

Опубликовано: 02 июл. 2019

Источник: nvd

CVSS3: 8.1

CVSS2: 6.8

EPSS Низкий

Описание

modules/luksbootkeyfile/main.py in Calamares versions 3.1 through 3.2.10 has a race condition between the time when the LUKS encryption keyfile is created and when secure permissions are set.

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00017.html
http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00020.html
http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00021.html
https://bugs.launchpad.net/ubuntu/+source/initramfs-tools/+bug/1835095
Exploit
Issue Tracking
Third Party Advisory
https://bugs.launchpad.net/ubuntu/+source/initramfs-tools/+bug/1835096
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1726565
Issue Tracking
Third Party Advisory
https://calamares.io/calamares-3.2.11-is-out/
Third Party Advisory
https://calamares.io/calamares-cve-2019/
Third Party Advisory
https://github.com/calamares/calamares/issues/1190
Issue Tracking
Third Party Advisory
https://github.com/calamares/calamares/issues/1191
Exploit
Issue Tracking
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q57BOTBA2J5U4GVKUP7N2PD5H7B3BVUU/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R2ZDQRGBGRVRW5LPJWKUNS3M66LZ3KYC/
https://www.pavelkogan.com/2014/05/23/luks-full-disk-encryption/
Third Party Advisory
https://www.pavelkogan.com/2015/01/25/linux-mint-encryption/
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00017.html
http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00020.html
http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00021.html
https://bugs.launchpad.net/ubuntu/+source/initramfs-tools/+bug/1835095
Exploit
Issue Tracking
Third Party Advisory
https://bugs.launchpad.net/ubuntu/+source/initramfs-tools/+bug/1835096
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1726565
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:calamares:calamares:*:*:*:*:*:*:*:*

Версия от 3.1 (включая) до 3.2.10 (включая)

EPSS

Процентиль: 83%

0.01971

Низкий

8.1 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-362

Связанные уязвимости

CVE-2019-13178

CVSS3: 8.1

ubuntu

больше 6 лет назад

modules/luksbootkeyfile/main.py in Calamares versions 3.1 through 3.2.10 has a race condition between the time when the LUKS encryption keyfile is created and when secure permissions are set.

CVE-2019-13178

CVSS3: 8.1

debian

больше 6 лет назад

modules/luksbootkeyfile/main.py in Calamares versions 3.1 through 3.2. ...

openSUSE-SU-2019:2628-1

suse-cvrf

около 6 лет назад

Security update for calamares

GHSA-j52x-jwvh-c5gg

CVSS3: 8.1

github

больше 3 лет назад

modules/luksbootkeyfile/main.py in Calamares through 3.2.4 has a race condition between the time when the LUKS encryption keyfile is created and when secure permissions are set.

EPSS

Процентиль: 83%

0.01971

Низкий

8.1 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-362