CVE-2012-4453

CVE-2012-4453 affects dracut: dracut.sh can create initramfs images with world-readable permissions, potentially exposing sensitive information. Public references confirm impact on Red Hat Enterprise Linux 6 and related distributions, with multiple advisories linking this CVE to dracut-related up...

CVE-2010-4176

CVE-2010-4176 describes a permission issue in plymouth-pretrigger.sh used by dracut/udev on Fedora 13 and 14. The script sets weak permissions on the /dev/systty device file, enabling remote authenticated users to read terminal data from tty0 for local users. Connected sources (OSV/OpenVAS/CVE re...

CVE-2016-8637

The vulnerability CVE-2016-8637 affects dracut when generating initramfs images with world-readable permissions using the early cpio path, allowing local attackers to read sensitive data from initramfs files. The root cause is information disclosure via world-readable initramfs contents generated...

CVE-2015-0794

CVE-2015-0794 affects the dracut package (openSUSE 13.2) prior to 037-17.30.1 via a symlink attack on /tmp/dracut_block_uuid.map in modules.d/90crypt/module-setup.sh. Root cause: use of fixed filenames instead of safe tmp handling; patched in SUSE-SU-2015:2065-1 with mktemp usage. Impact is descr...