CVE-2012-4453

Fixed in a distro release EPSS <1%

dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information.

Published 2012-10-09 · CVE record · OSV

Products: dracut_project dracut, fedoraproject fedora, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_workstation

Distro releases