CVE-2015-0794
Fixed in a distro release EPSS <1%
modules.d/90crypt/module-setup.sh in the dracut package before 037-17.30.1 in openSUSE 13.2 allows local users to have unspecified impact via a symlink attack on /tmp/dracut_block_uuid.map.
Products: dracut_project dracut
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise Desktop 12 | dracut | 037-51.17.3 |
| SUSE Linux Enterprise Server 12 | dracut | 037-51.17.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 | dracut | 037-51.17.3 |