Vulnerability in Dracut_project Dracut
CVE-2015-0794
modules.d/90crypt/module-setup.sh in the dracut package before 037-17.30.1 in openSUSE 13.2 allows local users to have unspecified impact via a symlink attack on /tmp/dracut_block_uuid.map.
EPSS: 0.003 (27.2th percentile) — read the EPSS interpretation.
Affected products
- Dracut_project Dracut
- Opensuse — versions 13.2
- N/a — versions n/a
Weakness classification (CWE)
References
- security@opentext.com (mailing-list, x_refsource_MLIST)
- security@opentext.com (vendor-advisory, x_refsource_SUSE)
- security@opentext.com (mailing-list, x_refsource_MLIST)