low3.6
CVE-2015-0794
modules.d/90crypt/module-setup.sh in the dracut package before 037-17.30.1 in openSUSE 13.2 allows local users to have unspecified impact via a symlink attack …
Impact
modules.d/90crypt/module-setup.sh in the dracut package before 037-17.30.1 in openSUSE 13.2 allows local users to have unspecified impact via a symlink attack on /tmp/dracut_block_uuid.map.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dracut Project | Dracut | before 037-17.30.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-bugs/2015-06/msg02580.html
- http://lists.opensuse.org/opensuse-bugs/2015-06/msg02585.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00098.html
- http://lists.opensuse.org/opensuse-bugs/2015-06/msg02580.html
- http://lists.opensuse.org/opensuse-bugs/2015-06/msg02585.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00098.html