PT-2012-5409 · Red Hat · Dracut+1

Huzaifa Sidhpurwala · Published 2012-10-09 · Updated 2024-06-15 · CVE-2012-4453

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions dracut versions in Red Hat Enterprise Linux 6, Fedora 16 and 17

Description The issue allows local users to potentially obtain sensitive information due to world-readable permissions in initramfs images created by dracut.sh.

Recommendations For Red Hat Enterprise Linux 6, consider changing the permissions of initramfs images to prevent world-readable access. For Fedora 16 and 17, restrict access to the initramfs images until a fix is applied.

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2012-4453

OPENSUSE-SU-2024:10225-1

RHSA-2013:1674

RHSA-2013_1674

Affected Products

Red Hat

Dracut

References · 21

• https://cve.org/CVERecord?id=CVE-2012-4453 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2012-4453 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-4453 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2012-4453 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=859448 · Patch
• http://rhn.redhat.com/errata/RHSA-2013-1674.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2012-4453 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10225-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2012-4453 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-4453 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2013-1674.html · Vendor Advisory
• http://git.kernel.org/?p=boot/dracut/dracut.git%3Ba=commit%3Bh=e1b48995c26c4f06d1a71 · Note
• http://openwall.com/lists/oss-security/2012/09/27/3 · Note
• https://access.redhat.com/security/cve/CVE-2012-4453 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/79258 · Note