CVE-2015-0794

modules.d/90crypt/module-setup.sh in the dracut package before 037-17.30.1 in openSUSE 13.2 allows local users to have unspecified impact via a symlink attack on /tmp/dracut_block_uuid.map.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:dracut_project:dracut:*:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*

History

07 Nov 2023, 02:23

Type Values Removed Values Added
References (MLIST) http://lists.opensuse.org/opensuse-bugs/2015-06/msg02580.html - Mailing List, Third Party Advisory () http://lists.opensuse.org/opensuse-bugs/2015-06/msg02580.html -
References (MLIST) http://lists.opensuse.org/opensuse-bugs/2015-06/msg02585.html - Mailing List, Third Party Advisory () http://lists.opensuse.org/opensuse-bugs/2015-06/msg02585.html -
References (SUSE) http://lists.opensuse.org/opensuse-updates/2015-11/msg00098.html - Mailing List, Third Party Advisory () http://lists.opensuse.org/opensuse-updates/2015-11/msg00098.html -

Information

Published : 2015-11-19 20:59

Updated : 2024-02-28 15:21


NVD link : CVE-2015-0794

Mitre link : CVE-2015-0794

CVE.ORG link : CVE-2015-0794


JSON object : View

Products Affected

opensuse

  • opensuse

dracut_project

  • dracut
CWE
CWE-59

Improper Link Resolution Before File Access ('Link Following')