Vulnerabilities (CVE)

Filtered by vendor Calamares Subscribe
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-13178 1 Calamares 1 Calamares 2024-02-28 6.8 MEDIUM 8.1 HIGH
modules/luksbootkeyfile/main.py in Calamares versions 3.1 through 3.2.10 has a race condition between the time when the LUKS encryption keyfile is created and when secure permissions are set.
CVE-2019-13179 1 Calamares 1 Calamares 2024-02-28 5.0 MEDIUM 7.5 HIGH
Calamares versions 3.1 through 3.2.10 copies a LUKS encryption keyfile from /crypto_keyfile.bin (mode 0600 owned by root) to /boot within a globally readable initramfs image with insecure permissions, which allows this originally protected file to be read by any user, thereby disclosing decryption keys for LUKS containers created with Full Disk Encryption.