Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2016-8637
Description:A local information disclosure issue was found in dracut before 045 when generating initramfs images with world-readable permissions when 'early cpio' is used, such as when including microcode updates. Local attacker can use this to obtain sensitive information from these files, such as encryption keys or credentials.
Test IDs: 1.3.6.1.4.1.25623.1.1.4.2017.0951.1   1.3.6.1.4.1.25623.1.1.4.2017.2696.1   1.3.6.1.4.1.25623.1.0.871945   1.3.6.1.4.1.25623.1.1.4.2017.0641.1   1.3.6.1.4.1.25623.1.0.810128   1.3.6.1.4.1.25623.1.1.10.2016.0387  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2016-8637
94128
http://www.securityfocus.com/bid/94128
[oss-security] 20161107 CVE-2016-8637: dracut creates world readble initramfs when early cpio is used
http://seclists.org/oss-sec/2016/q4/352
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8637
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8637
https://github.com/dracutdevs/dracut/commit/0db98910a11c12a454eac4c8e86dc7a7bbc764a4
https://github.com/dracutdevs/dracut/commit/0db98910a11c12a454eac4c8e86dc7a7bbc764a4




© 1998-2025 E-Soft Inc. All rights reserved.