Every CVE Search/ Get API key

CVE-2012-4453

dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other...

2.1 LowFix available

dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information.

Exploit likelihood

0.36%Down 0.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 2.1

dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information.

Record
CVE-2012-4453
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-276
Updated
2026-11-02
CVE List No score

dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information.

Record
CVE-2012-4453
Updated
2026-11-02
EUVDEUVD-2012-4384 No score

dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information.

Record
EUVD-2012-4384
Updated
2026-11-03
GitHub AdvisoriesGHSA-84vh-967q-qr87 No score

dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other...

dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information.

Record
GHSA-84vh-967q-qr87
Weakness
CWE-276
Updated
2026-11-02
OSV No score

dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information.

Record
CVE-2012-4453
Updated
2026-11-02
OSVDEBIAN-CVE-2012-4453 No score

dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information.

Record
DEBIAN-CVE-2012-4453
Updated
2026-11-02
OSVopenSUSE-SU-2024:10225-1 No score

dracut-044-17.1 on GA media

These are all security issues fixed in the dracut-044-17.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10225-1
Updated
2026-11-02
OSVUBUNTU-CVE-2012-4453 No score

dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information.

Record
UBUNTU-CVE-2012-4453
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
dracut
Debian:12
before 020-1.1
020-1.1
dracut
Debian:13
before 020-1.1
020-1.1
dracut
Debian:14
before 020-1.1
020-1.1
dracut
Red Hat:enterprise_linux:6::client
before 0:004-336.el6
0:004-336.el6
dracut-caps
Red Hat:enterprise_linux:6::client
before 0:004-336.el6
0:004-336.el6
dracut-fips-aesni
Red Hat:enterprise_linux:6::client
before 0:004-336.el6
0:004-336.el6
dracut-generic
Red Hat:enterprise_linux:6::client
before 0:004-336.el6
0:004-336.el6
dracut-tools
Red Hat:enterprise_linux:6::client
before 0:004-336.el6
0:004-336.el6
dracut-fips
Red Hat:enterprise_linux:6::client
before 0:004-336.el6
0:004-336.el6
dracut-kernel
Red Hat:enterprise_linux:6::client
before 0:004-336.el6
0:004-336.el6
Show 26 moreShow less
Affected packages
PackageAffectedFixed
dracut-network
Red Hat:enterprise_linux:6::client
before 0:004-336.el6
0:004-336.el6
dracut
Red Hat:enterprise_linux:6::computenode
before 0:004-336.el6
0:004-336.el6
dracut-caps
Red Hat:enterprise_linux:6::computenode
before 0:004-336.el6
0:004-336.el6
dracut-fips-aesni
Red Hat:enterprise_linux:6::computenode
before 0:004-336.el6
0:004-336.el6
dracut-generic
Red Hat:enterprise_linux:6::computenode
before 0:004-336.el6
0:004-336.el6
dracut-tools
Red Hat:enterprise_linux:6::computenode
before 0:004-336.el6
0:004-336.el6
dracut-fips
Red Hat:enterprise_linux:6::computenode
before 0:004-336.el6
0:004-336.el6
dracut-kernel
Red Hat:enterprise_linux:6::computenode
before 0:004-336.el6
0:004-336.el6
dracut-network
Red Hat:enterprise_linux:6::computenode
before 0:004-336.el6
0:004-336.el6
dracut
Red Hat:enterprise_linux:6::server
before 0:004-336.el6
0:004-336.el6
dracut-caps
Red Hat:enterprise_linux:6::server
before 0:004-336.el6
0:004-336.el6
dracut-fips-aesni
Red Hat:enterprise_linux:6::server
before 0:004-336.el6
0:004-336.el6
dracut-generic
Red Hat:enterprise_linux:6::server
before 0:004-336.el6
0:004-336.el6
dracut-tools
Red Hat:enterprise_linux:6::server
before 0:004-336.el6
0:004-336.el6
dracut-fips
Red Hat:enterprise_linux:6::server
before 0:004-336.el6
0:004-336.el6
dracut-kernel
Red Hat:enterprise_linux:6::server
before 0:004-336.el6
0:004-336.el6
dracut-network
Red Hat:enterprise_linux:6::server
before 0:004-336.el6
0:004-336.el6
dracut
Red Hat:enterprise_linux:6::workstation
before 0:004-336.el6
0:004-336.el6
dracut-caps
Red Hat:enterprise_linux:6::workstation
before 0:004-336.el6
0:004-336.el6
dracut-fips-aesni
Red Hat:enterprise_linux:6::workstation
before 0:004-336.el6
0:004-336.el6
dracut-generic
Red Hat:enterprise_linux:6::workstation
before 0:004-336.el6
0:004-336.el6
dracut-tools
Red Hat:enterprise_linux:6::workstation
before 0:004-336.el6
0:004-336.el6
dracut-fips
Red Hat:enterprise_linux:6::workstation
before 0:004-336.el6
0:004-336.el6
dracut-kernel
Red Hat:enterprise_linux:6::workstation
before 0:004-336.el6
0:004-336.el6
dracut-network
Red Hat:enterprise_linux:6::workstation
before 0:004-336.el6
0:004-336.el6
dracut
openSUSE:Tumbleweed
before 044-17.1
044-17.1

History

History
RecordedChangedSources
affected
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-4453 is a low vulnerability (CVSS 2.1) in Dracut Project Dracut, published October 9, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 30th percentile. Fixed in dracut 020-1.1.

References

Show 20 moreShow less
MoveEnter Open