CVE-2012-4453
dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other...
dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information.
Exploit likelihood
What each source reports
NVD Score used
2.1
dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information.
- Record
CVE-2012-4453- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-276
- Updated
- 2026-11-02
CVE List No score
dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information.
- Record
CVE-2012-4453- Updated
- 2026-11-02
EUVDEUVD-2012-4384 No score
dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information.
- Record
EUVD-2012-4384- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-84vh-967q-qr87 No score
dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other...
dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information.
- Record
GHSA-84vh-967q-qr87- Weakness
- CWE-276
- Updated
- 2026-11-02
OSV No score
dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information.
- Record
CVE-2012-4453- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-4453 No score
dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information.
- Record
DEBIAN-CVE-2012-4453- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10225-1 No score
dracut-044-17.1 on GA media
These are all security issues fixed in the dracut-044-17.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10225-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2012-4453 No score
dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information.
- Record
UBUNTU-CVE-2012-4453- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
dracutDebian:12 |
before 020-1.1 | 020-1.1 |
dracutDebian:13 |
before 020-1.1 | 020-1.1 |
dracutDebian:14 |
before 020-1.1 | 020-1.1 |
dracutRed Hat:enterprise_linux:6::client |
before 0:004-336.el6 | 0:004-336.el6 |
dracut-capsRed Hat:enterprise_linux:6::client |
before 0:004-336.el6 | 0:004-336.el6 |
dracut-fips-aesniRed Hat:enterprise_linux:6::client |
before 0:004-336.el6 | 0:004-336.el6 |
dracut-genericRed Hat:enterprise_linux:6::client |
before 0:004-336.el6 | 0:004-336.el6 |
dracut-toolsRed Hat:enterprise_linux:6::client |
before 0:004-336.el6 | 0:004-336.el6 |
dracut-fipsRed Hat:enterprise_linux:6::client |
before 0:004-336.el6 | 0:004-336.el6 |
dracut-kernelRed Hat:enterprise_linux:6::client |
before 0:004-336.el6 | 0:004-336.el6 |
Show 26 moreShow less
| Package | Affected | Fixed |
|---|---|---|
dracut-networkRed Hat:enterprise_linux:6::client |
before 0:004-336.el6 | 0:004-336.el6 |
dracutRed Hat:enterprise_linux:6::computenode |
before 0:004-336.el6 | 0:004-336.el6 |
dracut-capsRed Hat:enterprise_linux:6::computenode |
before 0:004-336.el6 | 0:004-336.el6 |
dracut-fips-aesniRed Hat:enterprise_linux:6::computenode |
before 0:004-336.el6 | 0:004-336.el6 |
dracut-genericRed Hat:enterprise_linux:6::computenode |
before 0:004-336.el6 | 0:004-336.el6 |
dracut-toolsRed Hat:enterprise_linux:6::computenode |
before 0:004-336.el6 | 0:004-336.el6 |
dracut-fipsRed Hat:enterprise_linux:6::computenode |
before 0:004-336.el6 | 0:004-336.el6 |
dracut-kernelRed Hat:enterprise_linux:6::computenode |
before 0:004-336.el6 | 0:004-336.el6 |
dracut-networkRed Hat:enterprise_linux:6::computenode |
before 0:004-336.el6 | 0:004-336.el6 |
dracutRed Hat:enterprise_linux:6::server |
before 0:004-336.el6 | 0:004-336.el6 |
dracut-capsRed Hat:enterprise_linux:6::server |
before 0:004-336.el6 | 0:004-336.el6 |
dracut-fips-aesniRed Hat:enterprise_linux:6::server |
before 0:004-336.el6 | 0:004-336.el6 |
dracut-genericRed Hat:enterprise_linux:6::server |
before 0:004-336.el6 | 0:004-336.el6 |
dracut-toolsRed Hat:enterprise_linux:6::server |
before 0:004-336.el6 | 0:004-336.el6 |
dracut-fipsRed Hat:enterprise_linux:6::server |
before 0:004-336.el6 | 0:004-336.el6 |
dracut-kernelRed Hat:enterprise_linux:6::server |
before 0:004-336.el6 | 0:004-336.el6 |
dracut-networkRed Hat:enterprise_linux:6::server |
before 0:004-336.el6 | 0:004-336.el6 |
dracutRed Hat:enterprise_linux:6::workstation |
before 0:004-336.el6 | 0:004-336.el6 |
dracut-capsRed Hat:enterprise_linux:6::workstation |
before 0:004-336.el6 | 0:004-336.el6 |
dracut-fips-aesniRed Hat:enterprise_linux:6::workstation |
before 0:004-336.el6 | 0:004-336.el6 |
dracut-genericRed Hat:enterprise_linux:6::workstation |
before 0:004-336.el6 | 0:004-336.el6 |
dracut-toolsRed Hat:enterprise_linux:6::workstation |
before 0:004-336.el6 | 0:004-336.el6 |
dracut-fipsRed Hat:enterprise_linux:6::workstation |
before 0:004-336.el6 | 0:004-336.el6 |
dracut-kernelRed Hat:enterprise_linux:6::workstation |
before 0:004-336.el6 | 0:004-336.el6 |
dracut-networkRed Hat:enterprise_linux:6::workstation |
before 0:004-336.el6 | 0:004-336.el6 |
dracutopenSUSE:Tumbleweed |
before 044-17.1 | 044-17.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-4453 is a low vulnerability (CVSS 2.1) in Dracut Project Dracut, published October 9, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 30th percentile. Fixed in dracut 020-1.1.
References
rhn.redhat.com/errata/RHSA-2013-1674.html
bugzilla.redhat.com/show_bug.cgi?id=859448
securityfocus.com/bid/55713
openwall.com/lists/oss-security/2012/09/27/4
exchange.xforce.ibmcloud.com/vulnerabilities/79258
git.kernel.org?p=boot/dracut/dracut.git%3Ba=commit%3Bh=e1b48995c26c4f06d1a71
Show 20 moreShow less
openwall.com/lists/oss-security/2012/09/27/6
openwall.com/lists/oss-security/2012/09/27/3
nvd.nist.gov/vuln/detail/CVE-2012-4453
git.kernel.org?p=boot/dracut/dracut.git;a=commit;h=e1b48995c26c4f06d1a71
github.com/advisories/GHSA-84vh-967q-qr87
security-tracker.debian.org/tracker/CVE-2012-4453
access.redhat.com/errata/RHSA-2013:1674
access.redhat.com/security/updates/classification
access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/6.5_Technical_Notes/dracut.html
bugzilla.redhat.com/show_bug.cgi?id=610462
bugzilla.redhat.com/show_bug.cgi?id=720684
bugzilla.redhat.com/show_bug.cgi?id=912299
bugzilla.redhat.com/show_bug.cgi?id=1012626
bugzilla.redhat.com/show_bug.cgi?id=1019104
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1674.json
access.redhat.com/security/cve/CVE-2012-4453
cve.org/CVERecord?id=CVE-2012-4453
ubuntu.com/security/CVE-2012-4453
suse.com/security/cve/CVE-2012-4453
suse.com/security/cve/CVE-2016-8637