{"id":"CVE-2015-0794","aliases":["EUVD-2015-0807","GHSA-j973-4x87-2j5r","SUSE-SU-2015:2065-1"],"status":"published","title":"modules.d/90crypt/module-setup.sh in the dracut package before 037-17.30.1 in openSUSE 13.2...","description":"modules.d/90crypt/module-setup.sh in the dracut package before 037-17.30.1 in openSUSE 13.2 allows local users to have unspecified impact via a symlink attack on /tmp/dracut_block_uuid.map.","severity":{"version":"2.0","score":3.6,"vector":"AV:L/AC:L/Au:N/C:N/I:P/A:P","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00349,"percentile":0.28664,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-59"],"published":"2015-11-19T20:00:00Z","modified":"2026-06-17T00:20:54Z","fixes":[{"ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"dracut","fixed_in":["037-51.17.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12","package":"dracut","fixed_in":["037-51.17.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"dracut","fixed_in":["037-51.17.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"037-51.17.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"037-51.17.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"037-51.17.3"}]}]}],"products":[{"vendor":"dracut_project","product":"dracut"}],"references":[{"url":"http://lists.opensuse.org/opensuse-bugs/2015-06/msg02580.html","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-11/msg00098.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-bugs/2015-06/msg02585.html","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0794"},{"url":"https://github.com/advisories/GHSA-j973-4x87-2j5r"},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20152065-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/935338","tags":["report"]},{"url":"https://bugzilla.suse.com/935993","tags":["report"]},{"url":"https://bugzilla.suse.com/947518","tags":["report"]},{"url":"https://bugzilla.suse.com/952491","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0794","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2015-0794","description":"modules.d/90crypt/module-setup.sh in the dracut package before 037-17.30.1 in openSUSE 13.2 allows local users to have unspecified impact via a symlink attack on /tmp/dracut_block_uuid.map.","status":"published","published":"2015-11-19T20:00:00Z","modified":"2024-08-06T04:26:10.164Z","updated_at":"2026-11-02T14:35:45.088047Z"}],"euvd":[{"id":"EUVD-2015-0807","description":"modules.d/90crypt/module-setup.sh in the dracut package before 037-17.30.1 in openSUSE 13.2 allows local users to have unspecified impact via a symlink attack on /tmp/dracut_block_uuid.map.","status":"published","published":"2015-11-19T20:00:00Z","modified":"2024-08-06T04:26:10Z","updated_at":"2026-11-03T02:22:18.008513Z"}],"ghsa":[{"id":"GHSA-j973-4x87-2j5r","title":"modules.d/90crypt/module-setup.sh in the dracut package before 037-17.30.1 in openSUSE 13.2...","description":"modules.d/90crypt/module-setup.sh in the dracut package before 037-17.30.1 in openSUSE 13.2 allows local users to have unspecified impact via a symlink attack on /tmp/dracut_block_uuid.map.","status":"published","published":"2022-05-13T01:14:59Z","modified":"2023-02-01T05:04:38Z","cwes":["CWE-59"],"updated_at":"2026-11-02T14:50:10.388803Z"}],"nvd":[{"id":"CVE-2015-0794","description":"modules.d/90crypt/module-setup.sh in the dracut package before 037-17.30.1 in openSUSE 13.2 allows local users to have unspecified impact via a symlink attack on /tmp/dracut_block_uuid.map.","status":"published","published":"2015-11-19T20:59:02.847Z","modified":"2026-06-17T00:20:54.59Z","cvss":[{"version":"2.0","score":3.6,"vector":"AV:L/AC:L/Au:N/C:N/I:P/A:P","level":"low","assessor":"primary"}],"cwes":["CWE-59"],"updated_at":"2026-11-02T14:03:12.30866Z"}],"osv":[{"id":"SUSE-SU-2015:2065-1","title":"Security update for dracut","description":"The dracut package was updated to fix the following security and non-security issues:\n\n- CVE-2015-0794: Use mktemp instead of hardcoded filenames, possible vulnerability (bsc#935338).\n- Always install mdraid modules (bsc#935993).\n- Add notice when dracut failed to install modules (bsc#952491).\n- Always install dm-snaphost module if lvm dracut module is needed, even if dm-snapshot is not loaded on the host yet (bsc#947518).\n","status":"published","published":"2015-11-20T13:29:19Z","modified":"2026-02-04T03:05:28.354057Z","updated_at":"2026-11-02T15:53:43.030986Z"}]}}