Every CVESearch/Get API key

CVE-2012-4453

dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other...

2.1 LowFix available

CVE-2012-4453 is a low vulnerability (CVSS 2.1) in Dracut Project Dracut, published October 9, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 30th percentile. Fixed in dracut 020-1.1.

What does this mean?
Severity
2.1 LowCVSS 2.0, NVD
Exploit chance
0.36%EPSS, 30th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
020-1.1dracut +35 more

Description

dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information.

Exploit likelihood

0.36%Down 0.7 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
dracut
Debian:12
before 020-1.1
020-1.1
dracut
Debian:13
before 020-1.1
020-1.1
dracut
Debian:14
before 020-1.1
020-1.1
dracut
Red Hat:enterprise_linux:6::client
before 0:004-336.el6
0:004-336.el6
dracut-caps
Red Hat:enterprise_linux:6::client
before 0:004-336.el6
0:004-336.el6
dracut-fips-aesni
Red Hat:enterprise_linux:6::client
before 0:004-336.el6
0:004-336.el6
dracut-generic
Red Hat:enterprise_linux:6::client
before 0:004-336.el6
0:004-336.el6
dracut-tools
Red Hat:enterprise_linux:6::client
before 0:004-336.el6
0:004-336.el6
dracut-fips
Red Hat:enterprise_linux:6::client
before 0:004-336.el6
0:004-336.el6
dracut-kernel
Red Hat:enterprise_linux:6::client
before 0:004-336.el6
0:004-336.el6
Show 26 moreShow less
Affected packages
PackageAffectedFixed
dracut-network
Red Hat:enterprise_linux:6::client
before 0:004-336.el6
0:004-336.el6
dracut
Red Hat:enterprise_linux:6::computenode
before 0:004-336.el6
0:004-336.el6
dracut-caps
Red Hat:enterprise_linux:6::computenode
before 0:004-336.el6
0:004-336.el6
dracut-fips-aesni
Red Hat:enterprise_linux:6::computenode
before 0:004-336.el6
0:004-336.el6
dracut-generic
Red Hat:enterprise_linux:6::computenode
before 0:004-336.el6
0:004-336.el6
dracut-tools
Red Hat:enterprise_linux:6::computenode
before 0:004-336.el6
0:004-336.el6
dracut-fips
Red Hat:enterprise_linux:6::computenode
before 0:004-336.el6
0:004-336.el6
dracut-kernel
Red Hat:enterprise_linux:6::computenode
before 0:004-336.el6
0:004-336.el6
dracut-network
Red Hat:enterprise_linux:6::computenode
before 0:004-336.el6
0:004-336.el6
dracut
Red Hat:enterprise_linux:6::server
before 0:004-336.el6
0:004-336.el6
dracut-caps
Red Hat:enterprise_linux:6::server
before 0:004-336.el6
0:004-336.el6
dracut-fips-aesni
Red Hat:enterprise_linux:6::server
before 0:004-336.el6
0:004-336.el6
dracut-generic
Red Hat:enterprise_linux:6::server
before 0:004-336.el6
0:004-336.el6
dracut-tools
Red Hat:enterprise_linux:6::server
before 0:004-336.el6
0:004-336.el6
dracut-fips
Red Hat:enterprise_linux:6::server
before 0:004-336.el6
0:004-336.el6
dracut-kernel
Red Hat:enterprise_linux:6::server
before 0:004-336.el6
0:004-336.el6
dracut-network
Red Hat:enterprise_linux:6::server
before 0:004-336.el6
0:004-336.el6
dracut
Red Hat:enterprise_linux:6::workstation
before 0:004-336.el6
0:004-336.el6
dracut-caps
Red Hat:enterprise_linux:6::workstation
before 0:004-336.el6
0:004-336.el6
dracut-fips-aesni
Red Hat:enterprise_linux:6::workstation
before 0:004-336.el6
0:004-336.el6
dracut-generic
Red Hat:enterprise_linux:6::workstation
before 0:004-336.el6
0:004-336.el6
dracut-tools
Red Hat:enterprise_linux:6::workstation
before 0:004-336.el6
0:004-336.el6
dracut-fips
Red Hat:enterprise_linux:6::workstation
before 0:004-336.el6
0:004-336.el6
dracut-kernel
Red Hat:enterprise_linux:6::workstation
before 0:004-336.el6
0:004-336.el6
dracut-network
Red Hat:enterprise_linux:6::workstation
before 0:004-336.el6
0:004-336.el6
dracut
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
before 044-17.1
044-17.1

What each source reports

NVD Score used2.1

dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information.

Record
CVE-2012-4453
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-276
Updated
2026-11-02
CVE ListNo score

dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information.

Record
CVE-2012-4453
Updated
2026-11-02
EUVDEUVD-2012-4384No score

dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information.

Record
EUVD-2012-4384
Updated
2026-11-03
GitHub AdvisoriesGHSA-84vh-967q-qr87No score

dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other...

dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information.

Record
GHSA-84vh-967q-qr87
Weakness
CWE-276
Updated
2026-11-02
OSVNo score

dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information.

Record
CVE-2012-4453
Updated
2026-11-02
OSVDEBIAN-CVE-2012-4453No score

dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information.

Record
DEBIAN-CVE-2012-4453
Updated
2026-11-02
OSVopenSUSE-SU-2024:10225-1No score

dracut-044-17.1 on GA media

These are all security issues fixed in the dracut-044-17.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10225-1
Updated
2026-11-02
OSVUBUNTU-CVE-2012-4453No score

dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information.

Record
UBUNTU-CVE-2012-4453
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
affected
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 20 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open