CVE-2016-8637 : A local information disclosure issue was found in dracut before 045 when generat

A local information disclosure issue was found in dracut before 045 when generating initramfs images with world-readable permissions when 'early cpio' is used, such as when including microcode updates. Local attacker can use this to obtain sensitive information from these files, such as encryption keys or credentials.

Published 2018-08-01 13:29:00

Updated 2023-02-12 23:26:16

Source Red Hat, Inc.

View at NVD, CVE.org

Vulnerability category: Information leak

Products affected by CVE-2016-8637

Dracut Project » Dracut
Versions before (<) 045
cpe:2.3:a:dracut_project:dracut:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2016-8637

EPSS FAQ

0.05%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 19 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2016-8637

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
2.1	LOW	AV:L/AC:L/Au:N/C:P/I:N/A:N	3.9	2.9	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
7.8	HIGH	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
5.0	MEDIUM	CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N	1.3	3.6	Red Hat, Inc.
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: Required Scope: Unchanged Confidentiality: High Integrity: None Availability: None

CWE ids for CVE-2016-8637

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Assigned by: nvd@nist.gov (Secondary)
CWE-732 Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

Assigned by: secalert@redhat.com (Primary)

References for CVE-2016-8637

http://seclists.org/oss-sec/2016/q4/352

oss-sec: CVE-2016-8637: dracut creates world readble initramfs when early cpio is used
Exploit;Mailing List;Third Party Advisory
https://github.com/dracutdevs/dracut/commit/0db98910a11c12a454eac4c8e86dc7a7bbc764a4

dracut.sh: create the initramfs non-world readable also if early cpio… · dracutdevs/dracut@0db9891 · GitHub
Patch;Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8637

1392056 – (CVE-2016-8637) CVE-2016-8637 dracut: Local information disclosure of initramfs when early cpio is used
Exploit;Issue Tracking;Third Party Advisory
http://www.securityfocus.com/bid/94128

Dracut CVE-2016-8637 Local Information Disclosure Vulnerability
Third Party Advisory;VDB Entry

Jump to

Vulnerability Details : CVE-2016-8637

Products affected by CVE-2016-8637

Exploit prediction scoring system (EPSS) score for CVE-2016-8637

CVSS scores for CVE-2016-8637

CWE ids for CVE-2016-8637

References for CVE-2016-8637