Kexec Tools
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:kexec-tools:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Kexec Tools (1217d43e-7edf-562f-98ba-f4d36f8eb952) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/kexec-tools |
purl2cpe | 2026-06-01 10:12:52.882680 |
pkg:deb/ubuntu/kexec-tools |
purl2cpe | 2026-06-01 10:12:52.882682 |
pkg:github/horms/kexec-tools |
purl2cpe | 2026-06-01 10:12:52.882683 |
pkg:gitlab/redhat/kexec-tools |
purl2cpe | 2026-06-01 10:12:52.882685 |
pkg:gnome/kexec-tools |
purl2cpe | 2026-06-01 10:12:52.882686 |
pkg:rpm/fedora/kexec-tools |
purl2cpe | 2026-06-01 10:12:52.882688 |
pkg:rpm/fedora/kexec-tools-eppic |
purl2cpe | 2026-06-01 10:12:52.882689 |
pkg:rpm/opensuse/kexec-tools |
purl2cpe | 2026-06-01 10:12:52.882691 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2015-0267 |
vulnerable | 2026-06-08 05:06:14.174057 |
Details available
The Red Hat module-setup.sh script for kexec-tools, as distributed in the kexec-tools before 2.0.7-19 packages in Red Hat Enterprise Linux, allows local users to write to arbitrary files via a symlink attack on a temporary file.
Published: 2015-05-19T18:00:00.000Z
Updated: 2024-08-06T04:03:10.894Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3590 |
vulnerable | 2026-06-08 04:59:26.512533 |
Details available
The Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1.102pre-154 and 2.x before 2.0.0-209 packages in Red Hat Enterprise Linux, includes all of root's SSH private keys within a vmcore file, which allows context-dependent attackers to obtain sensitive information by inspecting the file content.
Published: 2014-02-15T11:00:00.000Z
Updated: 2024-08-06T23:37:48.351Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3589 |
vulnerable | 2026-06-08 04:59:26.512246 |
Details available
The Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1.102pre-154 and 2.x before 2.0.0-209 packages in Red Hat Enterprise Linux, uses world-readable permissions for vmcore files, which allows local users to obtain sensitive information by inspecting the file content, as demonstrated by a search for a root SSH key.
Published: 2014-02-15T11:00:00.000Z
Updated: 2024-08-06T23:37:48.227Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3588 |
vulnerable | 2026-06-08 04:59:26.511876 |
Details available
The SSH configuration in the Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1.102pre-154 and 2.x before 2.0.0-209 packages in Red Hat Enterprise Linux, disables the StrictHostKeyChecking option, which allows man-in-the-middle attackers to spoof kdump servers, and obtain sensitive core information, by using an arbitrary SSH key.
Published: 2014-02-15T11:00:00.000Z
Updated: 2024-08-06T23:37:48.390Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.