Approved changes feed: RSS · Atom

cpe:2.3:a:debian:initramfs-tools:0.92f:*:*:*:*:*:*:*

part: a version: 0.92f update: *

VendorDebian (4199fb5b-36f6-5ceb-83d5-855460345e36)
ProductInitramfs Tools (3d456194-ebf1-534f-9848-941e2bdef06f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/initramfs-tools purl2cpe 2026-06-01 10:17:13.030446
pkg:deb/ubuntu/initramfs-tools purl2cpe 2026-06-01 10:17:13.030449
pkg:github/genesi/initramfs-tools purl2cpe 2026-06-01 10:17:13.030452
pkg:gnome/initramfs-tools purl2cpe 2026-06-01 10:17:13.030455

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-4996 vulnerable 2026-06-08 04:50:48.800795 Details available
init in initramfs-tools 0.92f allows local users to overwrite arbitrary files via a symlink attack on the /tmp/initramfs.debug temporary file. NOTE: the vendor disputes this vulnerability, stating that "init is [used in] a single-user context; there's no possibility that this is exploitable.
Published: 2008-11-07T19:00:00.000Z
Updated: 2025-01-17T15:24:30.124Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.