Approved changes feed: RSS · Atom

cpe:2.3:a:the_dracut_project:dracut:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorThe Dracut Project (72cfd83c-95c8-563f-ba5a-b0b0464b9b35)
ProductDracut (f7f0fc5b-5b7f-52d4-ad19-8af3053255ed)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-8637 vulnerable 2026-06-08 05:08:14.518722 Details available
MEDIUM (5)
A local information disclosure issue was found in dracut before 045 when generating initramfs images with world-readable permissions when 'early cpio' is used, such as when including microcode updates. Local attacker can use this to obtain sensitive information from these files, such as encryption keys or credentials.
Published: 2018-08-01T13:00:00.000Z
Updated: 2024-08-06T02:27:41.222Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.