CVE-2016-8637 Information disclosure in dracut
Local attackers can read sensitive data like encryption keys from initramfs images if early cpio is enabled, due to world-readable permissions.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2016-8637?
CVE-2016-8637 is a medium-severity vulnerability in The Dracut Project dracut, published on 1 Aug 2018. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
A local information disclosure issue was found in dracut before 045 when generating initramfs images with world-readable permissions when 'early cpio' is used, such as when including microcode updates. Local attacker can use this to obtain sensitive information from these files, such as encryption keys or credentials.
Which versions are affected by CVE-2016-8637?
It affects 1 product.
Linux distribution packages (8)
dracut SUSE:Linux Enterprise Desktop 12 SP1 | All versions | 037-91.1 |
dracut SUSE:Linux Enterprise Desktop 12 SP2 | All versions | 044-108.1 |
dracut SUSE:Linux Enterprise Server 12 SP1 | All versions | 037-91.1 |
dracut SUSE:Linux Enterprise Server 12 SP2 | All versions | 044-108.1 |
dracut SUSE:Linux Enterprise Server 12-LTSS | All versions | 037-51.31.1 |
dracut SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2 | All versions | 044-108.1 |
dracut SUSE:Linux Enterprise Server for SAP Applications 12 SP1 | All versions | 037-91.1 |
dracut SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | All versions | 044-108.1 |
Products include Dracut Project Dracut.
How do I fix CVE-2016-8637?
Upgrade to a fixed version.
Is CVE-2016-8637 being exploited?
There is no known exploitation of CVE-2016-8637 in the wild and no public exploit code.
Other vulnerabilities in The Dracut Project dracut
Sources
Also known as DEBIAN-CVE-2016-8637, GHSA-wf9g-696p-j466, MGASA-2016-0387, SUSE-SU-2017:0641-1, SUSE-SU-2017:0951-1, SUSE-SU-2017:2696-1 and 1 more.