Non évaluée
Calamares versions 3.1 through 3.2.10 copies a LUKS encryption keyfile from /crypto_keyfile.bin (mode 0600 owned by root) to /boot within a globally r...
CVE-2019-13179
Première détection SecPulse
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2019-13179 calamares Corrigé dans: 3.2.11-1
Description d'origine La description telle que publiée par la source (souvent en anglais).
Calamares versions 3.1 through 3.2.10 copies a LUKS encryption keyfile from /crypto_keyfile.bin (mode 0600 owned by root) to /boot within a globally readable initramfs image with insecure permissions, which allows this originally protected file to be read by any user, thereby disclosing decryption keys for LUKS containers created with Full Disk Encryption.
Références
- advisory bugs.launchpad.net
- advisory calamares.io
- advisory calamares.io
- report bugs.launchpad.net
- report bugzilla.redhat.com
- report github.com
- web lists.fedoraproject.org
- web lists.fedoraproject.org