CVE-2015-0794

Severity: low (CVSS 3.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-11-19 · updated 2026-06-17
Weakness: CWE-59

Description

modules.d/90crypt/module-setup.sh in the dracut package before 037-17.30.1 in openSUSE 13.2 allows local users to have unspecified impact via a symlink attack on /tmp/dracut_block_uuid.map.

Affected products

The Dracut Project dracut: before 037-17.30.1 — fixed in 037-17.30.1

How to fix

Upgrade to a fixed version: The Dracut Project dracut 037-17.30.1. Check the vendor advisory for mitigations.

References

http://lists.opensuse.org/opensuse-bugs/2015-06/msg02580.html
http://lists.opensuse.org/opensuse-bugs/2015-06/msg02585.html
http://lists.opensuse.org/opensuse-updates/2015-11/msg00098.html
http://lists.opensuse.org/opensuse-bugs/2015-06/msg02580.html
http://lists.opensuse.org/opensuse-bugs/2015-06/msg02585.html
http://lists.opensuse.org/opensuse-updates/2015-11/msg00098.html

Get alerted when CVE-2015-0794 or the next vulnerability affects your stack