Symlink Attack Vulnerability in dracut Package

CVE-2015-0794 · LOW Severity

AV:L/AC:L/AU:N/C:N/I:P/A:P

modules.d/90crypt/module-setup.sh in the dracut package before 037-17.30.1 in openSUSE 13.2 allows local users to have unspecified impact via a symlink attack on /tmp/dracut_block_uuid.map.

Learn more about our Cis Benchmark Audit For Suse Linux Enterprise Server.