Lucene search
Ubuntu.comUB:CVE-2024-23301HistoryJan 12, 2024 - 12:00 a.m.
CVE-2024-23301
2024-01-1200:00:00
ubuntu.com
ubuntu.com
14
cve-2024-23301
relax-and-recover
local attackers
system secrets
debian
initrd
grub_rescue
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
AI Score
7.2
Confidence
Low
EPSS
0
Percentile
5.1%
Relax-and-Recover (aka ReaR) through 2.7 creates a world-readable initrd
when using GRUB_RESCUE=y. This allows local attackers to gain access to
system secrets otherwise only readable by root.
Bugs
References
Related
nessus
nessus
SUSE SLES15 Security Update : rear27a (SUSE-SU-2024:0253-1)
2024-01-27 00:00:00
Amazon Linux 2 : rear (ALAS-2024-2451)
2024-02-06 00:00:00
Fedora 39 : rear (2024-a2f6e5ddb8)
2024-02-21 00:00:00
oraclelinux
oraclelinux
rear security update
2024-04-09 00:00:00
rear security update
2024-03-06 00:00:00
openvas
openvas
Fedora: Security Advisory for rear (FEDORA-2024-49ddbf447d)
2024-02-22 00:00:00
Mageia: Security Advisory (MGASA-2024-0131)
2024-04-15 00:00:00
Debian: Security Advisory (DLA-3733-1)
2024-02-05 00:00:00
almalinux
almalinux
Moderate: rear security update
2024-04-09 00:00:00
Moderate: rear security update
2024-03-05 00:00:00
nvd
nvd
CVE-2024-23301
2024-01-12 23:15:10
osv
osv
rear - security update
2024-02-03 00:00:00
CVE-2024-23301
2024-01-12 23:15:10
Moderate: rear security update
2024-03-05 00:00:00
cve
cve
CVE-2024-23301
2024-01-12 23:15:10
debiancve
debiancve
CVE-2024-23301
2024-01-12 23:15:10
fedora
fedora
[SECURITY] Fedora 39 Update: rear-2.7-8.fc39
2024-02-21 01:33:27
[SECURITY] Fedora 38 Update: rear-2.7-8.fc38
2024-02-21 01:39:46
debian
debian
[SECURITY] [DLA 3733-1] rear security update
2024-02-03 18:01:35
redhat
redhat
(RHSA-2024:1147) Moderate: rear security update
2024-03-05 15:32:28
(RHSA-2024:1719) Moderate: rear security update
2024-04-09 14:08:16
mageia
mageia
Updated rear packages fix security vulnerability
2024-04-13 19:56:38
redos
redos
ROS-20240328-09
2024-03-28 00:00:00
cvelist
cvelist
CVE-2024-23301
2024-01-12 00:00:00
redhatcve
redhatcve
CVE-2024-23301
2024-01-15 05:30:37
rocky
rocky
rear security update
2024-05-06 13:04:21
amazon
amazon
Medium: rear
2024-02-15 03:52:00
prion
prion
Code injection
2024-01-12 23:15:00
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
AI Score
7.2
Confidence
Low
EPSS
0
Percentile
5.1%
Related for UB:CVE-2024-23301