CVE-2019-13179

Calamares versions 3.1 through 3.2.10 copies a LUKS encryption keyfile from /crypto_keyfile.bin (mode 0600 owned by root) to /boot within a globally readable…

published July 2, 2019

CVSS
—
EPSS
2%
Percentile
81.6
In the wild
Unconfirmed
What it is

Calamares versions 3.1 through 3.2.10 copies a LUKS encryption keyfile from /crypto_keyfile.bin (mode 0600 owned by root) to /boot within a globally readable initramfs image with insecure permissions, which allows this originally protected file to be read by any user, thereby disclosing decryption keys for LUKS containers created with Full Disk Encryption.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02105 · 81.6th percentile
Published
2019-07-02T22:43Z
EPSS history
Timeline
  • 02 JUL 22:43Z
    Calamares versions 3.1 through 3.2.10 copies a LUKS encryption keyfile from /crypto_keyfile.bin (mode 0600 owned by root) to /boot within a globally readable…
    cvelistv5