Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Calamares versions 3.1 through 3.2.10 copies a LUKS encryption keyfile from /crypto_keyfile.bin (mode 0600 owned by root) to /boot within a globally readable initramfs image with insecure permissions, which allows this originally protected file to be read by any user, thereby disclosing decryption keys for LUKS containers created with Full Disk Encryption.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Calamares 授权问题漏洞
Vulnerability Description
Calamares是Calamares团队的一款通用安装程序框架。 Calamares 3.2.4及之前版本中存在安全漏洞。攻击者可利用该漏洞读取LUKS加密密钥文件，进而泄露解密密钥。
CVSS Information
N/A
Vulnerability Type
N/A