English
EN
Français
FR
Language
English
EN
Français
FR

CVE Vulnerabilities

Posts & Pages

No results found for ""

Try different keywords or check spelling

Search in CVE database, posts & pages • Press ESC to close

DNA View

CVE-2024-23301

Medium
Low Medium High Critical
5.5
CVSS Score
Published: Jan 12, 2024
Last Modified: Dec 10, 2025
CWE: NVD-CWE-noinfo

Vulnerability Description

Relax-and-Recover (aka ReaR) through 2.7 creates a world-readable initrd when using GRUB_RESCUE=y. This allows local attackers to gain access to system secrets otherwise only readable by root.

CVSS Metrics

Common Vulnerability Scoring System

Vector String:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack Vector
L
Attack Complexity
L
Privileges Required
L
User Interaction
N
Scope
U
Confidentiality
H
Integrity
N
Availability
N

Known Affected Software

4 configuration(s) from 3 vendor(s)

fedora
Version:
39
CPE:
cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
enterprise_linux
Version:
8.0
CPE:
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:arm64:*
enterprise_linux
Version:
9.0
CPE:
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
linux_enterprise
Version:
15.0
CPE:
cpe:2.3:o:suse:linux_enterprise:15.0:sp5:*:*:*:*:*:*
This vulnerability affects 4 software configuration(s). Ensure you patch all affected systems.

References & Resources

Severity Details

5.5
out of 10.0
Medium

Weakness Type (CWE)

NVD-CWE-noinfo
View CWE Details on MITRE

Key Information

Published Date
January 12, 2024

External Resources

NIST
NIST NVD
National Vulnerability Database
MT
MITRE CVE
Official CVE record