Calamares

calamares

2 CVEs • 1 product

Products (1)

Click to collapse

Toggle

Calamares

calamares

2 CVEs

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2019-13179 1Calamares 1Calamares Jun 17, 2026 Jul 2, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Calamares versions 3.1 through 3.2.10 copies a LUKS encryption keyfile from /crypto_keyfile.bin (mode 0600 owned by root) to /boot within a globally readable initramfs image with insecure permissions, which allows this o...Show more Calamares versions 3.1 through 3.2.10 copies a LUKS encryption keyfile from /crypto_keyfile.bin (mode 0600 owned by root) to /boot within a globally readable initramfs image with insecure permissions, which allows this originally protected file to be read by any user, thereby disclosing decryption keys for LUKS containers created with Full Disk Encryption.Show less
CVE-2019-13178 1Calamares 1Calamares Jun 17, 2026 Jul 2, 2019 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 modules/luksbootkeyfile/main.py in Calamares versions 3.1 through 3.2.10 has a race condition between the time when the LUKS encryption keyfile is created and when secure permissions are set.

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2019-13179

1Calamares

Jun 17, 2026

Jul 2, 2019

N/A· v4

7.5 HIGH· v3

5.0 MEDIUM· v2

Calamares versions 3.1 through 3.2.10 copies a LUKS encryption keyfile from /crypto_keyfile.bin (mode 0600 owned by root) to /boot within a globally readable initramfs image with insecure permissions, which allows this originally protected file to be read by any user, thereby disclosing decryption keys for LUKS containers created with Full Disk Encryption.Show less

CVE-2019-13178

1Calamares

Jun 17, 2026

Jul 2, 2019

N/A· v4

8.1 HIGH· v3

6.8 MEDIUM· v2

modules/luksbootkeyfile/main.py in Calamares versions 3.1 through 3.2.10 has a race condition between the time when the LUKS encryption keyfile is created and when secure permissions are set.