Relax And Recover
1 CVEs
product
Monthly
Relax-and-Recover (aka ReaR) through 2.7 creates a world-readable initrd when using GRUB_RESCUE=y. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available.
Privilege Escalation
Red Hat
Enterprise Linux
Fedora
Suse
+3
NVD
GitHub
CVSS 3.1
5.5
EPSS
0.1%
EPSS 0%
CVSS 5.5
MEDIUM
POC
PATCH
This Month
Relax-and-Recover (aka ReaR) through 2.7 creates a world-readable initrd when using GRUB_RESCUE=y. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available.
Privilege Escalation
Red Hat
Enterprise Linux
+5
NVD
GitHub