Red Hat Kexec-Tools vulnerabilities

4 CVEs affecting Red Hat Kexec-Tools, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-0267, published 2015-05-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2011-3590, published 2014-02-15. Medium severity, CVSS 5.7. EPSS: 0.6% chance of exploitation in the next 30 days. The Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1.102pre-154 and 2.x before 2.0.0-209 packages in Red Hat Enterprise Linux, includes all of root's SSH…
CVE-2011-3588, published 2014-02-15. Medium severity, CVSS 5.7. EPSS: 0.5% chance of exploitation in the next 30 days. The SSH configuration in the Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1.102pre-154 and 2.x before 2.0.0-209 packages in Red Hat Enterprise Linux, disables…
CVE-2011-3589, published 2014-02-15. Medium severity, CVSS 5.7. EPSS: 0.5% chance of exploitation in the next 30 days. The Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1.102pre-154 and 2.x before 2.0.0-209 packages in Red Hat Enterprise Linux, uses world-readable permissions…
CVE-2015-0267, published 2015-05-19. Low severity, CVSS 3.6. EPSS: 0.4% chance of exploitation in the next 30 days. The Red Hat module-setup.sh script for kexec-tools, as distributed in the kexec-tools before 2.0.7-19 packages in Red Hat Enterprise Linux, allows local users to write to arbitrary files via a…