VYPR

Relax-and-Recover

by Relax-and-Recover

CVEs (1)

  • CVE-2024-23301MedJan 12, 2024
    risk 0.00cvss 5.5epss 0.00

    Relax-and-Recover (aka ReaR) through 2.7 creates a world-readable initrd when using GRUB_RESCUE=y. This allows local attackers to gain access to system secrets otherwise only readable by root.