Red Hat Enterprise Linux 10/clevis
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| clevis: clevis: integer underflow in PKCS#11 data socket handler crashes daemon on unbound client connection | Red Hat Enterprise Linux 10/clevisRed Hat Enterprise Linux 9/clevis | Red Hat | Low | No fix reported | |
| clevis: clevis: PKCS#11 token PIN exposed on command line via pkcs11-tool | Red Hat Enterprise Linux 10/clevisRed Hat Enterprise Linux 7/clevis | Red Hat | Medium | No fix reported | |
| clevis: clevis: PKCS#11 token PIN written to world-readable file | Red Hat Enterprise Linux 10/clevisRed Hat Enterprise Linux 7/clevis | Red Hat | Medium | No fix reported | |
| clevis: clevis: no authentication on PKCS#11 AF_UNIX sockets allows key injection under permissive umask | Red Hat Enterprise Linux 10/clevisRed Hat Enterprise Linux 7/clevis | Red Hat | Medium | No fix reported | |
| clevis: clevis: PKCS#11 LUKS passphrase logged in plaintext to world-readable file | Red Hat Enterprise Linux 10/clevisRed Hat Enterprise Linux 7/clevis | Red Hat | Medium | No fix reported |