CVE-2016-4484
published 2017-01-23CVE-2016-4484: The Debian initrd script for the cryptsetup package 2:1.7.3-2 and earlier allows physically proximate attackers to gain shell access via many log in attempts…
PriorityP429medium6.8CVSS 3.0
AVPACLPRNUINSUCHIHAH
EPSS
0.71%
49.8th percentile
The Debian initrd script for the cryptsetup package 2:1.7.3-2 and earlier allows physically proximate attackers to gain shell access via many log in attempts with an invalid password.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cryptsetup_project | cryptsetup | <= 2.1.7.3-2 | — |
| cryptsetup_project | cryptsetup | >= 0 < 2:1.7.3-2 | 2:1.7.3-2 |
| cryptsetup_project | cryptsetup | >= 0 < 2:1.7.3-2 | 2:1.7.3-2 |
| cryptsetup_project | cryptsetup | >= 0 < 2:1.7.3-2 | 2:1.7.3-2 |
| cryptsetup_project | cryptsetup | >= 0 < 2:1.7.3-2 | 2:1.7.3-2 |
| debian | cryptsetup | < cryptsetup 2:1.7.3-2 (bookworm) | cryptsetup 2:1.7.3-2 (bookworm) |
CVSS provenance
nvdv3.06.8MEDIUMCVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
osv6.8MEDIUM
vendor_debian6.8LOW
vendor_redhat6.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
dracut: Brute force attack on LUKS password decryption via initramfs
vendor_redhat·2016-11-14·CVSS 6.8
CVE-2016-4484 [MEDIUM] CWE-391 dracut: Brute force attack on LUKS password decryption via initramfs
dracut: Brute force attack on LUKS password decryption via initramfs
The Debian initrd script for the cryptsetup package 2:1.7.3-2 and earlier allows physically proximate attackers to gain shell access via many log in attempts with an invalid password.
A password-check vulnerability was found in the way initramfs, generated by dracut, handles the decryption of LUKS-encrypted data partitions. An attacker having physical access to the machine or access to the boot console may be able to brute-force the LUKS password using the dracut shell, and may be able to copy off the encrypted partition for an offline brute-force attack or, in certain conditions, install malicious boot images in the /boot partition.
Statement: In Red Hat Enterprise Linux and Fedora, the scripts used during boot time t
Debian
CVE-2016-4484: cryptsetup - The Debian initrd script for the cryptsetup package 2:1.7.3-2 and earlier allows...
vendor_debian·2016·CVSS 6.8
CVE-2016-4484 [MEDIUM] CVE-2016-4484: cryptsetup - The Debian initrd script for the cryptsetup package 2:1.7.3-2 and earlier allows...
The Debian initrd script for the cryptsetup package 2:1.7.3-2 and earlier allows physically proximate attackers to gain shell access via many log in attempts with an invalid password.
Scope: local
bookworm: resolved (fixed in 2:1.7.3-2)
bullseye: resolved (fixed in 2:1.7.3-2)
forky: resolved (fixed in 2:1.7.3-2)
sid: resolved (fixed in 2:1.7.3-2)
trixie: resolved (fixed in 2:1.7.3-2)
GHSA
GHSA-gv5v-vgx2-hgvr: The Debian initrd script for the cryptsetup package 2:1
ghsa_unreviewed·2022-05-17
CVE-2016-4484 [HIGH] CWE-287 GHSA-gv5v-vgx2-hgvr: The Debian initrd script for the cryptsetup package 2:1
The Debian initrd script for the cryptsetup package 2:1.7.3-2 and earlier allows physically proximate attackers to gain shell access via many log in attempts with an invalid password.
OSV
CVE-2016-4484: The Debian initrd script for the cryptsetup package 2:1
osv·2017-01-23·CVSS 6.8
CVE-2016-4484 [MEDIUM] CVE-2016-4484: The Debian initrd script for the cryptsetup package 2:1
The Debian initrd script for the cryptsetup package 2:1.7.3-2 and earlier allows physically proximate attackers to gain shell access via many log in attempts with an invalid password.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2016-4484 dracut: Brute force attack on LUKS password decryption via initramfs
bugzilla·2016-11-15·CVSS 6.8
CVE-2016-4484 [MEDIUM] CVE-2016-4484 dracut: Brute force attack on LUKS password decryption via initramfs
CVE-2016-4484 dracut: Brute force attack on LUKS password decryption via initramfs
A vulnerability in Cryptsetup, concretely in the scripts that unlock the system partition when the partition is ciphered using LUKS (Linux Unified Key Setup) was found. The fault is caused by an incorrect handling of the password check in the script file /scripts/local-top/cryptroot. This vulnerability allows to obtain a root initramfs shell on affected systems. Attackers can copy, modify or destroy the hard disc as well as set up the network to exflitrate data.
Public via:
http://seclists.org/oss-sec/2016/q4/427
External References:
https://access.redhat.com/articles/2786581
http://hmarco.org/bugs/CVE-2016-4484/CVE-2016-4484_cryptsetup_initrd_shell.html
Discussion:
Created cryptsetup tracking bugs fo
Bugzilla
CVE-2016-4484 dracut: Incorrect error handling when checking password [fedora-all]
bugzilla·2016-11-15·CVSS 6.8
CVE-2016-4484 [MEDIUM] CVE-2016-4484 dracut: Incorrect error handling when checking password [fedora-all]
CVE-2016-4484 dracut: Incorrect error handling when checking password [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported version
arXiv
Real-World Usability of Vulnerability Proof-of-Concepts: A Comprehensive Study
arxiv_fulltext·2025-10-21
Real-World Usability of Vulnerability Proof-of-Concepts: A Comprehensive Study
Real-World Usability of Vulnerability Proof-of-Concepts: A Comprehensive Study
Wenjing Dang, Kaixuan Li, Member, IEEE, Sen Chen, Member, IEEE, Zhenwei Zhuo, \ Zhang, Member, IEEE, and Zheli Liu, Member, IEEE
Wenjing Dang and Kaixuan Li contributed equally to this work.
Wenjing Dang and Zhenwei Zhuo are with the College of Intelligence and Computing, Tianjin University, China. Kaixuan Li and Lyuye Zhang are with the Nanyang Technological University, Singapore. Sen Chen (Corresponding author) and Zheli Liu are with the Nankai University, China. (email: [email protected]; [email protected]; [email protected]; [email protected]; [email protected]; [email protected])
## Abstract
The Proof-of-Concept (PoC) for a vulnerability is crucial in validating its existence, m
http://hmarco.org/bugs/CVE-2016-4484/CVE-2016-4484_cryptsetup_initrd_shell.htmlhttp://www.openwall.com/lists/oss-security/2016/11/14/13http://www.openwall.com/lists/oss-security/2016/11/15/1http://www.openwall.com/lists/oss-security/2016/11/15/4http://www.openwall.com/lists/oss-security/2016/11/16/6http://www.securityfocus.com/bid/94315https://gitlab.com/cryptsetup/cryptsetup/commit/ef8a7d82d8d3716ae9b58179590f7908981fa0cbhttp://hmarco.org/bugs/CVE-2016-4484/CVE-2016-4484_cryptsetup_initrd_shell.htmlhttp://www.openwall.com/lists/oss-security/2016/11/14/13http://www.openwall.com/lists/oss-security/2016/11/15/1http://www.openwall.com/lists/oss-security/2016/11/15/4http://www.openwall.com/lists/oss-security/2016/11/16/6http://www.securityfocus.com/bid/94315https://gitlab.com/cryptsetup/cryptsetup/commit/ef8a7d82d8d3716ae9b58179590f7908981fa0cb
2017-01-23
Published