[{"CVE":"CVE-2017-5715","severity":"important","public_date":"2018-01-03T22:00:00Z","advisories":["RHBA-2018:0042"],"bugzilla":"1519780","bugzilla_description":"CVE-2017-5715 hw: cpu: speculative execution branch target injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-200","affected_packages":["dracut-0:033-502.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5715.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"},{"CVE":"CVE-2016-4484","severity":"moderate","public_date":"2016-11-14T00:00:00Z","advisories":[],"bugzilla":"1395134","bugzilla_description":"CVE-2016-4484 dracut: Brute force attack on LUKS password decryption via initramfs","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-391","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4484.json","cvss3_scoring_vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"6.8"},{"CVE":"CVE-2016-8637","severity":"moderate","public_date":"2016-11-07T00:00:00Z","advisories":[],"bugzilla":"1392056","bugzilla_description":"CVE-2016-8637 dracut: Local information disclosure of initramfs when early cpio is used","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8637.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.0"},{"CVE":"CVE-2012-4453","severity":"moderate","public_date":"2012-09-27T00:00:00Z","advisories":["RHSA-2013:1674"],"bugzilla":"859448","bugzilla_description":"CVE-2012-4453 dracut: Creates initramfs images with world-readable permissions (information disclosure)","cvss_score":5.4,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:C/I:N/A:N","CWE":null,"affected_packages":["dracut-0:004-336.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4453.json"},{"CVE":"CVE-2010-4176","severity":"moderate","public_date":"2010-11-19T00:00:00Z","advisories":[],"bugzilla":"654489","bugzilla_description":"CVE-2010-4176  dracut: /dev/systty permissions could allow remote users to snoop on local users","cvss_score":4.0,"cvss_scoring_vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N/","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4176.json"}]