Threats tagged 'ghsa-8pxm-cr92-crx8'

A command injection vulnerability exists in dracut's die() error-handling function, which improperly shell-quotes messages written into emergency hook scripts. When the message includes data derived from the DHCP ROOT_PATH option, a rogue DHCP server on the adjacent network can inject commands that execute as root during boot-failure handling. This affects systems performing network boot with DHCP-supplied ROOT_PATH values that fail resolution, triggering the emergency shell mechanism.