55 results · Feed
-
Unscored —CVE-2021-20233 Public exploit
A flaw was found in grub2 in versions prior to 2.06. Setparam_prefix() in the menu rendering code performs a length cal…
-
Unscored —
A flaw was found in grub2 in versions prior to 2.06. The option parser allows an attacker to write past the end of a he…
-
Unscored —CVE-2020-25632 Public exploit
A flaw was found in grub2 in versions prior to 2.06. The rmmod implementation allows the unloading of a module used as …
-
Unscored —
A flaw was found in grub2 in versions prior to 2.06. During USB device initialization, descriptors are read with very l…
-
Unscored —CVE-2020-14372 Public exploit
A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of the ACPI command when Se…
-
Unscored —
A flaw was found in grub2 in versions prior to 2.06. Variable names present are expanded in the supplied command line i…
-
Unscored —
A flaw was found in grub2 in versions prior to 2.06. The cutmem command does not honor secure boot locking allowing an …
-
Medium 5.7
There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A filesystem containing a s…
-
Medium 5.7
There is an issue on grub2 before version 2.06 at function read_section_as_string(). It expects a font name to be at ma…
-
Unscored —CVE-2020-10713 Public exploit
A flaw was found in grub2, prior to version 2.06. An attacker may use the GRUB 2 flaw to hijack and tamper the GRUB ver…
-
Unscored —
There's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems containing a symbolic link w…
-
Unscored —
In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic overflows on the requeste…
-
Unscored —
Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which all…
-
Unscored —
It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library. Version affected: 1.8.…
-
Medium 6.1
libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024…