62 results · Feed
-
Unscored —
A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be writte…
-
Unscored —
A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data co…
-
Unscored —
A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage…
-
Unscored —
A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission s…
-
Unscored —CVE-2021-20233 Public exploit
A flaw was found in grub2 in versions prior to 2.06. Setparam_prefix() in the menu rendering code performs a length cal…
-
Unscored —
A flaw was found in grub2 in versions prior to 2.06. The option parser allows an attacker to write past the end of a he…
-
Unscored —CVE-2020-25632 Public exploit
A flaw was found in grub2 in versions prior to 2.06. The rmmod implementation allows the unloading of a module used as …
-
Unscored —
A flaw was found in grub2 in versions prior to 2.06. During USB device initialization, descriptors are read with very l…
-
Unscored —CVE-2020-14372 Public exploit
A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of the ACPI command when Se…
-
Unscored —
A flaw was found in grub2 in versions prior to 2.06. Variable names present are expanded in the supplied command line i…
-
Unscored —
A flaw was found in grub2 in versions prior to 2.06. The cutmem command does not honor secure boot locking allowing an …
-
Medium 5.7
There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A filesystem containing a s…
-
Medium 5.7
There is an issue on grub2 before version 2.06 at function read_section_as_string(). It expects a font name to be at ma…
-
Unscored —CVE-2020-10713 Public exploit
A flaw was found in grub2, prior to version 2.06. An attacker may use the GRUB 2 flaw to hijack and tamper the GRUB ver…
-
Unscored —
There's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems containing a symbolic link w…
-
Unscored —
In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic overflows on the requeste…
-
Medium 5.7
GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow.
Integer overflows were discovered in the functions grub_cmd_initrd and grub_initrd_init in the efilinux component of GRUB2, as shipped in Debian, Red Hat, and Ubuntu (the functionality is not included in GRUB2 upstream), leading to a heap-based buffer overflo…
-
Medium 6.4
GRUB2 contains a race condition leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing.
GRUB2 contains a race condition in grub_script_function_create() leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing, leading to arbitrary code execution and secure boot restr…
-
Unscored —
The grub_ext2_read_block function in fs/ext2.c in GNU GRUB before 2013-11-12, as used in shlr/grub/fs/ext2.c in radare2…
-
High 7.4
Multiple integer underflows in Grub2 1.98 through 2.02 allow physically proximate attackers to bypass authentication, o…
-
Unscored —
A certain Debian patch for GNU GRUB uses world-readable permissions for grub.cfg, which allows local users to obtain pa…
-
Unscored —
GNU GRand Unified Bootloader (GRUB) 2 1.97 only compares the submitted portion of a password with the actual password, …