{"id":"CVE-2015-8370","aliases":["DEBIAN-CVE-2015-8370","DLA-368-1","DSA-3421-1","EUVD-2015-8254","GHSA-jjvg-65v4-v3cq","MGASA-2015-0480","RHSA-2015:2623","SUSE-SU-2015:2385-1","SUSE-SU-2015:2386-1","SUSE-SU-2015:2387-1","SUSE-SU-2015:2399-1","UBUNTU-CVE-2015-8370","USN-2836-1","openSUSE-SU-2024:10078-1"],"status":"published","title":"Multiple integer underflows in Grub2 1.98 through 2.02 allow physically proximate attackers to...","description":"Multiple integer underflows in Grub2 1.98 through 2.02 allow physically proximate attackers to bypass authentication, obtain sensitive information, or cause a denial of service (disk corruption) via backspace characters in the (1) grub_username_get function in grub-core/normal/auth.c or the (2) grub_password_get function in lib/crypto.c, which trigger an \"Off-by-two\" or \"Out of bounds overwrite\" memory error.","severity":{"version":"2.0","score":6.9,"vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01095,"percentile":0.65743,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-191","CWE-264"],"published":"2015-12-11T00:00:00Z","modified":"2026-09-09T07:01:43Z","fixes":[{"ecosystem":"Debian:12","package":"grub2","fixed_in":["2.02~beta2-33"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"grub2","fixed_in":["2.02~beta2-33"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"grub2","fixed_in":["2.02~beta2-33"],"sources":["osv"]},{"ecosystem":"Debian:6.0","package":"grub2","fixed_in":["1.98+20100804-14+squeeze2"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"grub2","fixed_in":["1.99-27+deb7u3"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"grub2","fixed_in":["2.02~beta2-22+deb8u1"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"grub2","fixed_in":["2.02-0.git9752.18.3.mga5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"grub2","fixed_in":["1:2.02-0.33.el7_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"grub2-debuginfo","fixed_in":["1:2.02-0.33.el7_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"grub2-efi","fixed_in":["1:2.02-0.33.el7_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"grub2-tools","fixed_in":["1:2.02-0.33.el7_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"grub2-efi-modules","fixed_in":["1:2.02-0.33.el7_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"grub2","fixed_in":["1:2.02-0.33.el7_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"grub2-debuginfo","fixed_in":["1:2.02-0.33.el7_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"grub2-efi","fixed_in":["1:2.02-0.33.el7_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"grub2-tools","fixed_in":["1:2.02-0.33.el7_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"grub2-efi-modules","fixed_in":["1:2.02-0.33.el7_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"grub2","fixed_in":["1:2.02-0.33.el7_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"grub2-debuginfo","fixed_in":["1:2.02-0.33.el7_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"grub2-efi","fixed_in":["1:2.02-0.33.el7_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"grub2-tools","fixed_in":["1:2.02-0.33.el7_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"grub2-efi-modules","fixed_in":["1:2.02-0.33.el7_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"grub2","fixed_in":["1:2.02-0.33.el7_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"grub2-debuginfo","fixed_in":["1:2.02-0.33.el7_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"grub2-efi","fixed_in":["1:2.02-0.33.el7_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"grub2-tools","fixed_in":["1:2.02-0.33.el7_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"grub2-efi-modules","fixed_in":["1:2.02-0.33.el7_2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"grub2","fixed_in":["2.00-0.54.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"grub2","fixed_in":["2.00-0.54.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"grub2","fixed_in":["2.00-0.54.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"grub2","fixed_in":["2.00-0.49.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"grub2","fixed_in":["2.00-0.49.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"grub2","fixed_in":["2.00-0.49.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"grub2","fixed_in":["2.00-0.49.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"grub2","fixed_in":["2.02~beta2-73.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"grub2","fixed_in":["2.02~beta2-73.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"grub2","fixed_in":["2.02~beta2-73.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"grub2","fixed_in":["2.02~beta2-56.9.4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12","package":"grub2","fixed_in":["2.02~beta2-56.9.4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"grub2","fixed_in":["2.02~beta2-56.9.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"grub2","fixed_in":["2.02~beta2-9ubuntu1.6"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"grub2","fixed_in":["2.02~beta3-15.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.02~beta2-33"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.02~beta2-33"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.02~beta2-33"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.98+20100804-14+squeeze2"}]}],"versions":["1.98+20100804-14","1.98+20100804-14+squeeze1"]},{"source":"osv","ecosystem":"Debian:7","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.99-27+deb7u3"}]}],"versions":["1.99-27+deb7u1","1.99-27+deb7u2"]},{"source":"osv","ecosystem":"Debian:8","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.02~beta2-22+deb8u1"}]}],"versions":["2.02~beta2-22"]},{"source":"osv","ecosystem":"Mageia:5","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.02-0.git9752.18.3.mga5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.33.el7_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"grub2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.33.el7_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"grub2-efi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.33.el7_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"grub2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.33.el7_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"grub2-efi-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.33.el7_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.33.el7_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"grub2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.33.el7_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"grub2-efi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.33.el7_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"grub2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.33.el7_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"grub2-efi-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.33.el7_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.33.el7_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"grub2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.33.el7_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"grub2-efi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.33.el7_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"grub2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.33.el7_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"grub2-efi-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.33.el7_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.33.el7_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"grub2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.33.el7_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"grub2-efi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.33.el7_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"grub2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.33.el7_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"grub2-efi-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.33.el7_2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.00-0.54.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.00-0.54.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.00-0.54.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.00-0.49.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.00-0.49.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.00-0.49.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.00-0.49.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.02~beta2-73.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.02~beta2-73.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.02~beta2-73.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.02~beta2-56.9.4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.02~beta2-56.9.4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.02~beta2-56.9.4"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.02~beta2-9ubuntu1.6"}]}],"versions":["2.00-19ubuntu2","2.00-19ubuntu3","2.00-19ubuntu4","2.00-20","2.00-21","2.00-22","2.02~beta2-5","2.02~beta2-6","2.02~beta2-7","2.02~beta2-8","2.02~beta2-9","2.02~beta2-9ubuntu1","2.02~beta2-9ubuntu1.1","2.02~beta2-9ubuntu1.2","2.02~beta2-9ubuntu1.3","2.02~beta2-9ubuntu1.4","2.02~beta2-9ubuntu1.5"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.02~beta2-9ubuntu1.6"}]}],"versions":["2.00-19ubuntu2","2.00-19ubuntu3","2.00-19ubuntu4","2.00-20","2.00-21","2.00-22","2.02~beta2-5","2.02~beta2-6","2.02~beta2-7","2.02~beta2-8","2.02~beta2-9","2.02~beta2-9ubuntu1","2.02~beta2-9ubuntu1.1","2.02~beta2-9ubuntu1.2","2.02~beta2-9ubuntu1.3","2.02~beta2-9ubuntu1.4","2.02~beta2-9ubuntu1.5"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.02~beta3-15.1"}]}]}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"gnu","product":"grub2"}],"references":[{"url":"http://packetstormsecurity.com/files/134831/Grub2-Authentication-Bypass.html","tags":["x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00043.html","tags":["vendor-advisory","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00003.html","tags":["vendor-advisory","x_transferred","web"]},{"url":"http://hmarco.org/bugs/CVE-2015-8370-Grub2-authentication-bypass.html","tags":["x_transferred","Exploit","evidence","advisory","article","report"]},{"url":"http://www.securityfocus.com/bid/79358","tags":["vdb-entry","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00037.html","tags":["vendor-advisory","x_transferred","web"]},{"url":"http://www.securitytracker.com/id/1034422","tags":["vdb-entry","x_transferred","web"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","tags":["x_transferred","Patch","fix"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00041.html","tags":["vendor-advisory","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00040.html","tags":["vendor-advisory","x_transferred","web"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html","tags":["x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2015/12/15/6","tags":["mailing-list","x_transferred","web"]},{"url":"http://www.securityfocus.com/archive/1/537115/100/0/threaded","tags":["mailing-list","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00039.html","tags":["vendor-advisory","x_transferred","web"]},{"url":"http://seclists.org/fulldisclosure/2015/Dec/69","tags":["mailing-list","x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/201512-03","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-December/173703.html","tags":["vendor-advisory","x_transferred","web"]},{"url":"http://www.ubuntu.com/usn/USN-2836-1","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174049.html","tags":["vendor-advisory","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2623.html","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00044.html","tags":["vendor-advisory","x_transferred","web"]},{"url":"http://www.debian.org/security/2015/dsa-3421","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2024/01/15/3","tags":["mailing-list","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8370","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-jjvg-65v4-v3cq"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-8370","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2015-0480.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=17334","tags":["report"]},{"url":"https://rhn.redhat.com/errata/RHSA-2015-2623.html","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2015:2623","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/System_Administrators_Guide/sec-Reinstalling_GRUB_2.html#sec-grub2-reinstall_on_BIOS-Based_Machines","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1286966","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1290089","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2623.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8370","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8370","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20152385-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/884828","tags":["report"]},{"url":"https://bugzilla.suse.com/884830","tags":["report"]},{"url":"https://bugzilla.suse.com/946148","tags":["report"]},{"url":"https://bugzilla.suse.com/952539","tags":["report"]},{"url":"https://bugzilla.suse.com/954592","tags":["report"]},{"url":"https://bugzilla.suse.com/956631","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8370","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20152386-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20152387-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/774666","tags":["report"]},{"url":"https://bugzilla.suse.com/917427","tags":["report"]},{"url":"https://bugzilla.suse.com/954126","tags":["report"]},{"url":"https://bugzilla.suse.com/954519","tags":["report"]},{"url":"https://bugzilla.suse.com/955493","tags":["report"]},{"url":"https://bugzilla.suse.com/955609","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20152399-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/928131","tags":["report"]},{"url":"https://bugzilla.suse.com/943380","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-8370","tags":["report"]},{"url":"https://twitter.com/lostinsecurity/status/674925944524640257","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2836-1","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2015-8370","description":"Multiple integer underflows in Grub2 1.98 through 2.02 allow physically proximate attackers to bypass authentication, obtain sensitive information, or cause a denial of service (disk corruption) via backspace characters in the (1) grub_username_get function in grub-core/normal/auth.c or the (2) grub_password_get function in lib/crypto.c, which trigger an \"Off-by-two\" or \"Out of bounds overwrite\" memory error.","status":"published","published":"2015-12-16T00:00:00Z","modified":"2024-10-21T16:51:57.721Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-191"],"updated_at":"2026-11-02T14:35:41.26549Z"}],"euvd":[{"id":"EUVD-2015-8254","description":"Multiple integer underflows in Grub2 1.98 through 2.02 allow physically proximate attackers to bypass authentication, obtain sensitive information, or cause a denial of service (disk corruption) via backspace characters in the (1) grub_username_get function in grub-core/normal/auth.c or the (2) grub_password_get function in lib/crypto.c, which trigger an \"Off-by-two\" or \"Out of bounds overwrite\" memory error.","status":"published","published":"2015-12-16T00:00:00Z","modified":"2024-10-21T16:51:57Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:05:23.140259Z"}],"ghsa":[{"id":"GHSA-jjvg-65v4-v3cq","title":"Multiple integer underflows in Grub2 1.98 through 2.02 allow physically proximate attackers to...","description":"Multiple integer underflows in Grub2 1.98 through 2.02 allow physically proximate attackers to bypass authentication, obtain sensitive information, or cause a denial of service (disk corruption) via backspace characters in the (1) grub_username_get function in grub-core/normal/auth.c or the (2) grub_password_get function in lib/crypto.c, which trigger an \"Off-by-two\" or \"Out of bounds overwrite\" memory error.","status":"published","published":"2022-05-14T02:47:10Z","modified":"2024-10-21T18:30:44Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-191"],"updated_at":"2026-11-02T14:58:33.735007Z"}],"nvd":[{"id":"CVE-2015-8370","description":"Multiple integer underflows in Grub2 1.98 through 2.02 allow physically proximate attackers to bypass authentication, obtain sensitive information, or cause a denial of service (disk corruption) via backspace characters in the (1) grub_username_get function in grub-core/normal/auth.c or the (2) grub_password_get function in lib/crypto.c, which trigger an \"Off-by-two\" or \"Out of bounds overwrite\" memory error.","status":"published","published":"2015-12-16T21:59:04.063Z","modified":"2026-06-17T00:34:24.01Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":6.9,"vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-264","CWE-191"],"updated_at":"2026-11-02T14:03:14.501367Z"}],"osv":[{"id":"DEBIAN-CVE-2015-8370","description":"Multiple integer underflows in Grub2 1.98 through 2.02 allow physically proximate attackers to bypass authentication, obtain sensitive information, or cause a denial of service (disk corruption) via backspace characters in the (1) grub_username_get function in grub-core/normal/auth.c or the (2) grub_password_get function in lib/crypto.c, which trigger an \"Off-by-two\" or \"Out of bounds overwrite\" memory error.","status":"published","published":"2015-12-16T21:59:04.063Z","modified":"2026-09-09T07:01:43.099493362Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:27.04239Z"},{"id":"UBUNTU-CVE-2015-8370","description":"Multiple integer underflows in Grub2 1.98 through 2.02 allow physically proximate attackers to bypass authentication, obtain sensitive information, or cause a denial of service (disk corruption) via backspace characters in the (1) grub_username_get function in grub-core/normal/auth.c or the (2) grub_password_get function in lib/crypto.c, which trigger an \"Off-by-two\" or \"Out of bounds overwrite\" memory error.","status":"published","published":"2015-12-11T00:00:00Z","modified":"2026-02-04T04:06:15.438201Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:10.737723Z"},{"id":"CVE-2015-8370","description":"Multiple integer underflows in Grub2 1.98 through 2.02 allow physically proximate attackers to bypass authentication, obtain sensitive information, or cause a denial of service (disk corruption) via backspace characters in the (1) grub_username_get function in grub-core/normal/auth.c or the (2) grub_password_get function in lib/crypto.c, which trigger an \"Off-by-two\" or \"Out of bounds overwrite\" memory error.","status":"published","published":"2015-12-16T21:59:04Z","modified":"2026-04-16T06:20:20.589894703Z","updated_at":"2026-11-02T15:44:01.068991Z"},{"id":"DLA-368-1","title":"grub2 - security update","status":"published","published":"2015-12-12T00:00:00Z","modified":"2026-03-09T01:19:45.666991Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"DSA-3421-1","title":"grub2 - security update","status":"published","published":"2015-12-16T00:00:00Z","modified":"2026-03-09T01:23:10.646861Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"MGASA-2015-0480","title":"Updated grub2 packages fix security vulnerability","description":"A flaw was found in the way the grub2 handled backspace characters entered\nin username and password prompts. An attacker with access to the system\nconsole could use this flaw to bypass grub2 password protection and gain\nadministrative access to the system (CVE-2015-8370).\n","status":"published","published":"2015-12-20T09:15:38Z","modified":"2026-04-16T06:22:56.231494075Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"openSUSE-SU-2024:10078-1","title":"grub2-2.02~beta3-15.1 on GA media","description":"These are all security issues fixed in the grub2-2.02~beta3-15.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:21:32.65034Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"RHSA-2015:2623","title":"Red Hat Security Advisory: grub2 security and bug fix update","status":"published","published":"2024-09-15T23:01:44Z","modified":"2026-06-26T12:20:59.473738098Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"SUSE-SU-2015:2385-1","title":"Security update for grub2","description":"This update for grub2 provides the following fixes:\n\nA security issues with a bufferoverflow when reading username and password was fixed (bsc#956631, CVE-2015-8370)\n\nAlso following bugs were fixed:\n- Fix buffer overflows when reading username and password. (bsc#956631, CVE-2015-8370)\n- Expand list of grub.cfg search path in PV Xen guests for systems installed\n  on btrfs snapshots. (bsc#946148, bsc#952539)\n- Add grub.xen config searching path on boot partition. (bsc#884828)\n- Add linux16 and initrd16 to grub.xen. (bsc#884830)\n","status":"published","published":"2015-12-29T08:04:56Z","modified":"2026-02-04T02:41:39.52535Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:2386-1","title":"Security update for grub2","description":"This update for grub2 provides the following fixes:\n\nA security issues with a bufferoverflow when reading username and password was fixed (bsc#956631, CVE-2015-8370)\n\nBugs fixed:\n- Expand list of grub.cfg search path in PV Xen guests for systems installed on btrfs\n  snapshots. (bsc#946148, bsc#952539)\n- Add grub.xen config searching path on boot partition. (bsc#884828)\n- Add linux16 and initrd16 to grub.xen. (bsc#884830)\n","status":"published","published":"2015-12-29T08:04:44Z","modified":"2026-02-04T03:38:34.847948Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:2387-1","title":"Security update for grub2","description":"\n\n- Fix buffer overflows when reading username and password. (bsc#956631, CVE-2015-8370)\n- Check MS-DOS header to find PE file header. (bsc#954126)\n- Use dirname for copying Xen kernel and initrd to esp. (bsc#955493)\n- Fix reading password by grub2-mkpasswd-pbdk2 without controlling tty. (bsc#954519)\n- Add luks, gcry_rijndael and gcry_sha1 to signed EFI image to support LUKS partition\n  in default setup. (bsc#917427, bsc#955609)\n- Expand list of grub.cfg search path in PV Xen guests for systems installed on btrfs\n  snapshots. (bsc#946148, bsc#952539)\n","status":"published","published":"2015-12-29T08:05:08Z","modified":"2026-02-04T02:15:30.251443Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:2399-1","title":"Security update for grub2","description":"This update for grub2 provides the following fixes and enhancements:\n\nSecurity issue fixed:\n- Fix buffer overflows when reading username and password. (bsc#956631, CVE-2015-8370)\n\nNon security issues fixed:\n- Expand list of grub.cfg search path in PV Xen guests for systems installed\n  on btrfs snapshots. (bsc#946148, bsc#952539)\n- Add --image switch to force zipl update to specific kernel. (bsc#928131)\n- Do not use shim lock protocol for reading PE header as it won't be available\n  when secure boot is disabled. (bsc#943380)\n- Make firmware flaw condition be more precisely detected and add debug message\n  for the case.\n","status":"published","published":"2015-12-30T07:31:00Z","modified":"2026-02-04T04:20:39.757351Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"USN-2836-1","title":"grub2 vulnerability","description":"Hector Marco and Ismael Ripoll discovered that GRUB incorrectly handled\nthe backspace key when configured to use authentication. A local attacker\ncould use this issue to bypass GRUB password protection.\n","status":"published","published":"2015-12-15T19:23:48Z","modified":"2026-02-10T04:40:56Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}