{"id":"CVE-2017-9763","aliases":["DEBIAN-CVE-2017-9763","EUVD-2017-18693","GHSA-vvvg-pm5p-r68f","SUSE-SU-2019:13989-1","SUSE-SU-2021:14659-1","UBUNTU-CVE-2017-9763"],"status":"published","title":"The grub_ext2_read_block function in fs/ext2.c in GNU GRUB before 2013-11-12, as used in shlr...","description":"The grub_ext2_read_block function in fs/ext2.c in GNU GRUB before 2013-11-12, as used in shlr/grub/fs/ext2.c in radare2 1.5.0, allows remote attackers to cause a denial of service (excessive stack use and application crash) via a crafted binary file, related to use of a variable-size stack array.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.04075,"percentile":0.90763,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2017-06-19T16:00:00Z","modified":"2026-10-20T13:22:43Z","fixes":[{"ecosystem":"Debian:12","package":"grub2","fixed_in":["2.02~beta2-8"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"grub2","fixed_in":["2.02~beta2-8"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"grub2","fixed_in":["2.02~beta2-8"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"grub2","fixed_in":["2.00-0.66.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"grub2","fixed_in":["2.00-0.66.8.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.02~beta2-8"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.02~beta2-8"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.02~beta2-8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.00-0.66.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.00-0.66.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.02-0.66.26.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"radare2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.9.6-3.1ubuntu1"]}],"products":[{"vendor":"radare","product":"radare2"}],"references":[{"url":"https://github.com/radare/radare2/issues/7723","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"http://git.savannah.gnu.org/cgit/grub.git/commit/grub-core/fs/ext2.c?id=ac8cac1dac50daaf1c390d701cca3b55e16ee768","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://github.com/radare/radare2/commit/65000a7fd9eea62359e6d6714f17b94a99a82edd","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"http://www.securityfocus.com/bid/99141","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9763"},{"url":"https://github.com/advisories/GHSA-vvvg-pm5p-r68f"},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-9763","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-201913989-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1045063","tags":["report"]},{"url":"https://bugzilla.suse.com/1124662","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9763","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-202114659-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1175970","tags":["report"]},{"url":"https://bugzilla.suse.com/1176711","tags":["report"]},{"url":"https://bugzilla.suse.com/1177883","tags":["report"]},{"url":"https://bugzilla.suse.com/1179264","tags":["report"]},{"url":"https://bugzilla.suse.com/1179265","tags":["report"]},{"url":"https://bugzilla.suse.com/1182057","tags":["report"]},{"url":"https://bugzilla.suse.com/1182262","tags":["report"]},{"url":"https://bugzilla.suse.com/1182263","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14372","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25632","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25647","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20225","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20233","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2017-9763","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-9763","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2017-9763","description":"The grub_ext2_read_block function in fs/ext2.c in GNU GRUB before 2013-11-12, as used in shlr/grub/fs/ext2.c in radare2 1.5.0, allows remote attackers to cause a denial of service (excessive stack use and application crash) via a crafted binary file, related to use of a variable-size stack array.","status":"published","published":"2017-06-19T16:00:00Z","modified":"2024-08-05T17:18:01.805Z","updated_at":"2026-11-02T14:33:13.96587Z"}],"euvd":[{"id":"EUVD-2017-18693","description":"The grub_ext2_read_block function in fs/ext2.c in GNU GRUB before 2013-11-12, as used in shlr/grub/fs/ext2.c in radare2 1.5.0, allows remote attackers to cause a denial of service (excessive stack use and application crash) via a crafted binary file, related to use of a variable-size stack array.","status":"published","published":"2017-06-19T16:00:00Z","modified":"2024-08-05T17:18:01Z","updated_at":"2026-11-03T02:23:27.257081Z"}],"ghsa":[{"id":"GHSA-vvvg-pm5p-r68f","title":"The grub_ext2_read_block function in fs/ext2.c in GNU GRUB before 2013-11-12, as used in shlr...","description":"The grub_ext2_read_block function in fs/ext2.c in GNU GRUB before 2013-11-12, as used in shlr/grub/fs/ext2.c in radare2 1.5.0, allows remote attackers to cause a denial of service (excessive stack use and application crash) via a crafted binary file, related to use of a variable-size stack array.","status":"published","published":"2022-05-17T02:36:10Z","modified":"2023-01-27T05:05:29Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:42:42.467243Z"}],"nvd":[{"id":"CVE-2017-9763","description":"The grub_ext2_read_block function in fs/ext2.c in GNU GRUB before 2013-11-12, as used in shlr/grub/fs/ext2.c in radare2 1.5.0, allows remote attackers to cause a denial of service (excessive stack use and application crash) via a crafted binary file, related to use of a variable-size stack array.","status":"published","published":"2017-06-19T16:29:00.797Z","modified":"2026-06-17T01:28:51.413Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:03:50.782497Z"}],"osv":[{"id":"CVE-2017-9763","description":"The grub_ext2_read_block function in fs/ext2.c in GNU GRUB before 2013-11-12, as used in shlr/grub/fs/ext2.c in radare2 1.5.0, allows remote attackers to cause a denial of service (excessive stack use and application crash) via a crafted binary file, related to use of a variable-size stack array.","status":"published","published":"2017-06-19T16:29:00.797Z","modified":"2026-10-20T13:22:43.597187796Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:07.192756Z"},{"id":"DEBIAN-CVE-2017-9763","description":"The grub_ext2_read_block function in fs/ext2.c in GNU GRUB before 2013-11-12, as used in shlr/grub/fs/ext2.c in radare2 1.5.0, allows remote attackers to cause a denial of service (excessive stack use and application crash) via a crafted binary file, related to use of a variable-size stack array.","status":"published","published":"2017-06-19T16:29:00.797Z","modified":"2026-09-01T20:03:05.415960673Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:29.698576Z"},{"id":"UBUNTU-CVE-2017-9763","description":"The grub_ext2_read_block function in fs/ext2.c in GNU GRUB before 2013-11-12, as used in shlr/grub/fs/ext2.c in radare2 1.5.0, allows remote attackers to cause a denial of service (excessive stack use and application crash) via a crafted binary file, related to use of a variable-size stack array.","status":"published","published":"2017-06-19T16:29:00Z","modified":"2026-04-22T11:37:28.979703Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:16.154988Z"},{"id":"SUSE-SU-2019:13989-1","title":"Security update for grub2","description":"This update for grub2 fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2017-9763: Fixed a memory leak in grub_ext2_read_block (bsc#1045063)\n\nOther issues addressed: \n\n- Added support for  tftp block counter roll-over and backported support for efinetSNP open (bsc#1124662).\n","status":"published","published":"2019-03-27T09:34:30Z","modified":"2026-02-04T04:33:41.7127Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2021:14659-1","title":"Security update for grub2","description":"This update for grub2 fixes the following issues:\n\ngrub2 now implements the new 'SBAT' method for SHIM based secure boot revocation. (bsc#1182057)\n\ngrub2 was updated to the 2.02 version (same as SUSE Linux Enterprise 12 SP3).\n\nFollowing security issues are fixed that can violate secure boot constraints:\n\n- CVE-2020-25632: Fixed a use-after-free in rmmod command (bsc#1176711)\n- CVE-2020-25647: Fixed an out-of-bound write in grub_usb_device_initialize() (bsc#1177883)\n- CVE-2020-27749: Fixed a stack buffer overflow in grub_parser_split_cmdline (bsc#1179264)\n- CVE-2020-27779, CVE-2020-14372: Disallow cutmem and acpi commands in secure boot mode (bsc#1179265 bsc#1175970)\n- CVE-2021-20225: Fixed a heap out-of-bounds write in short form option parser (bsc#1182262)\n- CVE-2021-20233: Fixed a heap out-of-bound write due to mis-calculation of space required for quoting (bsc#1182263)\n\n","status":"published","published":"2021-03-02T18:03:21Z","modified":"2026-02-04T04:15:37.309401Z","updated_at":"2026-11-02T15:53:49.138643Z"}]}}