grub2 vulnerabilities (Azure Linux)
55 vulnerabilities.
-
grub2Azure Linux Grub2: missing unregister call for normal_exit command may lead to use-after-free 4.9 Medium -
grub2Azure Linux Grub2: missing unregister call for normal commands may lead to use-after-free 4.9 Medium -
grub2Azure Linux Grub2: missing unregister call for gettext command may lead to use-after-free 7.8 High -
grub2Azure Linux Grub2: grub2: out-of-bounds write via malicious usb device 4.8 Medium -
grub2Azure Linux Grub2: fs/hfs: integer overflow may lead to heap based out-of-bounds write 7.8 High -
grub2Azure Linux Grub2: commands/dump: the dump command is not in lockdown when secure boot is enabled 4.4 Medium -
grub2Azure Linux Grub2: read: integer overflow may lead to out-of-bounds write 6.1 Medium -
grub2Azure Linux Grub2: udf: heap based buffer overflow in grub_udf_read_block() may lead to arbitrary code execution 7.8 High -
grub2Azure Linux Grub2: romfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading dat 6.4 Medium -
grub2Azure Linux Grub2: jfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data 6.4 Medium -
grub2Azure Linux Grub2: reiserfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data 6.4 Medium -
grub2Azure Linux Grub2: squash4: integer overflow may lead to heap based out-of-bounds write when reading data 7.8 High -
grub2Azure Linux Grub2: ufs: integer overflow may lead to heap based out-of-bounds write when handling symlinks 6.4 Medium -
grub2Azure Linux Grub2: net: out-of-bounds write in grub_net_search_config_file() 7.6 High -
grub2Azure Linux Grub2: command/gpg: use-after-free due to hooks not being removed on module unload 6.4 Medium -
grub2Azure Linux Grub2: fs/hfs+: refcount can be decremented twice 4.4 Medium -
grub2Azure Linux Grub2: fs/hfs: strcpy() using the volume name (fs/hfs.c:382) 7.8 High -
grub2Azure Linux Grub2: fs/ufs: oob write in the heap 6.7 Medium -
grub2Azure Linux Grub2: fs/tar: integer overflow causes heap oob write 6.7 Medium -
grub2Azure Linux Grub2: fs/bfs: integer overflow leads to heap oob read in the bfs parser 6.0 Medium -
grub2Azure Linux Grub2: fs/bfs: integer overflow in the bfs parser. 4.1 Medium -
grub2Azure Linux Grub2: grub-core/gettext: integer overflow leads to heap oob write. 6.7 Medium -
grub2Azure Linux Grub2: grub-core/gettext: integer overflow leads to heap oob write and read. 6.7 Medium -
grub2Azure Linux Grub2: commands/extcmd: missing check for failed allocation 5.2 Medium -
grub2Azure Linux Grub2: reader/jpeg: heap oob write during jpeg parsing 6.7 Medium -
grub2Azure Linux GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp... 5.3 Medium -
grub2Azure Linux GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock... 8.8 High -
grub2Azure Linux Grub2: out-of-bounds read at fs/ntfs.c 5.3 Medium -
grub2Azure Linux Grub2: out-of-bounds write at fs/ntfs.c may lead to unsigned code execution 7.5 High -
grub2Azure Linux When rendering certain unicode sequences, grub2's font code doesn't proper validate if the... 7.1 High -
grub2Azure Linux A buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead... 8.6 High -
grub2Azure Linux There's a use-after-free vulnerability in grub_cmd_chainloader() function 6.4 Medium -
grub2Azure Linux The GRUB2's shim_lock verifier allows non-kernel files to be loaded on shim-powered secure boot... 6.7 Medium -
grub2Azure Linux Out-of-bounds write when handling split HTTP headers 8.1 High -
grub2Azure Linux Integer underflow in grub_net_recv_ip4_packets 8.1 High -
grub2Azure Linux A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user... 7.0 High -
grub2Azure Linux A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader.... 4.5 Medium -
grub2Azure Linux A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An... 4.5 Medium -
grub2Azure Linux A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with... 3.3 Low -
grub2Azure Linux If certificates that signed grub are installed into db, grub can be booted directly. It will then... 6.4 Medium -
grub2Azure Linux A flaw was found in grub2 in versions prior to 2.06. Setparam_prefix() in the menu rendering code... 8.2 High -
grub2Azure Linux A flaw was found in grub2 in versions prior to 2.06. The option parser allows an attacker to... 6.7 Medium -
grub2Azure Linux A flaw was found in grub2 in versions prior to 2.06. The cutmem command does not honor secure... 7.5 High -
grub2Azure Linux A flaw was found in grub2 in versions prior to 2.06. Variable names present are expanded in the... 6.7 Medium -
grub2Azure Linux A flaw was found in grub2 in versions prior to 2.06. During USB device initialization,... 7.6 High -
grub2Azure Linux A flaw was found in grub2 in versions prior to 2.06. The rmmod implementation allows the... 8.2 High -
grub2Azure Linux A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of... 7.5 High -
grub2Azure Linux There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A... 5.7 Medium -
grub2Azure Linux There is an issue on grub2 before version 2.06 at function read_section_as_string(). It expects a... 5.7 Medium -
grub2Azure Linux There's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems... 6.7 Medium - Show olderLoading…