grub2 vulnerabilities (Debian)
63 vulnerabilities.
-
grub2Debian Bypass of GRUB lockdown restriction in Secure Boot mode via serial command MMIO base address 6.4 Medium -
grub2Debian Grub2: use-after-free in net_set_vlan 4.9 Medium -
grub2Debian Grub2: missing unregister call for normal_exit command may lead to use-after-free 4.9 Medium -
grub2Debian Grub2: missing unregister call for normal commands may lead to use-after-free 4.9 Medium -
grub2Debian Grub2: missing unregister call for gettext command may lead to use-after-free 7.8 High -
grub2Debian Grub2: grub2: out-of-bounds write via malicious usb device 4.8 Medium -
grub2Debian Grub2: use-after-free in grub_file_close() 4.9 Medium -
grub2Debian Grub2: grub allow access to encrypted device through cli once root device is unlocked via tpm 5.9 Medium -
grub2Debian Grub2: fs/hfs: integer overflow may lead to heap based out-of-bounds write 7.8 High -
grub2Debian Grub2: commands/dump: the dump command is not in lockdown when secure boot is enabled 4.4 Medium -
grub2Debian Grub2: read: integer overflow may lead to out-of-bounds write 6.1 Medium -
grub2Debian Grub2: udf: heap based buffer overflow in grub_udf_read_block() may lead to arbitrary code execution 7.8 High -
grub2Debian Grub2: romfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading dat 6.4 Medium -
grub2Debian Grub2: jfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data 6.4 Medium -
grub2Debian Grub2: reiserfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data 6.4 Medium -
grub2Debian Grub2: squash4: integer overflow may lead to heap based out-of-bounds write when reading data 7.8 High -
grub2Debian Grub2: ufs: integer overflow may lead to heap based out-of-bounds write when handling symlinks 6.4 Medium -
grub2Debian Grub2: net: out-of-bounds write in grub_net_search_config_file() 7.6 High -
grub2Debian Grub2: command/gpg: use-after-free due to hooks not being removed on module unload 6.4 Medium -
grub2Debian Grub2: fs/hfs+: refcount can be decremented twice 4.4 Medium -
grub2Debian Grub2: fs/hfs: strcpy() using the volume name (fs/hfs.c:382) 7.8 High -
grub2Debian Grub2: fs/ufs: oob write in the heap 6.7 Medium -
grub2Debian Grub2: fs/tar: integer overflow causes heap oob write 6.7 Medium -
grub2Debian Grub2: fs/bfs: integer overflow leads to heap oob read in the bfs parser 6.0 Medium -
grub2Debian Grub2: fs/bfs: integer overflow in the bfs parser. 4.1 Medium -
grub2Debian Grub2: grub-core/gettext: integer overflow leads to heap oob write. 6.7 Medium -
grub2Debian Grub2: grub-core/gettext: integer overflow leads to heap oob write and read. 6.7 Medium -
grub2Debian Grub2: commands/extcmd: missing check for failed allocation 5.2 Medium -
grub2Debian Grub2: reader/jpeg: heap oob write during jpeg parsing 6.7 Medium -
grub2Debian GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp... 5.3 Medium -
grub2Debian GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock... 8.8 High -
grub2Debian GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2... 6.7 Medium -
grub2Debian Grub2: out-of-bounds read at fs/ntfs.c 5.3 Medium -
grub2Debian Grub2: out-of-bounds write at fs/ntfs.c may lead to unsigned code execution 7.5 High -
grub2Debian When rendering certain unicode sequences, grub2's font code doesn't proper validate if the... 7.1 High -
grub2Debian A buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead... 8.6 High -
grub2Debian There's a use-after-free vulnerability in grub_cmd_chainloader() function 6.4 Medium -
grub2Debian The GRUB2's shim_lock verifier allows non-kernel files to be loaded on shim-powered secure boot... 6.7 Medium -
grub2Debian Out-of-bounds write when handling split HTTP headers 8.1 High -
grub2Debian Integer underflow in grub_net_recv_ip4_packets 8.1 High -
grub2Debian A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user... 7.0 High -
grub2Debian A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader.... 4.5 Medium -
grub2Debian A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An... 4.5 Medium -
grub2Debian A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with... 3.3 Low -
grub2Debian A flaw was found in grub2 in versions prior to 2.06. Setparam_prefix() in the menu rendering code... 8.2 High -
grub2Debian A flaw was found in grub2 in versions prior to 2.06. The option parser allows an attacker to... 6.7 Medium -
grub2Debian A flaw was found in grub2 in versions prior to 2.06. The cutmem command does not honor secure... 7.5 High -
grub2Debian A flaw was found in grub2 in versions prior to 2.06. Variable names present are expanded in the... 6.7 Medium -
grub2Debian A flaw was found in grub2 in versions prior to 2.06. During USB device initialization,... 7.6 High -
grub2Debian A flaw was found in grub2 in versions prior to 2.06. The rmmod implementation allows the... 8.2 High - Show olderLoading…