grub2-tools vulnerabilities (Red Hat)
45 vulnerabilities.
-
grub2-toolsRed Hat Grub2: missing unregister call for gettext command may lead to use-after-free 7.8 High -
grub2-toolsRed Hat Grub2: commands/dump: the dump command is not in lockdown when secure boot is enabled 4.4 Medium -
grub2-toolsRed Hat Grub2: read: integer overflow may lead to out-of-bounds write 6.1 Medium -
grub2-toolsRed Hat Grub2: ufs: integer overflow may lead to heap based out-of-bounds write when handling symlinks 6.4 Medium -
grub2-toolsRed Hat Grub2: net: out-of-bounds write in grub_net_search_config_file() 7.6 High -
grub2-toolsRed Hat Grub2: command/gpg: use-after-free due to hooks not being removed on module unload 6.4 Medium -
grub2-toolsRed Hat Grub2: fs/hfs+: refcount can be decremented twice 4.4 Medium -
grub2-toolsRed Hat Grub2: fs/ufs: oob write in the heap 6.7 Medium -
grub2-toolsRed Hat Grub2: grub-core/gettext: integer overflow leads to heap oob write. 6.7 Medium -
grub2-toolsRed Hat Grub2: grub-core/gettext: integer overflow leads to heap oob write and read. 6.7 Medium -
grub2-toolsRed Hat Grub2: commands/extcmd: missing check for failed allocation 5.2 Medium -
grub2-toolsRed Hat Grub2: reader/jpeg: heap oob write during jpeg parsing 6.7 Medium -
grub2-toolsRed Hat Grub2: grub2-set-bootflag can be abused by local (pseudo-)users 3.3 Low -
grub2-toolsRed Hat Grub2: bypass the grub password protection feature 6.8 Medium -
grub2-toolsRed Hat Grub2: out-of-bounds read at fs/ntfs.c 5.3 Medium -
grub2-toolsRed Hat Grub2: out-of-bounds write at fs/ntfs.c may lead to unsigned code execution 7.5 High -
grub2-toolsRed Hat When rendering certain unicode sequences, grub2's font code doesn't proper validate if the... 7.1 High -
grub2-toolsRed Hat A buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead... 8.6 High -
grub2-toolsRed Hat There's a possible overflow in handle_image() when shim tries to load and execute crafted EFI executables 6.5 Medium -
grub2-toolsRed Hat There's a use-after-free vulnerability in grub_cmd_chainloader() function 6.4 Medium -
grub2-toolsRed Hat The GRUB2's shim_lock verifier allows non-kernel files to be loaded on shim-powered secure boot... 6.7 Medium -
grub2-toolsRed Hat Out-of-bounds write when handling split HTTP headers 8.1 High -
grub2-toolsRed Hat Integer underflow in grub_net_recv_ip4_packets 8.1 High -
grub2-toolsRed Hat A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user... 7.0 High -
grub2-toolsRed Hat A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader.... 4.5 Medium -
grub2-toolsRed Hat A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An... 4.5 Medium -
grub2-toolsRed Hat A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with... 3.3 Low -
grub2-toolsRed Hat A flaw was found in grub2 in versions prior to 2.06. Setparam_prefix() in the menu rendering code... 8.2 High -
grub2-toolsRed Hat A flaw was found in grub2 in versions prior to 2.06. The option parser allows an attacker to... 6.7 Medium -
grub2-toolsRed Hat A flaw was found in grub2 in versions prior to 2.06. The cutmem command does not honor secure... 7.5 High -
grub2-toolsRed Hat A flaw was found in grub2 in versions prior to 2.06. Variable names present are expanded in the... 6.7 Medium -
grub2-toolsRed Hat A flaw was found in grub2 in versions prior to 2.06. During USB device initialization,... 7.6 High -
grub2-toolsRed Hat A flaw was found in grub2 in versions prior to 2.06. The rmmod implementation allows the... 8.2 High -
grub2-toolsRed Hat A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of... 7.5 High -
grub2-toolsRed Hat GRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shim 6.4 Medium -
grub2-toolsRed Hat GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow. 5.7 Medium -
grub2-toolsRed Hat GRUB2 contains a race condition leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing. 6.4 Medium -
grub2-toolsRed Hat There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A... 5.7 Medium -
grub2-toolsRed Hat There is an issue on grub2 before version 2.06 at function read_section_as_string(). It expects a... 5.7 Medium -
grub2-toolsRed Hat There's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems... 6.7 Medium -
grub2-toolsRed Hat In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic... 6.4 Medium -
grub2-toolsRed Hat A flaw was found in grub2, prior to version 2.06. An attacker may use the GRUB 2 flaw to hijack... 8.2 High -
grub2-toolsRed Hat A flaw was found in the grub2-set-bootflag utility of grub2. A local attacker could run this... 5.9 Medium -
grub2-toolsRed Hat Multiple integer underflows in Grub2 1.98 through 2.02 allow physically proximate attackers to... 6.9 Medium -
grub2-toolsRed Hat The grub2 package before 2.02-0.29 in Red Hat Enterprise Linux (RHEL) 7, when used on UEFI... 2.6 Low