grub2-tools vulnerabilities (TuxCare)
38 vulnerabilities.
-
grub2-toolsTuxCare Update of grub2 No score -
grub2-toolsTuxCare Update of grub2 No score -
grub2-toolsTuxCare Grub2: missing unregister call for gettext command may lead to use-after-free 7.8 High -
grub2-toolsTuxCare Update of grub2 No score -
grub2-toolsTuxCare Grub2: fs/hfs: integer overflow may lead to heap based out-of-bounds write 7.8 High -
grub2-toolsTuxCare Grub2: commands/dump: the dump command is not in lockdown when secure boot is enabled 4.4 Medium -
grub2-toolsTuxCare Grub2: read: integer overflow may lead to out-of-bounds write 6.1 Medium -
grub2-toolsTuxCare Grub2: udf: heap based buffer overflow in grub_udf_read_block() may lead to arbitrary code execution 7.8 High -
grub2-toolsTuxCare Grub2: squash4: integer overflow may lead to heap based out-of-bounds write when reading data 7.8 High -
grub2-toolsTuxCare Grub2: ufs: integer overflow may lead to heap based out-of-bounds write when handling symlinks 6.4 Medium -
grub2-toolsTuxCare Grub2: net: out-of-bounds write in grub_net_search_config_file() 7.6 High -
grub2-toolsTuxCare Grub2: fs/hfs: strcpy() using the volume name (fs/hfs.c:382) 7.8 High -
grub2-toolsTuxCare Grub2: fs/ufs: oob write in the heap 6.7 Medium -
grub2-toolsTuxCare GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp... 5.3 Medium -
grub2-toolsTuxCare GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock... 8.8 High -
grub2-toolsTuxCare Update of grub2 No score -
grub2-toolsTuxCare Update of grub2 No score -
grub2-toolsTuxCare Update of grub2 No score -
grub2-toolsTuxCare Update of grub2 No score -
grub2-toolsTuxCare Update of grub2 No score -
grub2-toolsTuxCare Grub2: grub2-set-bootflag can be abused by local (pseudo-)users 3.3 Low -
grub2-toolsTuxCare Grub2: bypass the grub password protection feature 6.8 Medium -
grub2-toolsTuxCare Grub2: out-of-bounds read at fs/ntfs.c 5.3 Medium -
grub2-toolsTuxCare Grub2: out-of-bounds write at fs/ntfs.c may lead to unsigned code execution 7.5 High -
grub2-toolsTuxCare When rendering certain unicode sequences, grub2's font code doesn't proper validate if the... 7.1 High -
grub2-toolsTuxCare A buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead... 8.6 High -
grub2-toolsTuxCare Update of grub2 No score -
grub2-toolsTuxCare Update of grub2 No score -
grub2-toolsTuxCare There's a use-after-free vulnerability in grub_cmd_chainloader() function 6.4 Medium -
grub2-toolsTuxCare Out-of-bounds write when handling split HTTP headers 8.1 High -
grub2-toolsTuxCare Integer underflow in grub_net_recv_ip4_packets 8.1 High -
grub2-toolsTuxCare A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user... 7.0 High -
grub2-toolsTuxCare A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader.... 4.5 Medium -
grub2-toolsTuxCare A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An... 4.5 Medium -
grub2-toolsTuxCare A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with... 3.3 Low -
grub2-toolsTuxCare GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow. 5.7 Medium -
grub2-toolsTuxCare GRUB2 contains a race condition leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing. 6.4 Medium -
grub2-toolsTuxCare Integer overflow in the LZO algorithm variant in Oberhumer liblzo2 and lzo-2 before 2.07 on 32... 8.8 High