grub2-tools-efi vulnerabilities (TuxCare)
30 vulnerabilities.
grub2-tools-efiTuxCareUpdate of grub2No scoregrub2-tools-efiTuxCareGrub2: missing unregister call for gettext command may lead to use-after-free7.8 Highgrub2-tools-efiTuxCareUpdate of grub2No scoregrub2-tools-efiTuxCareGrub2: fs/hfs: integer overflow may lead to heap based out-of-bounds write7.8 Highgrub2-tools-efiTuxCareGrub2: commands/dump: the dump command is not in lockdown when secure boot is enabled4.4 Mediumgrub2-tools-efiTuxCareGrub2: read: integer overflow may lead to out-of-bounds write6.1 Mediumgrub2-tools-efiTuxCareGrub2: squash4: integer overflow may lead to heap based out-of-bounds write when reading data7.8 Highgrub2-tools-efiTuxCareGrub2: ufs: integer overflow may lead to heap based out-of-bounds write when handling symlinks6.4 Mediumgrub2-tools-efiTuxCareGrub2: net: out-of-bounds write in grub_net_search_config_file()7.6 Highgrub2-tools-efiTuxCareGNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp...5.3 Mediumgrub2-tools-efiTuxCareUpdate of grub2No scoregrub2-tools-efiTuxCareUpdate of grub2No scoregrub2-tools-efiTuxCareUpdate of grub2No scoregrub2-tools-efiTuxCareGrub2: grub2-set-bootflag can be abused by local (pseudo-)users3.3 Lowgrub2-tools-efiTuxCareGrub2: bypass the grub password protection feature6.8 Mediumgrub2-tools-efiTuxCareGrub2: out-of-bounds read at fs/ntfs.c5.3 Mediumgrub2-tools-efiTuxCareGrub2: out-of-bounds write at fs/ntfs.c may lead to unsigned code execution7.5 Highgrub2-tools-efiTuxCareWhen rendering certain unicode sequences, grub2's font code doesn't proper validate if the...7.1 Highgrub2-tools-efiTuxCareA buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead...8.6 Highgrub2-tools-efiTuxCareUpdate of grub2No scoregrub2-tools-efiTuxCareUpdate of grub2No scoregrub2-tools-efiTuxCareThere's a use-after-free vulnerability in grub_cmd_chainloader() function6.4 Mediumgrub2-tools-efiTuxCareOut-of-bounds write when handling split HTTP headers8.1 Highgrub2-tools-efiTuxCareInteger underflow in grub_net_recv_ip4_packets8.1 Highgrub2-tools-efiTuxCareA crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user...7.0 Highgrub2-tools-efiTuxCareA heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader....4.5 Mediumgrub2-tools-efiTuxCareA crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An...4.5 Mediumgrub2-tools-efiTuxCareA flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with...3.3 Lowgrub2-tools-efiTuxCareGRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow.5.7 Mediumgrub2-tools-efiTuxCareGRUB2 contains a race condition leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing.6.4 Medium