grub2-tools-minimal vulnerabilities (TuxCare)
38 vulnerabilities.
grub2-tools-minimalTuxCareUpdate of grub2No scoregrub2-tools-minimalTuxCareUpdate of grub2No scoregrub2-tools-minimalTuxCareGrub2: missing unregister call for gettext command may lead to use-after-free7.8 Highgrub2-tools-minimalTuxCareUpdate of grub2No scoregrub2-tools-minimalTuxCareGrub2: fs/hfs: integer overflow may lead to heap based out-of-bounds write7.8 Highgrub2-tools-minimalTuxCareGrub2: commands/dump: the dump command is not in lockdown when secure boot is enabled4.4 Mediumgrub2-tools-minimalTuxCareGrub2: read: integer overflow may lead to out-of-bounds write6.1 Mediumgrub2-tools-minimalTuxCareGrub2: udf: heap based buffer overflow in grub_udf_read_block() may lead to arbitrary code execution7.8 Highgrub2-tools-minimalTuxCareGrub2: squash4: integer overflow may lead to heap based out-of-bounds write when reading data7.8 Highgrub2-tools-minimalTuxCareGrub2: ufs: integer overflow may lead to heap based out-of-bounds write when handling symlinks6.4 Mediumgrub2-tools-minimalTuxCareGrub2: net: out-of-bounds write in grub_net_search_config_file()7.6 Highgrub2-tools-minimalTuxCareGrub2: fs/hfs: strcpy() using the volume name (fs/hfs.c:382)7.8 Highgrub2-tools-minimalTuxCareGrub2: fs/ufs: oob write in the heap6.7 Mediumgrub2-tools-minimalTuxCareGNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp...5.3 Mediumgrub2-tools-minimalTuxCareGNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock...8.8 Highgrub2-tools-minimalTuxCareUpdate of grub2No scoregrub2-tools-minimalTuxCareUpdate of grub2No scoregrub2-tools-minimalTuxCareUpdate of grub2No scoregrub2-tools-minimalTuxCareUpdate of grub2No scoregrub2-tools-minimalTuxCareUpdate of grub2No scoregrub2-tools-minimalTuxCareGrub2: grub2-set-bootflag can be abused by local (pseudo-)users3.3 Lowgrub2-tools-minimalTuxCareGrub2: bypass the grub password protection feature6.8 Mediumgrub2-tools-minimalTuxCareGrub2: out-of-bounds read at fs/ntfs.c5.3 Mediumgrub2-tools-minimalTuxCareGrub2: out-of-bounds write at fs/ntfs.c may lead to unsigned code execution7.5 Highgrub2-tools-minimalTuxCareWhen rendering certain unicode sequences, grub2's font code doesn't proper validate if the...7.1 Highgrub2-tools-minimalTuxCareA buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead...8.6 Highgrub2-tools-minimalTuxCareUpdate of grub2No scoregrub2-tools-minimalTuxCareUpdate of grub2No scoregrub2-tools-minimalTuxCareThere's a use-after-free vulnerability in grub_cmd_chainloader() function6.4 Mediumgrub2-tools-minimalTuxCareOut-of-bounds write when handling split HTTP headers8.1 Highgrub2-tools-minimalTuxCareInteger underflow in grub_net_recv_ip4_packets8.1 Highgrub2-tools-minimalTuxCareA crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user...7.0 Highgrub2-tools-minimalTuxCareA heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader....4.5 Mediumgrub2-tools-minimalTuxCareA crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An...4.5 Mediumgrub2-tools-minimalTuxCareA flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with...3.3 Lowgrub2-tools-minimalTuxCareGRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow.5.7 Mediumgrub2-tools-minimalTuxCareGRUB2 contains a race condition leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing.6.4 Mediumgrub2-tools-minimalTuxCareInteger overflow in the LZO algorithm variant in Oberhumer liblzo2 and lzo-2 before 2.07 on 32...8.8 High