grub2 vulnerabilities (Ubuntu)
45 vulnerabilities.
-
grub2Ubuntu Bypass of GRUB lockdown restriction in Secure Boot mode via serial command MMIO base address 6.4 Medium -
grub2Ubuntu Grub2: use-after-free in net_set_vlan 4.9 Medium -
grub2Ubuntu Grub2: missing unregister call for normal_exit command may lead to use-after-free 4.9 Medium -
grub2Ubuntu Grub2: missing unregister call for normal commands may lead to use-after-free 4.9 Medium -
grub2Ubuntu Grub2: missing unregister call for gettext command may lead to use-after-free 7.8 High -
grub2Ubuntu Grub2: grub2: out-of-bounds write via malicious usb device 4.8 Medium -
grub2Ubuntu Grub2: use-after-free in grub_file_close() 4.9 Medium -
grub2Ubuntu Grub2: grub allow access to encrypted device through cli once root device is unlocked via tpm 5.9 Medium -
grub2Ubuntu Grub2: fs/hfs: integer overflow may lead to heap based out-of-bounds write 7.8 High -
grub2Ubuntu Grub2: commands/dump: the dump command is not in lockdown when secure boot is enabled 4.4 Medium -
grub2Ubuntu Grub2: read: integer overflow may lead to out-of-bounds write 6.1 Medium -
grub2Ubuntu Grub2: udf: heap based buffer overflow in grub_udf_read_block() may lead to arbitrary code execution 7.8 High -
grub2Ubuntu Grub2: romfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading dat 6.4 Medium -
grub2Ubuntu Grub2: jfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data 6.4 Medium -
grub2Ubuntu Grub2: reiserfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data 6.4 Medium -
grub2Ubuntu Grub2: squash4: integer overflow may lead to heap based out-of-bounds write when reading data 7.8 High -
grub2Ubuntu Grub2: ufs: integer overflow may lead to heap based out-of-bounds write when handling symlinks 6.4 Medium -
grub2Ubuntu Grub2: net: out-of-bounds write in grub_net_search_config_file() 7.6 High -
grub2Ubuntu Grub2: command/gpg: use-after-free due to hooks not being removed on module unload 6.4 Medium -
grub2Ubuntu Grub2: fs/hfs+: refcount can be decremented twice 4.4 Medium -
grub2Ubuntu Grub2: fs/hfs: strcpy() using the volume name (fs/hfs.c:382) 7.8 High -
grub2Ubuntu Grub2: fs/ufs: oob write in the heap 6.7 Medium -
grub2Ubuntu Grub2: fs/tar: integer overflow causes heap oob write 6.7 Medium -
grub2Ubuntu Grub2: fs/bfs: integer overflow leads to heap oob read in the bfs parser 6.0 Medium -
grub2Ubuntu Grub2: fs/bfs: integer overflow in the bfs parser. 4.1 Medium -
grub2Ubuntu Grub2: grub-core/gettext: integer overflow leads to heap oob write. 6.7 Medium -
grub2Ubuntu Grub2: grub-core/gettext: integer overflow leads to heap oob write and read. 6.7 Medium -
grub2Ubuntu Grub2: commands/extcmd: missing check for failed allocation 5.2 Medium -
grub2Ubuntu Grub2: reader/jpeg: heap oob write during jpeg parsing 6.7 Medium -
grub2Ubuntu GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp... 5.3 Medium -
grub2Ubuntu GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock... 8.8 High -
grub2Ubuntu grub2 allows bypassing TPM-bound disk encryption on SL(E)M encrypted Images 7.0 High -
grub2Ubuntu GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2... 6.7 Medium -
grub2Ubuntu grub2, grub2-signed regression No score -
grub2Ubuntu GRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shim 6.4 Medium -
grub2Ubuntu GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow. 5.7 Medium -
grub2Ubuntu GRUB2 contains a race condition leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing. 6.4 Medium -
grub2Ubuntu There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A... 5.7 Medium -
grub2Ubuntu There is an issue on grub2 before version 2.06 at function read_section_as_string(). It expects a... 5.7 Medium -
grub2Ubuntu There's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems... 6.7 Medium -
grub2Ubuntu In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic... 6.4 Medium -
grub2Ubuntu A flaw was found in grub2, prior to version 2.06. An attacker may use the GRUB 2 flaw to hijack... 8.2 High -
grub2Ubuntu Multiple integer underflows in Grub2 1.98 through 2.02 allow physically proximate attackers to... 6.9 Medium -
grub2Ubuntu Integer overflow in the LZO algorithm variant in Oberhumer liblzo2 and lzo-2 before 2.07 on 32... 8.8 High -
grub2Ubuntu A certain Debian patch for GNU GRUB uses world-readable permissions for grub.cfg, which allows... 2.1 Low