Lucene search

K
mageiaGentoo FoundationMGASA-2015-0480
HistoryDec 20, 2015 - 12:15 p.m.

Updated grub2 packages fix security vulnerability

2015-12-2012:15:38
Gentoo Foundation
advisories.mageia.org
7

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

43.1%

A flaw was found in the way the grub2 handled backspace characters entered in username and password prompts. An attacker with access to the system console could use this flaw to bypass grub2 password protection and gain administrative access to the system (CVE-2015-8370).

OSVersionArchitecturePackageVersionFilename
Mageia5noarchgrub2< 2.02-0.git9752.18.3grub2-2.02-0.git9752.18.3.mga5

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

43.1%