Lucene search

K
redosRedosROS-20240405-01
HistoryApr 05, 2024 - 12:00 a.m.

ROS-20240405-01

2024-04-0500:00:00
redos.red-soft.ru
3
grub2
vulnerability
arbitrary code
execution
grafana
trace view
panel
privilege escalation
cross-site scripting attacks

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

4.9 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

0.001 Low

EPSS

Percentile

20.8%

A vulnerability in the fs/ntfs.c component of the Grub2 operating system boot loader is related to a buffer overflow in the
dynamic memory. Exploitation of the vulnerability could allow an attacker to execute arbitrary code

A vulnerability in the Trace View panel of the Grafana web data representation tool is related to insufficient protection of the web page structure during processing.
protection of the web page structure when processing attribute values and range resources. Exploitation
exploitation of the vulnerability could allow a remote attacker to escalate privileges and perform cross-site scripted attacks.
cross-site scripting attacks

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64grub2-common<= 2.06-63UNKNOWN

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

4.9 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

0.001 Low

EPSS

Percentile

20.8%