342 matches found
CVE-2024-45774 affecting package grub2 for versions less than 2.06-15
CVE-2024-45774 affecting package grub2 for versions less than 2.06-15. A patched version of the package is available...
CVE-2025-1125 affecting package grub2 for versions less than 2.06-15
CVE-2025-1125 affecting package grub2 for versions less than 2.06-15. A patched version of the package is available...
CVE-2024-45780 affecting package grub2 for versions less than 2.06-15
CVE-2024-45780 affecting package grub2 for versions less than 2.06-15. A patched version of the package is available...
CVE-2024-45778 affecting package grub2 for versions less than 2.06-15
CVE-2024-45778 affecting package grub2 for versions less than 2.06-15. A patched version of the package is available...
CVE-2025-0678 affecting package grub2 for versions less than 2.06-15
CVE-2025-0678 affecting package grub2 for versions less than 2.06-15. A patched version of the package is available...
CVE-2025-0689 affecting package grub2 for versions less than 2.06-15
CVE-2025-0689 affecting package grub2 for versions less than 2.06-15. A patched version of the package is available...
CVE-2025-0690 affecting package grub2 for versions less than 2.06-15
CVE-2025-0690 affecting package grub2 for versions less than 2.06-15. A patched version of the package is available...
CVE-2025-0677 affecting package grub2 for versions less than 2.06-15
CVE-2025-0677 affecting package grub2 for versions less than 2.06-15. A patched version of the package is available...
CVE-2024-45777 affecting package grub2 for versions less than 2.06-15
CVE-2024-45777 affecting package grub2 for versions less than 2.06-15. A patched version of the package is available...
CVE-2024-45783 affecting package grub2 for versions less than 2.06-15
CVE-2024-45783 affecting package grub2 for versions less than 2.06-15. A patched version of the package is available...
EulerOS 2.0 SP11 : grub2 (EulerOS-SA-2025-2195)
According to the versions of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU GRUB aka GRUB2 through 2.12 does not use a constant-time algorithm for grubcryptomemcmp and thus allows side-channel attacks.CVE-2024-56738...
AlmaLinux 10 : grub2 (ALSA-2025:16154)
The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:16154 advisory. grub2: grub-core/gettext: Integer overflow leads to Heap OOB Write and Read. CVE-2024-45776 grub2: fs/ufs: OOB write in the heap CVE-2024-45781 grub2:...
RockyLinux 10 : grub2 (RLSA-2025:16154)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:16154 advisory. grub2: grub-core/gettext: Integer overflow leads to Heap OOB Write and Read. CVE-2024-45776 grub2: fs/ufs: OOB write in the heap CVE-2024-45781 grub2:...
RLSA-2025:6990 Moderate: grub2 security update
The grub2 packages provide version 2 of the Grand Unified Boot Loader GRUB, a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices. Security Fixes: grub2: reader/jpe...
NewStart CGSL MAIN 6.06 : grub2 Multiple Vulnerabilities (NS-SA-2025-0221)
The remote NewStart CGSL host, running version MAIN 6.06, has grub2 packages installed that are affected by multiple vulnerabilities: - Multiple integer underflows in Grub2 1.98 through 2.02 allow physically proximate attackers to bypass authentication, obtain sensitive information, or cause a...
CLSA-2025-1758891628 grub2: Fix of CVE-2014-4607
CVE-2014-4607: minilzo: Update to minilzo-2.08 to fix integer overflow...
grub2: commands/dump: The dump command is not in lockdown when secure boot is enabled
A flaw was found in grub2. Grub's dump command is not blocked when grub is in lockdown mode, which allows the user to read any memory information, and an attacker may leverage this in order to extract signatures, salts, and other sensitive information from the memory...
grub2: UFS: Integer overflow may lead to heap based out-of-bounds write when handling symlinks
A flaw was found in grub2. When performing a symlink lookup, the grub's UFS module checks the inode's data size to allocate the internal buffer to read the file content, however, it fails to check if the symlink data size has overflown. When this occurs, grubmalloc may be called with a smaller...
