Azure Linux 3.0 Security Update: grub2 (CVE-2022-2601)

The version of grub2 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-2601 advisory. - A buffer overflow was found in grubfontconstructglyph. A malicious crafted pf2 font can lead to an overflow wh...

Azure Linux 3.0 Security Update: grub2 (CVE-2022-3775)

The version of grub2 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-3775 advisory. - When rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed glyph's...

Advisory ROSA-SA-2025-2606

software: grub2 2.06 WASP: ROSA-CHROME packageevrstring: grub2-2.06-22 CVE-ID: CVE-2023-4692 BDU-ID: 2023-06822 CVE-Crit: LOW CVE-DESC.: A vulnerability in the fs/ntfs.c component of the Grub2 operating systems loader is related to a buffer overflow in dynamic memory. Exploitation of the...

PT-2025-6688 · Grub2 +5 · Grub2 +5

Name of the Vulnerable Software and Affected Versions: grub2 affected versions not specified Description: A flaw was found in grub2 where the grub extcmd dispatcher function calls grub arg list alloc to allocate memory for the grub's argument list. However, it fails to check in case the memory...

PT-2025-7466

Name of the Vulnerable Software and Affected Versions GRUB affected versions not specified Description A heap-based buffer overflow issue exists in the grub udf read block function, potentially allowing for arbitrary code execution. Recommendations At the moment, there is no information about a...

PT-2025-7462

Name of the Vulnerable Software and Affected Versions squash4 affected versions not specified Description The issue is related to an integer overflow that may cause a heap-based out-of-bounds write when reading data. Recommendations At the moment, there is no information about a newer version tha...

PT-2025-6835

Name of the Vulnerable Software and Affected Versions GNU grub2 affected versions not specified Description A issue has been identified in GNU grub2 related to an hfs out-of-bounds write. Recommendations At the moment, there is no information about a newer version that contains a fix for this iss...

CVE-2024-56737

GNU GRUB aka GRUB2 through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem...

CVE-2024-56738

GNU GRUB aka GRUB2 through 2.12 does not use a constant-time algorithm for grubcryptomemcmp and thus allows side-channel attacks...

CVE-2024-49504

grub2 allowed attackers with access to the grub shell to access files on the encrypted disks...

CVE-2024-49504

grub2 allowed attackers with access to the grub shell to access files on the encrypted disks...

CVE-2024-49504

grub2 allowed attackers with access to the grub shell to access files on the encrypted disks...

CVE-2024-49504

grub2 allowed attackers with access to the grub shell to access files on the encrypted disks...

CVE-2024-49504

CVE-2024-49504 is referenced in multiple security advisories for grub2 (GRUB2) across EulerOS and Tencent/TencentOS Server ecosystems. The linked Nessus/OPENVAS entries identify that “grub2 allowed attackers with access to the grub shell to access files on the encrypted disks,” indicating a vulne...

CVE-2024-49504

grub2 allowed attackers with access to the grub shell to access files on the encrypted disks...

CVE-2024-49504 grub2 allows bypassing TPM-bound disk encryption on SL(E)M encrypted Images

grub2 allowed attackers with access to the grub shell to access files on the encrypted disks...

CVE-2024-49504 grub2 allows bypassing TPM-bound disk encryption on SL(E)M encrypted Images

grub2 allowed attackers with access to the grub shell to access files on the encrypted disks...

grub2 bug fix update

An update is available for grub2. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The grub2 packages provide version 2 of the Grand Unified Boot Loader GRUB, a...

SUSE CVE-2024-49504

grub2 allowed attackers with access to the grub shell to access files on the encrypted disks...

grub2-2.12-28.1 on GA media (moderate)

grub2-2.12-28.1 on GA media Announcement ID: openSUSE-SU-2024:14464-1 Rating: moderate Cross-References: CVE-2024-49504 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the grub2-2.12-28.1...