2416 matches found
Advisory ROSA-SA-2025-2606
software: grub2 2.06 WASP: ROSA-CHROME packageevrstring: grub2-2.06-22 CVE-ID: CVE-2023-4692 BDU-ID: 2023-06822 CVE-Crit: LOW CVE-DESC.: A vulnerability in the fs/ntfs.c component of the Grub2 operating systems loader is related to a buffer overflow in dynamic memory. Exploitation of the...
PT-2025-6688
Name of the Vulnerable Software and Affected Versions grub2 affected versions not specified Description A flaw was found in grub2 where the grub extcmd dispatcher function calls grub arg list alloc to allocate memory for the grub's argument list. However, it fails to check in case the memory...
PT-2025-7466
Name of the Vulnerable Software and Affected Versions GRUB affected versions not specified Description A heap-based buffer overflow issue exists in the grub udf read block function, potentially allowing for arbitrary code execution. Recommendations At the moment, there is no information about a...
PT-2025-7462
Name of the Vulnerable Software and Affected Versions squash4 affected versions not specified Description The issue is related to an integer overflow that may cause a heap-based out-of-bounds write when reading data. Recommendations At the moment, there is no information about a newer version tha...
PT-2025-6835
Name of the Vulnerable Software and Affected Versions GNU grub2 affected versions not specified Description A issue has been identified in GNU grub2 related to an hfs out-of-bounds write. Recommendations At the moment, there is no information about a newer version that contains a fix for this iss...
CVE-2024-56738
GNU GRUB aka GRUB2 through 2.12 does not use a constant-time algorithm for grubcryptomemcmp and thus allows side-channel attacks...
CVE-2024-56737
GNU GRUB aka GRUB2 through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem...
CVE-2024-49504
grub2 allowed attackers with access to the grub shell to access files on the encrypted disks...
CVE-2024-49504
grub2 allowed attackers with access to the grub shell to access files on the encrypted disks...
CVE-2024-49504
grub2 allowed attackers with access to the grub shell to access files on the encrypted disks...
CVE-2024-49504
grub2 allowed attackers with access to the grub shell to access files on the encrypted disks...
CVE-2024-49504
grub2 allowed attackers with access to the grub shell to access files on the encrypted disks...
CVE-2024-49504 grub2 allows bypassing TPM-bound disk encryption on SL(E)M encrypted Images
grub2 allowed attackers with access to the grub shell to access files on the encrypted disks...
CVE-2024-49504
CVE-2024-49504 is referenced in multiple security advisories for grub2 (GRUB2) across EulerOS and Tencent/TencentOS Server ecosystems. The linked Nessus/OPENVAS entries identify that “grub2 allowed attackers with access to the grub shell to access files on the encrypted disks,” indicating a vulne...
CVE-2024-49504 grub2 allows bypassing TPM-bound disk encryption on SL(E)M encrypted Images
grub2 allowed attackers with access to the grub shell to access files on the encrypted disks...
CVE-2024-49504: Incorrect Default Permissions
grub2 allowed attackers with access to the grub shell to access files on the encrypted disks...
grub2 bug fix update
An update is available for grub2. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The grub2 packages provide version 2 of the Grand Unified Boot Loader GRUB, a...
SUSE CVE-2024-49504
grub2 allowed attackers with access to the grub shell to access files on the encrypted disks...
grub2-2.12-28.1 on GA media (moderate)
grub2-2.12-28.1 on GA media Announcement ID: openSUSE-SU-2024:14464-1 Rating: moderate Cross-References: CVE-2024-49504 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the grub2-2.12-28.1...
