PT-2025-7466

Name of the Vulnerable Software and Affected Versions GRUB affected versions not specified Description A heap-based buffer overflow issue exists in the grub udf read block function, potentially allowing for arbitrary code execution. Recommendations At the moment, there is no information about a...

CVE-2024-56738

GNU GRUB aka GRUB2 through 2.12 does not use a constant-time algorithm for grubcryptomemcmp and thus allows side-channel attacks...

CVE-2024-56737

GNU GRUB aka GRUB2 through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem...

CVE-2024-49504

grub2 allowed attackers with access to the grub shell to access files on the encrypted disks...

CVE-2024-49504

grub2 allowed attackers with access to the grub shell to access files on the encrypted disks...

CVE-2024-49504

grub2 allowed attackers with access to the grub shell to access files on the encrypted disks...

CVE-2024-49504

grub2 allowed attackers with access to the grub shell to access files on the encrypted disks...

CVE-2024-49504 grub2 allows bypassing TPM-bound disk encryption on SL(E)M encrypted Images

grub2 allowed attackers with access to the grub shell to access files on the encrypted disks...

CVE-2024-49504 grub2 allows bypassing TPM-bound disk encryption on SL(E)M encrypted Images

grub2 allowed attackers with access to the grub shell to access files on the encrypted disks...

CVE-2024-49504

CVE-2024-49504 is referenced in multiple security advisories for grub2 (GRUB2) across EulerOS and Tencent/TencentOS Server ecosystems. The linked Nessus/OPENVAS entries identify that “grub2 allowed attackers with access to the grub shell to access files on the encrypted disks,” indicating a vulne...

CVE-2024-49504

grub2 allowed attackers with access to the grub shell to access files on the encrypted disks...

CVE-2024-49504: Incorrect Default Permissions

grub2 allowed attackers with access to the grub shell to access files on the encrypted disks...

grub2 bug fix update

An update is available for grub2. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The grub2 packages provide version 2 of the Grand Unified Boot Loader GRUB, a...

SUSE CVE-2024-49504

grub2 allowed attackers with access to the grub shell to access files on the encrypted disks...

grub2-2.12-28.1 on GA media (moderate)

grub2-2.12-28.1 on GA media Announcement ID: openSUSE-SU-2024:14464-1 Rating: moderate Cross-References: CVE-2024-49504 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the grub2-2.12-28.1...

OPENSUSE-SU-2024:14464-1 grub2-2.12-28.1 on GA media

These are all security issues fixed in the grub2-2.12-28.1 package on the GA media of openSUSE Tumbleweed...

Huawei EulerOS: Security Advisory for grub2 (EulerOS-SA-2024-2667)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for grub2 (EulerOS-SA-2024-2633)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 7 : grub2 (RHSA-2022:8900)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:8900 advisory. - Integer underflow in grubnetrecvip4packets; A malicious crafted IP packet can lead to an integer underflow in grubnetrecvip4packets function on rsm-totallen...

CentOS 7 : grub2 (RHSA-2021:0699)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0699 advisory. - A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of the ACPI command when Secure Boot is enabled. This fla...