2411 matches found
UBUNTU-CVE-2024-2312
GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 module leaving UEFI system table hooks after exit. This lead to a use-after-free condition, and could possibly lead to secure boot bypass...
ROS-20240403-05
Vulnerability of grubfontconstructglyph function of Grub2 operating systems loader is related to the output of the operation outside the memory buffer when processing specially designed fonts in pf2 format. Exploitation of the vulnerability may allow an attacker to execute arbitrary code Grub2...
ROS-20240402-06
Vulnerability in the password protection mechanism of the Grub2 boot loader is related to the bypass of authentication by spoofing. Exploitation of the vulnerability could allow an attacker to bypass established access control...
Updated grub2 packages fix security vulnerabilities
An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow an attacker to present a specially crafted NTFS filesystem image, leading to grub's heap metadata corruption. In some circumstances, the attack may also corrupt the UEFI firmware heap metadata. As a...
MGASA-2024-0095 Updated grub2 packages fix security vulnerabilities
An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow an attacker to present a specially crafted NTFS filesystem image, leading to grub's heap metadata corruption. In some circumstances, the attack may also corrupt the UEFI firmware heap metadata. As a...
CLSA-2024-1711036571 Update of grub2
Make this package installable only on a system having Cloudlinux signed components: grub2 and kernel...
CLSA-2024-1711036007 shim: Fix of 4 CVEs
Make this package installable only on a system having Cloudlinux signed components: grub2 and kernel - Update to shim-15.8 and fix the following CVEs: Resolves: CVE-2023-40546 Resolves: CVE-2023-40547 Resolves: СVE-2023-40548 Resolves: СVE-2023-40549 Resolves: CVE-2023-40550 Resolves:...
PT-2024-41855
Make this package installable only on a system having Cloudlinux signed components: grub2 and kernel...
EulerOS Virtualization 2.11.0 : grub2 (EulerOS-SA-2024-1427)
According to the versions of the grub2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow an attacker to present a specially...
Huawei EulerOS: Security Advisory for grub2 (EulerOS-SA-2024-1427)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for grub2 (EulerOS-SA-2024-1399)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2024-41856
Make this package installable only on a system having Cloudlinux signed components: grub2 and kernel...
EulerOS Virtualization 2.11.1 : grub2 (EulerOS-SA-2024-1399)
According to the versions of the grub2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow an attacker to present a specially...
Fedora 38 : grub2 (2024-c1fabee30e)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-c1fabee30e advisory. Security fix for CVE-2024-1048 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus ha...
CVE-2022-28735 affecting package grub2 for versions less than 2.06-14
CVE-2022-28735 affecting package grub2 for versions less than 2.06-14. A patched version of the package is available...
CVE-2021-3981 affecting package grub2 for versions less than 2.06-14
CVE-2021-3981 affecting package grub2 for versions less than 2.06-14. A patched version of the package is available...
CVE-2021-3695 affecting package grub2 for versions less than 2.06-14
CVE-2021-3695 affecting package grub2 for versions less than 2.06-14. A patched version of the package is available...
CVE-2022-28734 affecting package grub2 for versions less than 2.06-14
CVE-2022-28734 affecting package grub2 for versions less than 2.06-14. A patched version of the package is available...