1307 matches found
Huawei EulerOS: Security Advisory for grub2 (EulerOS-SA-2025-2040)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP10 : grub2 (EulerOS-SA-2025-2070)
According to the versions of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU GRUB aka GRUB2 through 2.12 does not use a constant-time algorithm for grubcryptomemcmp and thus allows side-channel attacks.CVE-2024-56738...
Huawei EulerOS: Security Advisory for grub2 (EulerOS-SA-2025-2009)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2025:20654-1 Security update for grub2
This update for grub2 fixes the following issues: - CVE-2024-56738: Side-channel attack due to not constant-timealgorithm in grubcryptomemcmp bsc1234959...
Security update for grub2
This update for grub2 fixes the following issues: CVE-2024-56738: Side-channel attack due to not constant-timealgorithm in grubcryptomemcmp bsc1234959. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...
Grub2: romfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading dat
...
Grub2: fs/hfs: integer overflow may lead to heap based out-of-bounds write
...
Grub2: udf: heap based buffer overflow in grub_udf_read_block() may lead to arbitrary code execution
...
Grub2: fs/tar: integer overflow causes heap oob write
...
Grub2: read: integer overflow may lead to out-of-bounds write
...
Grub2: fs/hfs+: refcount can be decremented twice
...
Grub2: commands/extcmd: missing check for failed allocation
...
Grub2: grub-core/gettext: integer overflow leads to heap oob write and read.
...
Grub2: ufs: integer overflow may lead to heap based out-of-bounds write when handling symlinks
...
Grub2: grub-core/gettext: integer overflow leads to heap oob write.
...
GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 module leaving UEFI system table hooks after exit. This lead to a use-after-free condition, and could possibly lead to secure boot bypass.
...
GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp and thus allows side-channel attacks.
...
The vulnerability of the CLI loader component in Grub allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the GRUB loader’s CLI component is related to the lack of authentication for critical functions. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Linux Distros Unpatched Vulnerability : CVE-2024-23301
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Relax-and-Recover aka ReaR through 2.7 creates a world-readable initrd when using GRUBRESCUE=y. This allows local attackers to gain access to system secrets...
Linux Distros Unpatched Vulnerability : CVE-2022-28734
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds write when handling split HTTP headers; When handling split HTTP headers, GRUB2 HTTP code accidentally moves its internal data buffer point by one...