Lucene search
+L

10867 matches found

osv_cve
osv_cve
•added 2021/03/03 5:15 p.m.•41 views

CVE-2020-27749

A flaw was found in grub2 in versions prior to 2.06. Variable names present are expanded in the supplied command line into their corresponding variable contents, using a 1kB stack buffer for temporary storage, without sufficient bounds checking. If the function is called with a command line that...

6.7CVSS2.3AI score
SaveExploits0References4
NVD
NVD
•added 2021/03/03 5:15 p.m.•35 views

CVE-2020-27749

A flaw was found in grub2 in versions prior to 2.06. Variable names present are expanded in the supplied command line into their corresponding variable contents, using a 1kB stack buffer for temporary storage, without sufficient bounds checking. If the function is called with a command line that...

7.2CVSS0.00573EPSS
SaveExploits0References4
osv_debian
osv_debian
•added 2021/03/03 5:15 p.m.•13 views

DEBIAN-CVE-2020-27749

A flaw was found in grub2 in versions prior to 2.06. Variable names present are expanded in the supplied command line into their corresponding variable contents, using a 1kB stack buffer for temporary storage, without sufficient bounds checking. If the function is called with a command line that...

6.7CVSS7.1AI score0.00573EPSS
SaveExploits0References1
Prion
Prion
•added 2021/03/03 5:15 p.m.•44 views

Design/Logic Flaw

A flaw was found in grub2 in versions prior to 2.06. Variable names present are expanded in the supplied command line into their corresponding variable contents, using a 1kB stack buffer for temporary storage, without sufficient bounds checking. If the function is called with a command line that...

7.2CVSS7.1AI score0.00573EPSS
SaveExploits0References4Affected Software7
Debian CVE
Debian CVE
•added 2021/03/03 4:40 p.m.•47 views

CVE-2020-27749

A flaw was found in grub2 in versions prior to 2.06. Variable names present are expanded in the supplied command line into their corresponding variable contents, using a 1kB stack buffer for temporary storage, without sufficient bounds checking. If the function is called with a command line that...

7.2CVSS7.5AI score0.00573EPSS
SaveExploits0
Mend
Mend
•added 2021/03/03 4:40 p.m.•7 views

CVE-2020-27749

A flaw was found in grub2 in versions prior to 2.06. Variable names present are expanded in the supplied command line into their corresponding variable contents, using a 1kB stack buffer for temporary storage, without sufficient bounds checking. If the function is called with a command line that...

8.4CVSS0.00573EPSS
SaveExploits0References9
AlpineLinux
AlpineLinux
•added 2021/03/03 4:40 p.m.•48 views

CVE-2020-27749

A flaw was found in grub2 in versions prior to 2.06. Variable names present are expanded in the supplied command line into their corresponding variable contents, using a 1kB stack buffer for temporary storage, without sufficient bounds checking. If the function is called with a command line that...

7.2CVSS7.8AI score0.00573EPSS
SaveExploits0
CVE
CVE
•added 2021/03/03 4:40 p.m.•396 views

CVE-2020-27749

CVE-2020-27749 affects grub2, with the vulnerability in grub_parser_split_cmdline() where variable names in the command line are expanded into contents using a 1 KB stack buffer without sufficient bounds checking. This can overflow the stack and corrupt the stack frame, potentially allowing code ...

7.2CVSS7.4AI score0.00573EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2021/03/03 4:04 p.m.•50 views

CVE-2021-22666

Fatek FvDesigner Version 1.5.76 and prior is vulnerable to a stack-based buffer overflow while project files are being processed, allowing an attacker to craft a special project file that may permit arbitrary code execution...

8.2AI score0.01152EPSS
SaveExploits0References1
OSS-Fuzz
OSS-Fuzz
•added 2021/03/03 3:52 p.m.•9 views

libredwg:llvmfuzz: Dynamic-stack-buffer-overflow in dxf_fixup_string

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=4527176918630400 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow READ 15 Crash Addres...

5.9AI score
SaveExploits0
Veracode
Veracode
•added 2021/03/03 5:51 a.m.•50 views

Privilege Escalation

grub2 is vulnerable to privilege escalation. The vulnerability exists as variable names present are expanded in the supplied command line into their corresponding variable contents, using a 1kB stack buffer for temporary storage, without sufficient bounds checking. If the function is called with ...

6.7CVSS4.1AI score0.00573EPSS
SaveExploits0References6Affected Software3
OpenVAS
OpenVAS
•added 2021/03/03 12:00 a.m.•54 views

Debian: Security Advisory (DSA-4867-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.2CVSS7.5AI score0.01738EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2021/03/03 12:00 a.m.•48 views

Oracle Linux 7 : grub2 (ELSA-2021-9076)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9076 advisory. - Fix CVE-2020-14372 CVE-2020-25632 CVE-2020-25647 CVE-2020-27749 CVE-2020-27779 CVE-2021-20225 CVE-2021-20233 Orabug: 32530657 Tenable has extracted t...

8.2CVSS7AI score0.01738EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
•added 2021/03/03 12:00 a.m.•129 views

RHEL 7 : grub2 (RHSA-2021:0699)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0699 advisory. The grub2 packages provide version 2 of the Grand Unified Boot Loader GRUB, a highly configurable and customizable boot loader with modular...

8.2CVSS7.5AI score0.01738EPSS
SaveExploits0References18
RedHat Linux
RedHat Linux
•added 2021/03/02 8:57 p.m.•264 views

Moderate: Red Hat Security Advisory: grub2 security update

An update for grub2 is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

8.2CVSS7AI score0.01738EPSS
SaveExploits0References9
RedHat Linux
RedHat Linux
•added 2021/03/02 7:55 p.m.•12 views

grub2: Stack buffer overflow in grub_parser_split_cmdline()

A flaw was found in grub2. Variable names present are expanded in the supplied command line into their corresponding variable contents, using a 1kB stack buffer for temporary storage, without sufficient bounds checking. If the function is called with a command line that references a variable with...

7.2CVSS6.1AI score0.00573EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2021/03/02 7:39 p.m.•103 views

Moderate: Red Hat Security Advisory: grub2 security update

An update for grub2 is now available for Red Hat Enterprise Linux 7.3 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

8.2CVSS7AI score0.01738EPSS
SaveExploits0References9
RedHat Linux
RedHat Linux
•added 2021/03/02 7:28 p.m.•107 views

Moderate: Red Hat Security Advisory: grub2 security update

An update for grub2 is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

8.2CVSS7AI score0.01738EPSS
SaveExploits0References9
RedHat Linux
RedHat Linux
•added 2021/03/02 7:28 p.m.•26 views

grub2: Stack buffer overflow in grub_parser_split_cmdline()

A flaw was found in grub2. Variable names present are expanded in the supplied command line into their corresponding variable contents, using a 1kB stack buffer for temporary storage, without sufficient bounds checking. If the function is called with a command line that references a variable with...

7.2CVSS6.1AI score0.00573EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2021/03/02 6:33 p.m.•39 views

CVE-2020-27749

A flaw was found in grub2. Variable names present are expanded in the supplied command line into their corresponding variable contents, using a 1kB stack buffer for temporary storage, without sufficient bounds checking. If the function is called with a command line that references a variable with...

7.5CVSS7.7AI score0.00573EPSS
SaveExploits0References3
Rows per page
Query Builder