CVE-2024-45779: Grub2: fs/bfs: integer overflow leads to heap oob read in the bfs parser
An integer overflow flaw was found in the BFS file system driver in grub2. When reading a file with an indirect extent map, grub2 fails to validate the number of extent entries to be read. A crafted or corrupted BFS filesystem may cause an integer overflow during the file reading, leading to a heap of bounds read. As a consequence, sensitive data may be leaked, or grub2 will crash.
Other sources
Grub2: fs/bfs: integer overflow leads to heap oob read in the bfs parser
— Microsoft
There's an integer overflow in the BFS file system driver. When reading a file with indirect extent map grub2 fails to validate the number of extent entries to be read. A crafted or corrupted BFS filesystem may cause a integer overflow during the file reading, leading to a Heap Ouf-of-Bounds read. As consequence sensitive data may be leaked or the grub2 to crash.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2.06-15 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2.06-25
Event History
Frequently Asked Questions
What is the severity of CVE-2024-45779?
CVE-2024-45779 has been rated as a medium severity vulnerability.
How do I fix CVE-2024-45779?
To mitigate CVE-2024-45779, upgrade to the latest version of the grub2 package that includes the security patch.
What systems are affected by CVE-2024-45779?
CVE-2024-45779 affects systems using the GNU grub2 file system driver, particularly those with a BFS filesystem.
What impact does CVE-2024-45779 have?
CVE-2024-45779 can potentially lead to system crashes or improper file handling due to an integer overflow during file reading.
Is CVE-2024-45779 exploit possible?
Yes, CVE-2024-45779 can be exploited if a malicious or corrupted BFS filesystem is used.