CVE-2024-45780: Grub2: fs/tar: integer overflow causes heap oob write
A flaw was found in grub2. When reading tar files, grub2 allocates an internal buffer for the file name. However, it fails to properly verify the allocation against possible integer overflows. It's possible to cause the allocation length to overflow with a crafted tar file, leading to a heap out-of-bounds write. This flaw eventually allows an attacker to circumvent secure boot protections.
Other sources
Grub2: fs/tar: integer overflow causes heap oob write
— Microsoft
When reading tar files, grub2 allocates an internal buffer for the file name however it fails to properly verify the allocation against possible Integer Overflows. It's possible to cause the allocation length to overflow with a crafted tar file leading to a head Out-of-bounds write, as consequence an attacker may leverage this to eventually circumvent secure boot protections.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2.06-15 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2.06-25
Event History
Frequently Asked Questions
What is the severity of CVE-2024-45780?
CVE-2024-45780 has been rated as high severity due to the risk of integer overflow leading to potential arbitrary code execution.
How do I fix CVE-2024-45780?
To fix CVE-2024-45780, update your GNU GRUB2 to the latest version that resolves this vulnerability.
What systems are affected by CVE-2024-45780?
CVE-2024-45780 affects systems running GNU GRUB2, specifically those using the tar file reading functionality.
What are the consequences of exploiting CVE-2024-45780?
Exploiting CVE-2024-45780 could lead to arbitrary code execution, potentially compromising the affected system.
Is there a workaround for CVE-2024-45780 if an update is not available?
Currently, there are no reliable workarounds for CVE-2024-45780; updating to a patched version is strongly recommended.