CVE-2024-56737: Buffer Overflow
Published Dec 29, 2024
·Updated
GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem.
Affected Software
2 affected components
GNU GRUB<=2.12
GNU GRUB2<=2.12
Event History
Dec 29, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Data Sourced
via NVD·07:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-56737?
CVE-2024-56737 is classified as a critical vulnerability due to its potential for remote exploitation.
2
How do I fix CVE-2024-56737?
To fix CVE-2024-56737, update GNU GRUB to version 2.13 or later.
3
What systems are affected by CVE-2024-56737?
CVE-2024-56737 affects GNU GRUB versions up to and including 2.12.
4
What type of vulnerability is CVE-2024-56737?
CVE-2024-56737 is a heap-based buffer overflow vulnerability in the HFS filesystem handling.
5
Can CVE-2024-56737 lead to remote code execution?
Yes, exploiting CVE-2024-56737 could potentially allow an attacker to execute arbitrary code remotely.