CVE-2024-56737: Buffer Overflow
GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/grub2to a version that resolves this vulnerability.Fixed in 2.12-6 - Upgrade
Upgrade
debian/grub2to a version that resolves this vulnerability.Fixed in 2.12-9+deb13u2Fixed in 2.14-4
Event History
Frequently Asked Questions
What is the severity of CVE-2024-56737?
CVE-2024-56737 is classified as a critical vulnerability due to its potential for remote exploitation.
How do I fix CVE-2024-56737?
To fix CVE-2024-56737, update GNU GRUB to version 2.13 or later.
What systems are affected by CVE-2024-56737?
CVE-2024-56737 affects GNU GRUB versions up to and including 2.12.
What type of vulnerability is CVE-2024-56737?
CVE-2024-56737 is a heap-based buffer overflow vulnerability in the HFS filesystem handling.
Can CVE-2024-56737 lead to remote code execution?
Yes, exploiting CVE-2024-56737 could potentially allow an attacker to execute arbitrary code remotely.