REDHAT-BUG-2346112
First published: Mon Feb 17 2025(Updated: )
During the network boot process when trying to search for the configuration file, grub copies data from a user controlled environment variable into an internal buffer using grub_strcpy() function. During this step it fails to consider the environment variable length when allocating the internal buffer, resulting in a out-of-bounds write. If correctly exploited this issue may result in remote code execution through the same network segment the grub is searching for the boot information, which can be used to by-pass secure boot protections.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| GRUB |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of REDHAT-BUG-2346112?
The severity of REDHAT-BUG-2346112 is classified as high due to the potential for buffer overflow in the GRUB bootloader.
How do I fix REDHAT-BUG-2346112?
To fix REDHAT-BUG-2346112, update to the latest version of GNU GRUB that contains the patch for this vulnerability.
Who is affected by REDHAT-BUG-2346112?
Systems using GNU GRUB as their bootloader and relying on user-controlled environment variables are affected by REDHAT-BUG-2346112.
What are the risks associated with REDHAT-BUG-2346112?
The risks associated with REDHAT-BUG-2346112 include potential remote code execution or system compromise during the boot process.
Is there a workaround for REDHAT-BUG-2346112?
As a temporary workaround for REDHAT-BUG-2346112, limit the use of user-controlled environment variables in the GRUB configuration.
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2025-0624
- agent/references
- agent/last-modified-date
- agent/severity
- agent/source
- agent/type
- agent/description
- agent/first-publish-date
- agent/event
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- vendor/gnu
- canonical/grub