Filter
CVE-2024-1048Grub2: grub2-set-bootflag can be abused by local (pseudo-)users
3.3
First published (updated )
ubuntu/grub2-unsignedGrub2: out-of-bounds read at fs/ntfs.c
5.3
First published (updated )
ubuntu/grub2-unsignedGrub2: out-of-bounds write at fs/ntfs.c may lead to unsigned code execution
7.8
First published (updated )
Fedoraproject FedoraGrub2: bypass the grub password protection feature
6.8
First published (updated )
Microsoft Windows 10Redhat: CVE-2022-3775 grub2 - Heap based out-of-bounds write when rendering certain Unicode sequence…
7.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/grub2There's a use-after-free vulnerability in grub_cmd_chainloader() function
7.8
First published (updated )
redhat/grub2A flaw was found in grub2. The shim_lock verifier from grub2 allows non-kernel files to be loaded wh…
7.8
First published (updated )
redhat/grub2Out-of-bounds write when handling split HTTP headers
9.8
First published (updated )
redhat/grub2Integer underflow in grub_net_recv_ip4_packets
8.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Gnu Grub2grub2-once uses fixed file name in /var/tmp
5.1
First published (updated )
Gnu Grub2GRUB2 grub.cfg configuration file is created with the wrong permission (0644) allowing unprivileged …
3.3
First published (updated )
redhat/grub2A flaw was found in grub2 when handling JPEG images. This flaw allows an attacker to craft a malicio…
7.5
First published (updated )
redhat/grub2A flaw was found in grub2 when handling a PNG image header. When decoding the data contained in the …
6.9
First published (updated )
redhat/grub2A flaw was found in grub 2, where a crafted 16-bit grayscale PNG image may lead to an out-of-bounds …
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/grubIf certificates that signed grub are installed into db, grub can be booted directly. It will then bo…
6.4
First published (updated )
Redhat Enterprise Linux Server AusThere's a flaw on grub2 menu rendering code setparam_prefix() in the menu rendering code performs a …
8.2
First published (updated )
Redhat Enterprise Linux Server AusThe option parser in grub2 allows an attacker to write past the end of a heap-allocated buffer by ca…
7.2
First published (updated )
Redhat Enterprise Linux Server AusThe grub2's cutmem command does not honor secure boot locking. This allows an privileged attacker to…
7.5
First published (updated )
Redhat Enterprise Linux Server Ausgrub_parser_split_cmdline expands variable names present in the supplied command line in to their co…
7.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Redhat Enterprise Linux Server AusA flaw was found in grub2 in versions prior to 2.06. During USB device initialization, descriptors a…
7.6
First published (updated )
Redhat Enterprise Linux Server AusGRUB2 enables the use of the command acpi even when secure boot is signaled by the firmware. An atta…
7.5
First published (updated )
redhat/grub2GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow.
6.4
First published (updated )
redhat/grub2GRUB2 contains a race condition leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing.
6.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/grub2GRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shim
6.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.