Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2rxj-vwp2-v63v

Опубликовано: 20 июл. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

Integer underflow in grub_net_recv_ip4_packets; A malicious crafted IP packet can lead to an integer underflow in grub_net_recv_ip4_packets() function on rsm->total_len value. Under certain circumstances the total_len value may end up wrapping around to a small integer number which will be used in memory allocation. If the attack succeeds in such way, subsequent operations can write past the end of the buffer.

Integer underflow in grub_net_recv_ip4_packets; A malicious crafted IP packet can lead to an integer underflow in grub_net_recv_ip4_packets() function on rsm->total_len value. Under certain circumstances the total_len value may end up wrapping around to a small integer number which will be used in memory allocation. If the attack succeeds in such way, subsequent operations can write past the end of the buffer.

EPSS

Процентиль: 67%
0.01284
Низкий

8.1 High

CVSS3

Дефекты

CWE-191

Связанные уязвимости

CVSS3: 8.1
ubuntu
около 3 лет назад

Integer underflow in grub_net_recv_ip4_packets; A malicious crafted IP packet can lead to an integer underflow in grub_net_recv_ip4_packets() function on rsm->total_len value. Under certain circumstances the total_len value may end up wrapping around to a small integer number which will be used in memory allocation. If the attack succeeds in such way, subsequent operations can write past the end of the buffer.

CVSS3: 8.1
redhat
около 4 лет назад

Integer underflow in grub_net_recv_ip4_packets; A malicious crafted IP packet can lead to an integer underflow in grub_net_recv_ip4_packets() function on rsm->total_len value. Under certain circumstances the total_len value may end up wrapping around to a small integer number which will be used in memory allocation. If the attack succeeds in such way, subsequent operations can write past the end of the buffer.

CVSS3: 8.1
nvd
около 3 лет назад

Integer underflow in grub_net_recv_ip4_packets; A malicious crafted IP packet can lead to an integer underflow in grub_net_recv_ip4_packets() function on rsm->total_len value. Under certain circumstances the total_len value may end up wrapping around to a small integer number which will be used in memory allocation. If the attack succeeds in such way, subsequent operations can write past the end of the buffer.

CVSS3: 8.1
msrc
5 месяцев назад

Integer underflow in grub_net_recv_ip4_packets

CVSS3: 8.1
debian
около 3 лет назад

Integer underflow in grub_net_recv_ip4_packets; A malicious crafted IP ...

EPSS

Процентиль: 67%
0.01284
Низкий

8.1 High

CVSS3

Дефекты

CWE-191