Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-975v-wj6r-fgj8

Опубликовано: 05 апр. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.7

Описание

GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 module leaving UEFI system table hooks after exit. This lead to a use-after-free condition, and could possibly lead to secure boot bypass.

GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 module leaving UEFI system table hooks after exit. This lead to a use-after-free condition, and could possibly lead to secure boot bypass.

EPSS

Процентиль: 31%
0.00378
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 6.7
ubuntu
больше 2 лет назад

GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 module leaving UEFI system table hooks after exit. This lead to a use-after-free condition, and could possibly lead to secure boot bypass.

CVSS3: 6.7
redhat
больше 2 лет назад

GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 module leaving UEFI system table hooks after exit. This lead to a use-after-free condition, and could possibly lead to secure boot bypass.

CVSS3: 6.7
nvd
больше 2 лет назад

GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 module leaving UEFI system table hooks after exit. This lead to a use-after-free condition, and could possibly lead to secure boot bypass.

msrc
12 месяцев назад

GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 module leaving UEFI system table hooks after exit. This lead to a use-after-free condition, and could possibly lead to secure boot bypass.

CVSS3: 6.7
debian
больше 2 лет назад

GRUB2 does not call the module fini functions on exit, leading to Debi ...

EPSS

Процентиль: 31%
0.00378
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-416