Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-975v-wj6r-fgj8

Опубликовано: 05 апр. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.7

Описание

GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 module leaving UEFI system table hooks after exit. This lead to a use-after-free condition, and could possibly lead to secure boot bypass.

GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 module leaving UEFI system table hooks after exit. This lead to a use-after-free condition, and could possibly lead to secure boot bypass.

EPSS

Процентиль: 5%
0.00021
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 6.7
ubuntu
почти 2 года назад

GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 module leaving UEFI system table hooks after exit. This lead to a use-after-free condition, and could possibly lead to secure boot bypass.

CVSS3: 6.7
redhat
почти 2 года назад

GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 module leaving UEFI system table hooks after exit. This lead to a use-after-free condition, and could possibly lead to secure boot bypass.

CVSS3: 6.7
nvd
почти 2 года назад

GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 module leaving UEFI system table hooks after exit. This lead to a use-after-free condition, and could possibly lead to secure boot bypass.

msrc
5 месяцев назад

GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 module leaving UEFI system table hooks after exit. This lead to a use-after-free condition, and could possibly lead to secure boot bypass.

CVSS3: 6.7
debian
почти 2 года назад

GRUB2 does not call the module fini functions on exit, leading to Debi ...

EPSS

Процентиль: 5%
0.00021
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-416