Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f5v2-rhg6-jmg7

Опубликовано: 18 фев. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.7

Описание

A flaw was found in grub2. A specially crafted JPEG file can cause the JPEG parser of grub2 to incorrectly check the bounds of its internal buffers, resulting in an out-of-bounds write. The possibility of overwriting sensitive information to bypass secure boot protections is not discarded.

A flaw was found in grub2. A specially crafted JPEG file can cause the JPEG parser of grub2 to incorrectly check the bounds of its internal buffers, resulting in an out-of-bounds write. The possibility of overwriting sensitive information to bypass secure boot protections is not discarded.

EPSS

Процентиль: 12%
0.00041
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 6.7
ubuntu
6 месяцев назад

A flaw was found in grub2. A specially crafted JPEG file can cause the JPEG parser of grub2 to incorrectly check the bounds of its internal buffers, resulting in an out-of-bounds write. The possibility of overwriting sensitive information to bypass secure boot protections is not discarded.

CVSS3: 6.7
redhat
6 месяцев назад

A flaw was found in grub2. A specially crafted JPEG file can cause the JPEG parser of grub2 to incorrectly check the bounds of its internal buffers, resulting in an out-of-bounds write. The possibility of overwriting sensitive information to bypass secure boot protections is not discarded.

CVSS3: 6.7
nvd
6 месяцев назад

A flaw was found in grub2. A specially crafted JPEG file can cause the JPEG parser of grub2 to incorrectly check the bounds of its internal buffers, resulting in an out-of-bounds write. The possibility of overwriting sensitive information to bypass secure boot protections is not discarded.

CVSS3: 6.7
debian
6 месяцев назад

A flaw was found in grub2. A specially crafted JPEG file can cause the ...

CVSS3: 6.7
fstec
6 месяцев назад

Уязвимость файла JPEG загрузчика операционных систем Grub2, позволяющая нарушителю обойти механизм безопасной загрузки

EPSS

Процентиль: 12%
0.00041
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-787