Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pf8f-3pq9-mrv7

Опубликовано: 18 фев. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.2

Описание

A flaw was found in grub2 where the grub_extcmd_dispatcher() function calls grub_arg_list_alloc() to allocate memory for the grub's argument list. However, it fails to check in case the memory allocation fails. Once the allocation fails, a NULL point will be processed by the parse_option() function, leading grub to crash or, in some rare scenarios, corrupt the IVT data.

A flaw was found in grub2 where the grub_extcmd_dispatcher() function calls grub_arg_list_alloc() to allocate memory for the grub's argument list. However, it fails to check in case the memory allocation fails. Once the allocation fails, a NULL point will be processed by the parse_option() function, leading grub to crash or, in some rare scenarios, corrupt the IVT data.

EPSS

Процентиль: 6%
0.00028
Низкий

5.2 Medium

CVSS3

Дефекты

CWE-252

Связанные уязвимости

CVSS3: 5.2
ubuntu
6 месяцев назад

A flaw was found in grub2 where the grub_extcmd_dispatcher() function calls grub_arg_list_alloc() to allocate memory for the grub's argument list. However, it fails to check in case the memory allocation fails. Once the allocation fails, a NULL point will be processed by the parse_option() function, leading grub to crash or, in some rare scenarios, corrupt the IVT data.

CVSS3: 5.2
redhat
6 месяцев назад

A flaw was found in grub2 where the grub_extcmd_dispatcher() function calls grub_arg_list_alloc() to allocate memory for the grub's argument list. However, it fails to check in case the memory allocation fails. Once the allocation fails, a NULL point will be processed by the parse_option() function, leading grub to crash or, in some rare scenarios, corrupt the IVT data.

CVSS3: 5.2
nvd
6 месяцев назад

A flaw was found in grub2 where the grub_extcmd_dispatcher() function calls grub_arg_list_alloc() to allocate memory for the grub's argument list. However, it fails to check in case the memory allocation fails. Once the allocation fails, a NULL point will be processed by the parse_option() function, leading grub to crash or, in some rare scenarios, corrupt the IVT data.

CVSS3: 5.2
debian
6 месяцев назад

A flaw was found in grub2 where the grub_extcmd_dispatcher() function ...

CVSS3: 5.2
fstec
7 месяцев назад

Уязвимость функции grub_extcmd_dispatcher() загрузчика операционных систем Grub2, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 6%
0.00028
Низкий

5.2 Medium

CVSS3

Дефекты

CWE-252