Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2024-45779

Опубликовано: 04 сент. 2025
Источник: msrc
CVSS3: 4.1
EPSS Низкий

Описание

Grub2: fs/bfs: integer overflow leads to heap oob read in the bfs parser

EPSS

Процентиль: 26%
0.00085
Низкий

4.1 Medium

CVSS3

Связанные уязвимости

CVSS3: 6
ubuntu
8 месяцев назад

An integer overflow flaw was found in the BFS file system driver in grub2. When reading a file with an indirect extent map, grub2 fails to validate the number of extent entries to be read. A crafted or corrupted BFS filesystem may cause an integer overflow during the file reading, leading to a heap of bounds read. As a consequence, sensitive data may be leaked, or grub2 will crash.

CVSS3: 6
redhat
9 месяцев назад

An integer overflow flaw was found in the BFS file system driver in grub2. When reading a file with an indirect extent map, grub2 fails to validate the number of extent entries to be read. A crafted or corrupted BFS filesystem may cause an integer overflow during the file reading, leading to a heap of bounds read. As a consequence, sensitive data may be leaked, or grub2 will crash.

CVSS3: 6
nvd
8 месяцев назад

An integer overflow flaw was found in the BFS file system driver in grub2. When reading a file with an indirect extent map, grub2 fails to validate the number of extent entries to be read. A crafted or corrupted BFS filesystem may cause an integer overflow during the file reading, leading to a heap of bounds read. As a consequence, sensitive data may be leaked, or grub2 will crash.

CVSS3: 6
debian
8 месяцев назад

An integer overflow flaw was found in the BFS file system driver in gr ...

CVSS3: 4.1
github
8 месяцев назад

An integer overflow flaw was found in the BFS file system driver in grub2. When reading a file with an indirect extent map, grub2 fails to validate the number of extent entries to be read. A crafted or corrupted BFS filesystem may cause an integer overflow during the file reading, leading to a heap of bounds read. As a consequence, sensitive data may be leaked, or grub2 will crash.

EPSS

Процентиль: 26%
0.00085
Низкий

4.1 Medium

CVSS3