Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2024-45781

Опубликовано: 04 сент. 2025
Источник: msrc
CVSS3: 6.7
EPSS Низкий

Описание

Grub2: fs/ufs: oob write in the heap

EPSS

Процентиль: 18%
0.00057
Низкий

6.7 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.7
ubuntu
9 месяцев назад

A flaw was found in grub2. When reading a symbolic link's name from a UFS filesystem, grub2 fails to validate the string length taken as an input. The lack of validation may lead to a heap out-of-bounds write, causing data integrity issues and eventually allowing an attacker to circumvent secure boot protections.

CVSS3: 6.7
redhat
9 месяцев назад

A flaw was found in grub2. When reading a symbolic link's name from a UFS filesystem, grub2 fails to validate the string length taken as an input. The lack of validation may lead to a heap out-of-bounds write, causing data integrity issues and eventually allowing an attacker to circumvent secure boot protections.

CVSS3: 6.7
nvd
9 месяцев назад

A flaw was found in grub2. When reading a symbolic link's name from a UFS filesystem, grub2 fails to validate the string length taken as an input. The lack of validation may lead to a heap out-of-bounds write, causing data integrity issues and eventually allowing an attacker to circumvent secure boot protections.

CVSS3: 6.7
debian
9 месяцев назад

A flaw was found in grub2. When reading a symbolic link's name from a ...

CVSS3: 6.7
github
9 месяцев назад

A flaw was found in grub2. When reading a symbolic link's name from a UFS filesystem, grub2 fails to validate the string length taken as an input. The lack of validation may lead to a heap out-of-bounds write, causing data integrity issues and eventually allowing an attacker to circumvent secure boot protections.

EPSS

Процентиль: 18%
0.00057
Низкий

6.7 Medium

CVSS3