Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-45775

Опубликовано: 18 фев. 2025
Источник: nvd
CVSS3: 5.2
EPSS Низкий

Описание

A flaw was found in grub2 where the grub_extcmd_dispatcher() function calls grub_arg_list_alloc() to allocate memory for the grub's argument list. However, it fails to check in case the memory allocation fails. Once the allocation fails, a NULL point will be processed by the parse_option() function, leading grub to crash or, in some rare scenarios, corrupt the IVT data.

EPSS

Процентиль: 8%
0.00035
Низкий

5.2 Medium

CVSS3

Дефекты

CWE-252

Связанные уязвимости

CVSS3: 5.2
ubuntu
6 месяцев назад

A flaw was found in grub2 where the grub_extcmd_dispatcher() function calls grub_arg_list_alloc() to allocate memory for the grub's argument list. However, it fails to check in case the memory allocation fails. Once the allocation fails, a NULL point will be processed by the parse_option() function, leading grub to crash or, in some rare scenarios, corrupt the IVT data.

CVSS3: 5.2
redhat
6 месяцев назад

A flaw was found in grub2 where the grub_extcmd_dispatcher() function calls grub_arg_list_alloc() to allocate memory for the grub's argument list. However, it fails to check in case the memory allocation fails. Once the allocation fails, a NULL point will be processed by the parse_option() function, leading grub to crash or, in some rare scenarios, corrupt the IVT data.

CVSS3: 5.2
debian
6 месяцев назад

A flaw was found in grub2 where the grub_extcmd_dispatcher() function ...

CVSS3: 5.2
github
6 месяцев назад

A flaw was found in grub2 where the grub_extcmd_dispatcher() function calls grub_arg_list_alloc() to allocate memory for the grub's argument list. However, it fails to check in case the memory allocation fails. Once the allocation fails, a NULL point will be processed by the parse_option() function, leading grub to crash or, in some rare scenarios, corrupt the IVT data.

CVSS3: 5.2
fstec
7 месяцев назад

Уязвимость функции grub_extcmd_dispatcher() загрузчика операционных систем Grub2, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 8%
0.00035
Низкий

5.2 Medium

CVSS3

Дефекты

CWE-252