CVE-2024-45778

Опубликовано: 03 мар. 2025

Источник: nvd

CVSS3: 4.1

CVSS3: 5.5

EPSS Низкий

Описание

A stack overflow flaw was found when reading a BFS file system. A crafted BFS filesystem may lead to an uncontrolled loop, causing grub2 to crash.

Ссылки

https://access.redhat.com/security/cve/CVE-2024-45778
Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=2345640
Issue Tracking

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gnu:grub2:*:*:*:*:*:*:*:*

Версия до 2.12 (включая)

Конфигурация 2

Одно из

cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 3%

0.00017

Низкий

4.1 Medium

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-190

Связанные уязвимости

CVE-2024-45778

CVSS3: 4.1

ubuntu

8 месяцев назад

A stack overflow flaw was found when reading a BFS file system. A crafted BFS filesystem may lead to an uncontrolled loop, causing grub2 to crash.

CVE-2024-45778

CVSS3: 4.1

redhat

9 месяцев назад

A stack overflow flaw was found when reading a BFS file system. A crafted BFS filesystem may lead to an uncontrolled loop, causing grub2 to crash.

CVE-2024-45778

CVSS3: 4.1

msrc

2 месяца назад

Grub2: fs/bfs: integer overflow in the bfs parser.

CVE-2024-45778

CVSS3: 4.1

debian

8 месяцев назад

A stack overflow flaw was found when reading a BFS file system. A craf ...

GHSA-vpmj-h28j-ffpp

CVSS3: 4.1

github

8 месяцев назад

A stack overflow flaw was found when reading a BFS file system. A crafted BFS filesystem may lead to an uncontrolled loop, causing grub2 to crash.

EPSS

Процентиль: 3%

0.00017

Низкий

4.1 Medium

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-190