Описание
Security update for grub2
This update for grub2 fixes the following issues:
- CVE-2022-2601: Fixed buffer overflow in grub_font_construct_glyph (bsc#1205178).
- CVE-2022-3775: Fixed integer underflow in blit_comb() (bsc#1205182).
Other:
- Bump upstream SBAT generation to 3
Список пакетов
Container rancher/elemental-builder-image/5.3:latest
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
Container rancher/elemental-teal-rt/5.3:latest
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
Container rancher/elemental-teal-rt/5.4:latest
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
Container rancher/elemental-teal/5.3:latest
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
Container rancher/elemental-teal/5.4:latest
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
Container suse/sle-micro-rancher/5.3:latest
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Container suse/sle-micro-rancher/5.4:latest
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-Azure-Basic
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-Azure-Standard
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-BYOS
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-BYOS-Azure
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-BYOS-EC2
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
grub2-x86_64-xen-2.06-150400.11.17.1
Image SLES15-SP4-BYOS-GCE
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-CHOST-BYOS
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
Image SLES15-SP4-CHOST-BYOS-Aliyun
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
Image SLES15-SP4-CHOST-BYOS-Azure
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-CHOST-BYOS-EC2
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
grub2-x86_64-xen-2.06-150400.11.17.1
Image SLES15-SP4-CHOST-BYOS-GCE
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-CHOST-BYOS-SAP-CCloud
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-EC2
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
grub2-x86_64-xen-2.06-150400.11.17.1
Image SLES15-SP4-EC2-ECS-HVM
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
grub2-x86_64-xen-2.06-150400.11.17.1
Image SLES15-SP4-GCE
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-HPC
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-HPC-Azure
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-HPC-BYOS
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-HPC-BYOS-Azure
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-HPC-BYOS-EC2
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
grub2-x86_64-xen-2.06-150400.11.17.1
Image SLES15-SP4-HPC-BYOS-GCE
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-HPC-EC2
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
grub2-x86_64-xen-2.06-150400.11.17.1
Image SLES15-SP4-HPC-GCE
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-Hardened-BYOS
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-Hardened-BYOS-Azure
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-Hardened-BYOS-EC2
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
grub2-x86_64-xen-2.06-150400.11.17.1
Image SLES15-SP4-Hardened-BYOS-GCE
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-Manager-Proxy-4-3-BYOS
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
grub2-x86_64-xen-2.06-150400.11.17.1
Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
grub2-x86_64-xen-2.06-150400.11.17.1
Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-Manager-Server-4-3
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-Manager-Server-4-3-Azure-llc
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-Manager-Server-4-3-Azure-ltd
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-Manager-Server-4-3-BYOS
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
grub2-x86_64-xen-2.06-150400.11.17.1
Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
grub2-x86_64-xen-2.06-150400.11.17.1
Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-Manager-Server-4-3-EC2-llc
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
grub2-x86_64-xen-2.06-150400.11.17.1
Image SLES15-SP4-Manager-Server-4-3-EC2-ltd
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
grub2-x86_64-xen-2.06-150400.11.17.1
Image SLES15-SP4-Micro-5-3
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
grub2-x86_64-xen-2.06-150400.11.17.1
Image SLES15-SP4-Micro-5-3-Azure
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-Micro-5-3-BYOS
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
grub2-x86_64-xen-2.06-150400.11.17.1
Image SLES15-SP4-Micro-5-3-BYOS-Azure
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-Micro-5-3-BYOS-EC2
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
grub2-x86_64-xen-2.06-150400.11.17.1
Image SLES15-SP4-Micro-5-3-BYOS-GCE
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-Micro-5-3-EC2
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
grub2-x86_64-xen-2.06-150400.11.17.1
Image SLES15-SP4-Micro-5-3-GCE
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-Micro-5-4
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
grub2-x86_64-xen-2.06-150400.11.17.1
Image SLES15-SP4-Micro-5-4-Azure
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-Micro-5-4-BYOS
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
grub2-x86_64-xen-2.06-150400.11.17.1
Image SLES15-SP4-Micro-5-4-BYOS-Azure
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-Micro-5-4-BYOS-EC2
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
grub2-x86_64-xen-2.06-150400.11.17.1
Image SLES15-SP4-Micro-5-4-BYOS-GCE
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-Micro-5-4-EC2
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
grub2-x86_64-xen-2.06-150400.11.17.1
Image SLES15-SP4-Micro-5-4-GCE
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-SAP
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-SAP-Azure
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-SAP-Azure-LI-BYOS
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-SAP-Azure-LI-BYOS-Production
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-SAP-Azure-VLI-BYOS
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-SAP-BYOS
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-SAP-BYOS-Azure
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-SAP-BYOS-EC2
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
grub2-x86_64-xen-2.06-150400.11.17.1
Image SLES15-SP4-SAP-BYOS-GCE
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-SAP-EC2
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
grub2-x86_64-xen-2.06-150400.11.17.1
Image SLES15-SP4-SAP-GCE
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-SAP-Hardened
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-SAP-Hardened-Azure
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-SAP-Hardened-BYOS
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
grub2-x86_64-xen-2.06-150400.11.17.1
Image SLES15-SP4-SAP-Hardened-BYOS-Azure
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-SAP-Hardened-BYOS-EC2
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
grub2-x86_64-xen-2.06-150400.11.17.1
Image SLES15-SP4-SAP-Hardened-BYOS-GCE
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-SAP-Hardened-EC2
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
grub2-x86_64-xen-2.06-150400.11.17.1
Image SLES15-SP4-SAP-Hardened-GCE
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-SAPCAL
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-SAPCAL-Azure
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-SAPCAL-EC2
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
grub2-x86_64-xen-2.06-150400.11.17.1
Image SLES15-SP4-SAPCAL-GCE
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
Image SLES15-SP4-SUSE-Rancher-Setup-BYOS
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
grub2-x86_64-xen-2.06-150400.11.17.1
Image SLES15-SP4-SUSE-Rancher-Setup-BYOS-EC2
grub2-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
grub2-x86_64-xen-2.06-150400.11.17.1
SUSE Linux Enterprise Micro 5.3
grub2-2.06-150400.11.17.1
grub2-arm64-efi-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-s390x-emu-2.06-150400.11.17.1
grub2-snapper-plugin-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
grub2-x86_64-xen-2.06-150400.11.17.1
SUSE Linux Enterprise Module for Basesystem 15 SP4
grub2-2.06-150400.11.17.1
grub2-arm64-efi-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-powerpc-ieee1275-2.06-150400.11.17.1
grub2-s390x-emu-2.06-150400.11.17.1
grub2-snapper-plugin-2.06-150400.11.17.1
grub2-systemd-sleep-plugin-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
SUSE Linux Enterprise Module for Server Applications 15 SP4
grub2-x86_64-xen-2.06-150400.11.17.1
SUSE Manager Proxy Module 4.3
grub2-arm64-efi-2.06-150400.11.17.1
openSUSE Leap 15.4
grub2-2.06-150400.11.17.1
grub2-arm64-efi-2.06-150400.11.17.1
grub2-arm64-efi-debug-2.06-150400.11.17.1
grub2-branding-upstream-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-i386-pc-debug-2.06-150400.11.17.1
grub2-powerpc-ieee1275-2.06-150400.11.17.1
grub2-powerpc-ieee1275-debug-2.06-150400.11.17.1
grub2-s390x-emu-2.06-150400.11.17.1
grub2-s390x-emu-debug-2.06-150400.11.17.1
grub2-snapper-plugin-2.06-150400.11.17.1
grub2-systemd-sleep-plugin-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
grub2-x86_64-efi-debug-2.06-150400.11.17.1
grub2-x86_64-xen-2.06-150400.11.17.1
openSUSE Leap Micro 5.3
grub2-2.06-150400.11.17.1
grub2-arm64-efi-2.06-150400.11.17.1
grub2-i386-pc-2.06-150400.11.17.1
grub2-snapper-plugin-2.06-150400.11.17.1
grub2-x86_64-efi-2.06-150400.11.17.1
grub2-x86_64-xen-2.06-150400.11.17.1
Ссылки
- Link for SUSE-SU-2022:4141-1
- E-Mail link for SUSE-SU-2022:4141-1
- SUSE Security Ratings
- SUSE Bug 1205178
- SUSE Bug 1205182
- SUSE CVE CVE-2022-2601 page
- SUSE CVE CVE-2022-3775 page
Описание
A buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead to an overflow when calculating the max_glyph_size value, allocating a smaller than needed buffer for the glyph, this further leads to a buffer overflow and a heap based out-of-bounds write. An attacker may use this vulnerability to circumvent the secure boot mechanism.
Затронутые продукты
Container rancher/elemental-builder-image/5.3:latest:grub2-2.06-150400.11.17.1
Container rancher/elemental-builder-image/5.3:latest:grub2-i386-pc-2.06-150400.11.17.1
Container rancher/elemental-teal-rt/5.3:latest:grub2-2.06-150400.11.17.1
Container rancher/elemental-teal-rt/5.3:latest:grub2-i386-pc-2.06-150400.11.17.1
Ссылки
- CVE-2022-2601
- SUSE Bug 1205178
Описание
When rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed glyph's width and height is constrained within bitmap size. As consequence an attacker can craft an input which will lead to a out-of-bounds write into grub2's heap, leading to memory corruption and availability issues. Although complex, arbitrary code execution could not be discarded.
Затронутые продукты
Container rancher/elemental-builder-image/5.3:latest:grub2-2.06-150400.11.17.1
Container rancher/elemental-builder-image/5.3:latest:grub2-i386-pc-2.06-150400.11.17.1
Container rancher/elemental-teal-rt/5.3:latest:grub2-2.06-150400.11.17.1
Container rancher/elemental-teal-rt/5.3:latest:grub2-i386-pc-2.06-150400.11.17.1
Ссылки
- CVE-2022-3775
- SUSE Bug 1205182