Описание
There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A filesystem containing a symbolic link with an inode size of UINT32_MAX causes an arithmetic overflow leading to a zero-sized memory allocation with subsequent heap-based buffer overflow.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 2.02-2ubuntu8.16 |
| devel | not-affected | 2.06-2ubuntu18 |
| esm-infra-legacy/trusty | released | 2.02~beta2-9ubuntu1.20 |
| esm-infra-legacy/xenial | released | 2.02~beta2-36ubuntu3.26 |
| esm-infra/bionic | released | 2.02-2ubuntu8.16 |
| esm-infra/focal | released | 2.04-1ubuntu26.1 |
| esm-infra/xenial | released | 2.02~beta2-36ubuntu3.26 |
| focal | released | 2.04-1ubuntu26.1 |
| groovy | not-affected | 2.04-1ubuntu26.1 |
| hirsute | not-affected | 2.04-1ubuntu26.1 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 1.93.18 |
| devel | not-affected | 1.193 |
| eoan | ignored | end of life |
| esm-infra-legacy/trusty | released | 1.34.22 |
| esm-infra-legacy/xenial | released | 1.66.26 |
| esm-infra/bionic | released | 1.93.18 |
| esm-infra/focal | released | 1.142.3 |
| esm-infra/xenial | released | 1.66.26 |
| focal | released | 1.142.3 |
| groovy | not-affected | 1.147 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 2.04-1ubuntu47.4 |
| devel | not-affected | 2.06-2ubuntu17 |
| esm-infra-legacy/trusty | DNE | |
| esm-infra-legacy/xenial | needed | |
| esm-infra/bionic | released | 2.04-1ubuntu47.4 |
| esm-infra/focal | released | 2.04-1ubuntu47.4 |
| esm-infra/xenial | ignored | end of ESM support, was needed |
| focal | released | 2.04-1ubuntu47.4 |
| jammy | not-affected | 2.06-2ubuntu7 |
| kinetic | not-affected | 2.06-2ubuntu12 |
Показывать по
Ссылки на источники
3.6 Low
CVSS2
5.7 Medium
CVSS3
Связанные уязвимости
There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A filesystem containing a symbolic link with an inode size of UINT32_MAX causes an arithmetic overflow leading to a zero-sized memory allocation with subsequent heap-based buffer overflow.
There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A filesystem containing a symbolic link with an inode size of UINT32_MAX causes an arithmetic overflow leading to a zero-sized memory allocation with subsequent heap-based buffer overflow.
There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A filesystem containing a symbolic link with an inode size of UINT32_MAX causes an arithmetic overflow leading to a zero-sized memory allocation with subsequent heap-based buffer overflow.
There is an issue with grub2 before version 2.06 while handling symlin ...
There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A filesystem containing a symbolic link with an inode size of UINT32_MAX causes an arithmetic overflow leading to a zero-sized memory allocation with subsequent heap-based buffer overflow.
3.6 Low
CVSS2
5.7 Medium
CVSS3