Логотип exploitDog
bind:"GHSA-pgf7-qmfm-349p" OR bind:"CVE-2024-45782"
Консоль
Логотип exploitDog

exploitDog

bind:"GHSA-pgf7-qmfm-349p" OR bind:"CVE-2024-45782"

Количество 12

Количество 12

github логотип

GHSA-pgf7-qmfm-349p

6 месяцев назад

A flaw was found in the HFS filesystem. When reading an HFS volume's name at grub_fs_mount(), the HFS filesystem driver performs a strcpy() using the user-provided volume name as input without properly validating the volume name's length. This issue may read to a heap-based out-of-bounds writer, impacting grub's sensitive data integrity and eventually leading to a secure boot protection bypass.

CVSS3: 6.7
EPSS: Низкий
ubuntu логотип

CVE-2024-45782

6 месяцев назад

A flaw was found in the HFS filesystem. When reading an HFS volume's name at grub_fs_mount(), the HFS filesystem driver performs a strcpy() using the user-provided volume name as input without properly validating the volume name's length. This issue may read to a heap-based out-of-bounds writer, impacting grub's sensitive data integrity and eventually leading to a secure boot protection bypass.

CVSS3: 7.8
EPSS: Низкий
redhat логотип

CVE-2024-45782

7 месяцев назад

A flaw was found in the HFS filesystem. When reading an HFS volume's name at grub_fs_mount(), the HFS filesystem driver performs a strcpy() using the user-provided volume name as input without properly validating the volume name's length. This issue may read to a heap-based out-of-bounds writer, impacting grub's sensitive data integrity and eventually leading to a secure boot protection bypass.

CVSS3: 7.8
EPSS: Низкий
nvd логотип

CVE-2024-45782

6 месяцев назад

A flaw was found in the HFS filesystem. When reading an HFS volume's name at grub_fs_mount(), the HFS filesystem driver performs a strcpy() using the user-provided volume name as input without properly validating the volume name's length. This issue may read to a heap-based out-of-bounds writer, impacting grub's sensitive data integrity and eventually leading to a secure boot protection bypass.

CVSS3: 7.8
EPSS: Низкий
debian логотип

CVE-2024-45782

6 месяцев назад

A flaw was found in the HFS filesystem. When reading an HFS volume's n ...

CVSS3: 7.8
EPSS: Низкий
fstec логотип

BDU:2025-03840

7 месяцев назад

Уязвимость файла fs/hfs.c компонента hfs загрузчика операционных систем Grub2, позволяющая нарушителю выполнить произвольный код

CVSS3: 6.7
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0629-1

7 месяцев назад

Security update for grub2

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0607-1

7 месяцев назад

Security update for grub2

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0588-1

7 месяцев назад

Security update for grub2

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0587-1

7 месяцев назад

Security update for grub2

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0586-1

7 месяцев назад

Security update for grub2

EPSS: Низкий
redos логотип

ROS-20250818-06

19 дней назад

Множественные уязвимости grub2-common

CVSS3: 8.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
github логотип
GHSA-pgf7-qmfm-349p

A flaw was found in the HFS filesystem. When reading an HFS volume's name at grub_fs_mount(), the HFS filesystem driver performs a strcpy() using the user-provided volume name as input without properly validating the volume name's length. This issue may read to a heap-based out-of-bounds writer, impacting grub's sensitive data integrity and eventually leading to a secure boot protection bypass.

CVSS3: 6.7
0%
Низкий
6 месяцев назад
ubuntu логотип
CVE-2024-45782

A flaw was found in the HFS filesystem. When reading an HFS volume's name at grub_fs_mount(), the HFS filesystem driver performs a strcpy() using the user-provided volume name as input without properly validating the volume name's length. This issue may read to a heap-based out-of-bounds writer, impacting grub's sensitive data integrity and eventually leading to a secure boot protection bypass.

CVSS3: 7.8
0%
Низкий
6 месяцев назад
redhat логотип
CVE-2024-45782

A flaw was found in the HFS filesystem. When reading an HFS volume's name at grub_fs_mount(), the HFS filesystem driver performs a strcpy() using the user-provided volume name as input without properly validating the volume name's length. This issue may read to a heap-based out-of-bounds writer, impacting grub's sensitive data integrity and eventually leading to a secure boot protection bypass.

CVSS3: 7.8
0%
Низкий
7 месяцев назад
nvd логотип
CVE-2024-45782

A flaw was found in the HFS filesystem. When reading an HFS volume's name at grub_fs_mount(), the HFS filesystem driver performs a strcpy() using the user-provided volume name as input without properly validating the volume name's length. This issue may read to a heap-based out-of-bounds writer, impacting grub's sensitive data integrity and eventually leading to a secure boot protection bypass.

CVSS3: 7.8
0%
Низкий
6 месяцев назад
debian логотип
CVE-2024-45782

A flaw was found in the HFS filesystem. When reading an HFS volume's n ...

CVSS3: 7.8
0%
Низкий
6 месяцев назад
fstec логотип
BDU:2025-03840

Уязвимость файла fs/hfs.c компонента hfs загрузчика операционных систем Grub2, позволяющая нарушителю выполнить произвольный код

CVSS3: 6.7
0%
Низкий
7 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:0629-1

Security update for grub2

7 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:0607-1

Security update for grub2

7 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:0588-1

Security update for grub2

7 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:0587-1

Security update for grub2

7 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:0586-1

Security update for grub2

7 месяцев назад
redos логотип
ROS-20250818-06

Множественные уязвимости grub2-common

CVSS3: 8.8
19 дней назад

Уязвимостей на страницу