Количество 25
Количество 25
CVE-2022-28734
Out-of-bounds write when handling split HTTP headers; When handling split HTTP headers, GRUB2 HTTP code accidentally moves its internal data buffer point by one position. This can lead to a out-of-bound write further when parsing the HTTP request, writing a NULL byte past the buffer. It's conceivable that an attacker controlled set of packets can lead to corruption of the GRUB2's internal memory metadata.
CVE-2022-28734
Out-of-bounds write when handling split HTTP headers; When handling split HTTP headers, GRUB2 HTTP code accidentally moves its internal data buffer point by one position. This can lead to a out-of-bound write further when parsing the HTTP request, writing a NULL byte past the buffer. It's conceivable that an attacker controlled set of packets can lead to corruption of the GRUB2's internal memory metadata.
CVE-2022-28734
Out-of-bounds write when handling split HTTP headers; When handling split HTTP headers, GRUB2 HTTP code accidentally moves its internal data buffer point by one position. This can lead to a out-of-bound write further when parsing the HTTP request, writing a NULL byte past the buffer. It's conceivable that an attacker controlled set of packets can lead to corruption of the GRUB2's internal memory metadata.
CVE-2022-28734
CVE-2022-28734
Out-of-bounds write when handling split HTTP headers; When handling sp ...
GHSA-h8v2-pvw7-3jf5
Out-of-bounds write when handling split HTTP headers; When handling split HTTP headers, GRUB2 HTTP code accidentally moves its internal data buffer point by one position. This can lead to a out-of-bound write further when parsing the HTTP request, writing a NULL byte past the buffer. It's conceivable that an attacker controlled set of packets can lead to corruption of the GRUB2's internal memory metadata.
BDU:2024-01201
Уязвимость загрузчика операционных систем Grub2, связанная с записью за пределами границ при обработке разделенных заголовков HTTP, позволяющая нарушителю вызвать отказ в обслуживании
SUSE-SU-2022:2041-1
Security update for grub2
SUSE-SU-2022:2039-1
Security update for grub2
SUSE-SU-2022:2038-1
Security update for grub2
SUSE-SU-2022:2037-1
Security update for grub2
SUSE-SU-2022:2036-1
Security update for grub2
SUSE-SU-2022:2074-1
Security update for grub2
SUSE-SU-2022:2064-1
Security update for grub2
SUSE-SU-2022:2035-1
Security update for grub2
ELSA-2023-12952
ELSA-2023-12952: grub2 security update (IMPORTANT)
ELSA-2022-9471
ELSA-2022-9471: grub2 security update (IMPORTANT)
ELSA-2022-9469
ELSA-2022-9469: grub2 security update (IMPORTANT)
RLSA-2022:5099
Important: grub2, mokutil, shim, and shim-unsigned-x64 security update
RLSA-2022:5095
Important: grub2, mokutil, shim, and shim-unsigned-x64 security update
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2022-28734 Out-of-bounds write when handling split HTTP headers; When handling split HTTP headers, GRUB2 HTTP code accidentally moves its internal data buffer point by one position. This can lead to a out-of-bound write further when parsing the HTTP request, writing a NULL byte past the buffer. It's conceivable that an attacker controlled set of packets can lead to corruption of the GRUB2's internal memory metadata. | CVSS3: 8.1 | 0% Низкий | почти 2 года назад |
 | CVE-2022-28734 Out-of-bounds write when handling split HTTP headers; When handling split HTTP headers, GRUB2 HTTP code accidentally moves its internal data buffer point by one position. This can lead to a out-of-bound write further when parsing the HTTP request, writing a NULL byte past the buffer. It's conceivable that an attacker controlled set of packets can lead to corruption of the GRUB2's internal memory metadata. | CVSS3: 7 | 0% Низкий | около 3 лет назад |
 | CVE-2022-28734 Out-of-bounds write when handling split HTTP headers; When handling split HTTP headers, GRUB2 HTTP code accidentally moves its internal data buffer point by one position. This can lead to a out-of-bound write further when parsing the HTTP request, writing a NULL byte past the buffer. It's conceivable that an attacker controlled set of packets can lead to corruption of the GRUB2's internal memory metadata. | CVSS3: 8.1 | 0% Низкий | почти 2 года назад |
 | CVSS3: 7 | 0% Низкий | почти 2 года назад | |
| CVE-2022-28734 Out-of-bounds write when handling split HTTP headers; When handling sp ... | CVSS3: 8.1 | 0% Низкий | почти 2 года назад |
| GHSA-h8v2-pvw7-3jf5 Out-of-bounds write when handling split HTTP headers; When handling split HTTP headers, GRUB2 HTTP code accidentally moves its internal data buffer point by one position. This can lead to a out-of-bound write further when parsing the HTTP request, writing a NULL byte past the buffer. It's conceivable that an attacker controlled set of packets can lead to corruption of the GRUB2's internal memory metadata. | CVSS3: 8.1 | 0% Низкий | почти 2 года назад |
 | BDU:2024-01201 Уязвимость загрузчика операционных систем Grub2, связанная с записью за пределами границ при обработке разделенных заголовков HTTP, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7 | 0% Низкий | почти 2 года назад |
 | SUSE-SU-2022:2041-1 Security update for grub2 | около 3 лет назад | ||
| SUSE-SU-2022:2039-1 Security update for grub2 | около 3 лет назад | ||
| SUSE-SU-2022:2038-1 Security update for grub2 | около 3 лет назад | ||
| SUSE-SU-2022:2037-1 Security update for grub2 | около 3 лет назад | ||
| SUSE-SU-2022:2036-1 Security update for grub2 | около 3 лет назад | ||
| SUSE-SU-2022:2074-1 Security update for grub2 | около 3 лет назад | ||
| SUSE-SU-2022:2064-1 Security update for grub2 | около 3 лет назад | ||
| SUSE-SU-2022:2035-1 Security update for grub2 | около 3 лет назад | ||
| ELSA-2023-12952 ELSA-2023-12952: grub2 security update (IMPORTANT) | больше 1 года назад | ||
| ELSA-2022-9471 ELSA-2022-9471: grub2 security update (IMPORTANT) | около 3 лет назад | ||
| ELSA-2022-9469 ELSA-2022-9469: grub2 security update (IMPORTANT) | около 3 лет назад | ||
 | RLSA-2022:5099 Important: grub2, mokutil, shim, and shim-unsigned-x64 security update | около 3 лет назад | ||
| RLSA-2022:5095 Important: grub2, mokutil, shim, and shim-unsigned-x64 security update | около 3 лет назад |
Уязвимостей на страницу