Логотип exploitDog
bind:"GHSA-8h84-vmjf-pcmj" OR bind:"CVE-2022-3775"
Консоль
Логотип exploitDog

exploitDog

bind:"GHSA-8h84-vmjf-pcmj" OR bind:"CVE-2022-3775"

Количество 21

Количество 21

github логотип

GHSA-8h84-vmjf-pcmj

больше 2 лет назад

When rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed glyph's width and height is constrained within bitmap size. As consequence an attacker can craft an input which will lead to a out-of-bounds write into grub2's heap, leading to memory corruption and availability issues. Although complex, arbitrary code execution could not be discarded.

CVSS3: 7.1
EPSS: Низкий
ubuntu логотип

CVE-2022-3775

больше 2 лет назад

When rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed glyph's width and height is constrained within bitmap size. As consequence an attacker can craft an input which will lead to a out-of-bounds write into grub2's heap, leading to memory corruption and availability issues. Although complex, arbitrary code execution could not be discarded.

CVSS3: 7.1
EPSS: Низкий
redhat логотип

CVE-2022-3775

больше 2 лет назад

When rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed glyph's width and height is constrained within bitmap size. As consequence an attacker can craft an input which will lead to a out-of-bounds write into grub2's heap, leading to memory corruption and availability issues. Although complex, arbitrary code execution could not be discarded.

CVSS3: 7.1
EPSS: Низкий
nvd логотип

CVE-2022-3775

больше 2 лет назад

When rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed glyph's width and height is constrained within bitmap size. As consequence an attacker can craft an input which will lead to a out-of-bounds write into grub2's heap, leading to memory corruption and availability issues. Although complex, arbitrary code execution could not be discarded.

CVSS3: 7.1
EPSS: Низкий
msrc логотип

CVE-2022-3775

10 месяцев назад

Redhat: CVE-2022-3775 grub2 - Heap based out-of-bounds write when rendering certain Unicode sequences

CVSS3: 7.1
EPSS: Низкий
debian логотип

CVE-2022-3775

больше 2 лет назад

When rendering certain unicode sequences, grub2's font code doesn't pr ...

CVSS3: 7.1
EPSS: Низкий
fstec логотип

BDU:2022-06820

больше 2 лет назад

Уязвимость загрузчика операционных систем Grub2, связанная с выходом операции за границы буфера, позволяющая нарушителю выполнить произвольный код

CVSS3: 6.3
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:4302-1

больше 2 лет назад

Security update for grub2

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:4219-1

больше 2 лет назад

Security update for grub2

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:4218-1

больше 2 лет назад

Security update for grub2

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:4144-1

больше 2 лет назад

Security update for grub2

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:4143-1

больше 2 лет назад

Security update for grub2

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:4142-1

больше 2 лет назад

Security update for grub2

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:4141-1

больше 2 лет назад

Security update for grub2

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:4140-1

больше 2 лет назад

Security update for grub2

EPSS: Низкий
rocky логотип

RLSA-2023:0752

больше 2 лет назад

Moderate: grub2 security update

EPSS: Низкий
rocky логотип

RLSA-2023:0049

больше 2 лет назад

Moderate: grub2 security update

EPSS: Низкий
oracle-oval логотип

ELSA-2023-12019

больше 2 лет назад

ELSA-2023-12019: grub2 security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2023-0752

около 2 лет назад

ELSA-2023-0752: grub2 security update (MODERATE)

EPSS: Низкий
oracle-oval логотип

ELSA-2023-0049

больше 2 лет назад

ELSA-2023-0049: grub2 security update (MODERATE)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
github логотип
GHSA-8h84-vmjf-pcmj

When rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed glyph's width and height is constrained within bitmap size. As consequence an attacker can craft an input which will lead to a out-of-bounds write into grub2's heap, leading to memory corruption and availability issues. Although complex, arbitrary code execution could not be discarded.

CVSS3: 7.1
0%
Низкий
больше 2 лет назад
ubuntu логотип
CVE-2022-3775

When rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed glyph's width and height is constrained within bitmap size. As consequence an attacker can craft an input which will lead to a out-of-bounds write into grub2's heap, leading to memory corruption and availability issues. Although complex, arbitrary code execution could not be discarded.

CVSS3: 7.1
0%
Низкий
больше 2 лет назад
redhat логотип
CVE-2022-3775

When rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed glyph's width and height is constrained within bitmap size. As consequence an attacker can craft an input which will lead to a out-of-bounds write into grub2's heap, leading to memory corruption and availability issues. Although complex, arbitrary code execution could not be discarded.

CVSS3: 7.1
0%
Низкий
больше 2 лет назад
nvd логотип
CVE-2022-3775

When rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed glyph's width and height is constrained within bitmap size. As consequence an attacker can craft an input which will lead to a out-of-bounds write into grub2's heap, leading to memory corruption and availability issues. Although complex, arbitrary code execution could not be discarded.

CVSS3: 7.1
0%
Низкий
больше 2 лет назад
msrc логотип
CVE-2022-3775

Redhat: CVE-2022-3775 grub2 - Heap based out-of-bounds write when rendering certain Unicode sequences

CVSS3: 7.1
0%
Низкий
10 месяцев назад
debian логотип
CVE-2022-3775

When rendering certain unicode sequences, grub2's font code doesn't pr ...

CVSS3: 7.1
0%
Низкий
больше 2 лет назад
fstec логотип
BDU:2022-06820

Уязвимость загрузчика операционных систем Grub2, связанная с выходом операции за границы буфера, позволяющая нарушителю выполнить произвольный код

CVSS3: 6.3
0%
Низкий
больше 2 лет назад
suse-cvrf логотип
SUSE-SU-2022:4302-1

Security update for grub2

больше 2 лет назад
suse-cvrf логотип
SUSE-SU-2022:4219-1

Security update for grub2

больше 2 лет назад
suse-cvrf логотип
SUSE-SU-2022:4218-1

Security update for grub2

больше 2 лет назад
suse-cvrf логотип
SUSE-SU-2022:4144-1

Security update for grub2

больше 2 лет назад
suse-cvrf логотип
SUSE-SU-2022:4143-1

Security update for grub2

больше 2 лет назад
suse-cvrf логотип
SUSE-SU-2022:4142-1

Security update for grub2

больше 2 лет назад
suse-cvrf логотип
SUSE-SU-2022:4141-1

Security update for grub2

больше 2 лет назад
suse-cvrf логотип
SUSE-SU-2022:4140-1

Security update for grub2

больше 2 лет назад
rocky логотип
RLSA-2023:0752

Moderate: grub2 security update

больше 2 лет назад
rocky логотип
RLSA-2023:0049

Moderate: grub2 security update

больше 2 лет назад
oracle-oval логотип
ELSA-2023-12019

ELSA-2023-12019: grub2 security update (IMPORTANT)

больше 2 лет назад
oracle-oval логотип
ELSA-2023-0752

ELSA-2023-0752: grub2 security update (MODERATE)

около 2 лет назад
oracle-oval логотип
ELSA-2023-0049

ELSA-2023-0049: grub2 security update (MODERATE)

больше 2 лет назад

Уязвимостей на страницу