Логотип exploitDog
bind:CVE-2025-0690
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-0690

Количество 12

Количество 12

ubuntu логотип

CVE-2025-0690

6 месяцев назад

The read command is used to read the keyboard input from the user, while reads it keeps the input length in a 32-bit integer value which is further used to reallocate the line buffer to accept the next character. During this process, with a line big enough it's possible to make this variable to overflow leading to a out-of-bounds write in the heap based buffer. This flaw may be leveraged to corrupt grub's internal critical data and secure boot bypass is not discarded as consequence.

CVSS3: 6.1
EPSS: Низкий
redhat логотип

CVE-2025-0690

6 месяцев назад

The read command is used to read the keyboard input from the user, while reads it keeps the input length in a 32-bit integer value which is further used to reallocate the line buffer to accept the next character. During this process, with a line big enough it's possible to make this variable to overflow leading to a out-of-bounds write in the heap based buffer. This flaw may be leveraged to corrupt grub's internal critical data and secure boot bypass is not discarded as consequence.

CVSS3: 6.1
EPSS: Низкий
nvd логотип

CVE-2025-0690

6 месяцев назад

The read command is used to read the keyboard input from the user, while reads it keeps the input length in a 32-bit integer value which is further used to reallocate the line buffer to accept the next character. During this process, with a line big enough it's possible to make this variable to overflow leading to a out-of-bounds write in the heap based buffer. This flaw may be leveraged to corrupt grub's internal critical data and secure boot bypass is not discarded as consequence.

CVSS3: 6.1
EPSS: Низкий
debian логотип

CVE-2025-0690

6 месяцев назад

The read command is used to read the keyboard input from the user, whi ...

CVSS3: 6.1
EPSS: Низкий
github логотип

GHSA-9fg2-2f57-9p5h

6 месяцев назад

The read command is used to read the keyboard input from the user, while reads it keeps the input length in a 32-bit integer value which is further used to reallocate the line buffer to accept the next character. During this process, with a line big enough it's possible to make this variable to overflow leading to a out-of-bounds write in the heap based buffer. This flaw may be leveraged to corrupt grub's internal critical data and secure boot bypass is not discarded as consequence.

CVSS3: 6.1
EPSS: Низкий
fstec логотип

BDU:2025-07123

6 месяцев назад

Уязвимость загрузчика операционных систем Grub2, связанная с записью за пределами границ, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.8
EPSS: Низкий
oracle-oval логотип

ELSA-2025-6990

3 месяца назад

ELSA-2025-6990: grub2 security update (MODERATE)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0629-1

6 месяцев назад

Security update for grub2

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0607-1

6 месяцев назад

Security update for grub2

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0588-1

6 месяцев назад

Security update for grub2

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0587-1

6 месяцев назад

Security update for grub2

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0586-1

6 месяцев назад

Security update for grub2

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2025-0690

The read command is used to read the keyboard input from the user, while reads it keeps the input length in a 32-bit integer value which is further used to reallocate the line buffer to accept the next character. During this process, with a line big enough it's possible to make this variable to overflow leading to a out-of-bounds write in the heap based buffer. This flaw may be leveraged to corrupt grub's internal critical data and secure boot bypass is not discarded as consequence.

CVSS3: 6.1
0%
Низкий
6 месяцев назад
redhat логотип
CVE-2025-0690

The read command is used to read the keyboard input from the user, while reads it keeps the input length in a 32-bit integer value which is further used to reallocate the line buffer to accept the next character. During this process, with a line big enough it's possible to make this variable to overflow leading to a out-of-bounds write in the heap based buffer. This flaw may be leveraged to corrupt grub's internal critical data and secure boot bypass is not discarded as consequence.

CVSS3: 6.1
0%
Низкий
6 месяцев назад
nvd логотип
CVE-2025-0690

The read command is used to read the keyboard input from the user, while reads it keeps the input length in a 32-bit integer value which is further used to reallocate the line buffer to accept the next character. During this process, with a line big enough it's possible to make this variable to overflow leading to a out-of-bounds write in the heap based buffer. This flaw may be leveraged to corrupt grub's internal critical data and secure boot bypass is not discarded as consequence.

CVSS3: 6.1
0%
Низкий
6 месяцев назад
debian логотип
CVE-2025-0690

The read command is used to read the keyboard input from the user, whi ...

CVSS3: 6.1
0%
Низкий
6 месяцев назад
github логотип
GHSA-9fg2-2f57-9p5h

The read command is used to read the keyboard input from the user, while reads it keeps the input length in a 32-bit integer value which is further used to reallocate the line buffer to accept the next character. During this process, with a line big enough it's possible to make this variable to overflow leading to a out-of-bounds write in the heap based buffer. This flaw may be leveraged to corrupt grub's internal critical data and secure boot bypass is not discarded as consequence.

CVSS3: 6.1
0%
Низкий
6 месяцев назад
fstec логотип
BDU:2025-07123

Уязвимость загрузчика операционных систем Grub2, связанная с записью за пределами границ, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.8
0%
Низкий
6 месяцев назад
oracle-oval логотип
ELSA-2025-6990

ELSA-2025-6990: grub2 security update (MODERATE)

3 месяца назад
suse-cvrf логотип
SUSE-SU-2025:0629-1

Security update for grub2

6 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:0607-1

Security update for grub2

6 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:0588-1

Security update for grub2

6 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:0587-1

Security update for grub2

6 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:0586-1

Security update for grub2

6 месяцев назад

Уязвимостей на страницу