Advisories · Technology
GNU grub2.
Every CVE that names GNU grub2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.4 Medium
Bypass of GRUB lockdown restriction in Secure Boot mode via serial command MMIO base address
- GNU grub2
- Memory corruption
- CVSS 4.9 Medium
Grub2: use-after-free in net_set_vlan
- GNU grub2
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 4.9 Medium
Grub2: missing unregister call for normal_exit command may lead to use-after-free
- GNU grub2
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 4.9 Medium
Grub2: missing unregister call for normal commands may lead to use-after-free
- GNU grub2
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 7.8 High
Grub2: missing unregister call for gettext command may lead to use-after-free
- GNU grub2
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 4.8 Medium
Grub2: grub2: out-of-bounds write via malicious usb device
- GNU grub2
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 4.9 Medium
Grub2: use-after-free in grub_file_close()
- GNU grub2
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 5.3 Medium
GNU GRUB2: GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for…
- GNU GRUB2
- CWE-208
- CVSS 8.8 High
Heap-based buffer overflow in GNU GRUB2
- GNU GRUB2
- Memory corruption