DeutschShown in its original language — a full translation is planned for a future version.
Grub2: Mehrere Schwachstellen
view advisory published 2022-11-15
Ein lokaler Angreifer kann mehrere Schwachstellen in Grub ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Dateien zu manipulieren oder einen Denial of Service zu verursachen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-3775US | high7.1 | — | ||
When rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed glyph's width and height is constrained within bitmap size. As consequence an at… | ||||
| CVE-2022-2601US | high8.6 | — | ||
A buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead to an overflow when calculating the max_glyph_size value, allocating a smaller tha… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2023-0049 vom 2023-01-25external
- Oracle Linux Security Advisory ELSA-2023-12019 vom 2023-01-12external
- RedHat Security Advisory vom 2022-11-15external
- Red Hat Security Advisory RHSA-2022:8800 vom 2022-12-06external
- Red Hat Security Advisory RHSA-2022:8978 vom 2022-12-13external
- Red Hat Security Advisory RHSA-2023:0047 vom 2023-01-09external
- Red Hat Security Advisory RHSA-2023:0048 vom 2023-01-09external
- Red Hat Security Advisory RHSA-2023:0049 vom 2023-01-09external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan