DeutschShown in its original language — a full translation is planned for a future version.
Grub2: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff
view advisory published 2022-06-07
Ein Angreifer kann mehrere Schwachstellen in Oracle Linux ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.
01
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-28737US | high7.8 | — | ||
There's a possible overflow in handle_image() when shim tries to load and execute crafted EFI executables; The handle_image() function takes into account the SizeOfRawData field fr… | ||||
| CVE-2022-28736US | high7.8 | — | ||
There's a use-after-free vulnerability in grub_cmd_chainloader() function; The chainloader command is used to boot up operating systems that doesn't support multiboot and do not ha… | ||||
| CVE-2022-28735US | high7.8 | — | ||
The GRUB2's shim_lock verifier allows non-kernel files to be loaded on shim-powered secure boot systems. Allowing such files to be loaded may lead to unverified code and modules to… | ||||
| CVE-2022-28734US | high7.0 | — | ||
Out-of-bounds write when handling split HTTP headers; When handling split HTTP headers, GRUB2 HTTP code accidentally moves its internal data buffer point by one position. This can… | ||||
| CVE-2022-28733US | high8.1 | — | ||
Integer underflow in grub_net_recv_ip4_packets; A malicious crafted IP packet can lead to an integer underflow in grub_net_recv_ip4_packets() function on rsm->total_len value. Unde… | ||||
| CVE-2021-3697US | high7.0 | — | ||
A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap. To a successful to be performed the attacker needs… | ||||
| CVE-2021-3696US | medium4.5 | — | ||
A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data corruption in the heap space. Confidentiality, Integrity and Av… | ||||
| CVE-2021-3695US | medium4.5 | — | ||
A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause heap data corruption or eventually arbitrar… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2022-5099 vom 2022-07-01external
- Oracle Linux Errata Repository vom 2022-06-07external
- Oracle Linux Errata Repository vom 2022-06-07external
- Oracle Linux Security Advisory ELSA-2022-9595 vom 2022-07-14external
- Oracle Linux Security Advisory ELSA-2022-9596 vom 2022-07-14external
- Red Hat Security Advisory RHSA-2022:5095 vom 2022-06-16external
- Red Hat Security Advisory RHSA-2022:5096 vom 2022-06-16external
- Red Hat Security Advisory RHSA-2022:5098 vom 2022-06-16external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan