Red Hat Security AdvisoryRHSA-2015:2623
grub2 security and bug fix update
Released 2015-12-15 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) grub2-1:2.02-0.33.el7_2, grub2-efi-1:2.02-0.33.el7_2, grub2-tools-1:2.02-0.33.el7_2
- Red Hat Enterprise Linux Client Optional (v. 7) grub2-efi-modules-1:2.02-0.33.el7_2
- Red Hat Enterprise Linux ComputeNode (v. 7) grub2-1:2.02-0.33.el7_2, grub2-efi-1:2.02-0.33.el7_2, grub2-tools-1:2.02-0.33.el7_2
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) grub2-efi-modules-1:2.02-0.33.el7_2
- Red Hat Enterprise Linux Server (v. 7) grub2-1:2.02-0.33.el7_2, grub2-efi-1:2.02-0.33.el7_2, grub2-tools-1:2.02-0.33.el7_2
- Red Hat Enterprise Linux Server Optional (v. 7) grub2-efi-modules-1:2.02-0.33.el7_2
- Red Hat Enterprise Linux Workstation (v. 7) grub2-1:2.02-0.33.el7_2, grub2-efi-1:2.02-0.33.el7_2, grub2-tools-1:2.02-0.33.el7_2
- Red Hat Enterprise Linux Workstation Optional (v. 7) grub2-efi-modules-1:2.02-0.33.el7_2
Fixes 1 record
Priority HIGH 68
Multiple integer underflows in Grub2 1.98 through 2.02 allow physically proximate attackers to bypass authentication, obtain sensitive information, or cause a denial of service (disk corruption) via backspace characters…
CVSS 3.1HIGH 7.4· Local · No auth · No interaction · EPSS 0.01095 · Published 2015-12-16 · Fixed CWE-191
