TI-2022-02403 CVE-2022-2601 · GHSA-c8f6-x9xm-x27g
Heap-based buffer overflow in grub2
Priority MEDIUM 40
A buffer overflow was found in grub_font_construct_glyph().
RHSA-2022:8800
grub2 security update
Released 2022-12-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS AUS (v. 8.2) grub2-1:2.02-87.el8_2.11, grub2-common-1:2.02-87.el8_2.11, grub2-efi-aa64-modules-1:2.02-87.el8_2.11 +13
- Red Hat Enterprise Linux BaseOS E4S (v. 8.2) grub2-1:2.02-87.el8_2.11, grub2-common-1:2.02-87.el8_2.11, grub2-efi-aa64-modules-1:2.02-87.el8_2.11 +14
- Red Hat Enterprise Linux BaseOS TUS (v. 8.2) grub2-1:2.02-87.el8_2.11, grub2-common-1:2.02-87.el8_2.11, grub2-efi-aa64-modules-1:2.02-87.el8_2.11 +13
Fixes 2 records
TI-2022-03464 CVE-2022-3775 · GHSA-8h84-vmjf-pcmj
Out-of-bounds write in grub2
Priority LOW 35
When rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed glyph's width and height is constrained within bitmap size.