Red Hat Security AdvisoryRHSA-2022:8900
grub2 security update
Released 2022-12-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) grub2-1:2.02-0.87.el7_9.11, grub2-common-1:2.02-0.87.el7_9.11, grub2-efi-ia32-1:2.02-0.87.el7_9.11 +8
- Red Hat Enterprise Linux Client Optional (v. 7) grub2-efi-aa64-modules-1:2.02-0.87.el7_9.11, grub2-efi-ia32-cdboot-1:2.02-0.87.el7_9.11, grub2-efi-x64-cdboot-1:2.02-0.87.el7_9.11 +3
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) grub2-efi-aa64-modules-1:2.02-0.87.el7_9.11, grub2-efi-ia32-cdboot-1:2.02-0.87.el7_9.11, grub2-efi-x64-cdboot-1:2.02-0.87.el7_9.11 +3
- Red Hat Enterprise Linux Server (v. 7) grub2-1:2.02-0.87.el7_9.11, grub2-common-1:2.02-0.87.el7_9.11, grub2-efi-ia32-1:2.02-0.87.el7_9.11 +12
- Red Hat Enterprise Linux Server Optional (v. 7) grub2-efi-aa64-modules-1:2.02-0.87.el7_9.11, grub2-efi-ia32-cdboot-1:2.02-0.87.el7_9.11, grub2-efi-ia32-modules-1:2.02-0.87.el7_9.11 +6
- Red Hat Enterprise Linux Workstation (v. 7) grub2-1:2.02-0.87.el7_9.11, grub2-common-1:2.02-0.87.el7_9.11, grub2-efi-ia32-1:2.02-0.87.el7_9.11 +8
- Red Hat Enterprise Linux Workstation Optional (v. 7) grub2-efi-aa64-modules-1:2.02-0.87.el7_9.11, grub2-efi-ia32-cdboot-1:2.02-0.87.el7_9.11, grub2-efi-x64-cdboot-1:2.02-0.87.el7_9.11 +3
Fixes 1 record
Priority MEDIUM 40
Integer underflow in grub_net_recv_ip4_packets; A malicious crafted IP packet can lead to an integer underflow in grub_net_recv_ip4_packets() function on rsm->total_len value.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.01273 · Published 2023-07-20 · Fixed in 2.06-3 CWE-191
