Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Advisory: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7 and 3 more products — RHSA-2025:6990 Clear all filters
TI-2025-00584 CVE-2025-0690 · GHSA-9fg2-2f57-9p5h

Grub2: read: integer overflow may lead to out-of-bounds write

Priority LOW 31

The read command is used to read the keyboard input from the user, while reads it keeps the input length in a 32-bit integer value which is further used to reallocate the line buffer to accept the next character.

CVSS 3.1MEDIUM 6.1 Physical High privileges User interaction EPSS 0.00793 Published 2025-02-24 Partial fix · 1:2.06-104.el9_6 CWE-787
TI-2024-30748 CVE-2024-45781 · GHSA-2xfx-cg6v-cwqv

Grub2: fs/ufs: oob write in the heap

Priority LOW 31

A flaw was found in grub2.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00305 Published 2025-02-18 Partial fix · 1:2.12-15.el10_0, 1:2.06-104.el9_6 CWE-787
TI-2024-30742 CVE-2024-45775 · GHSA-pf8f-3pq9-mrv7

Grub2: commands/extcmd: missing check for failed allocation

Priority LOW 23

A flaw was found in grub2 where the grub_extcmd_dispatcher() function calls grub_arg_list_alloc() to allocate memory for the grub's argument list.

CVSS 3.1MEDIUM 5.2 Local High privileges No interaction EPSS 0.00292 Published 2025-02-18 Partial fix · 1:2.06-104.el9_6 CWE-252