Search CVE reports
41 – 50 of 71 results
Some fixes available 7 of 9
When rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed glyph's width and height is constrained within bitmap size. As consequence an attacker can craft an input which will lead to a...
3 affected packages
grub2-unsigned, grub2-signed, grub2
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| grub2-unsigned | Not affected | Not affected | Fixed | Fixed | Fixed |
| grub2-signed | Not affected | Not affected | Fixed | Fixed | Fixed |
| grub2 | Not affected | Not affected | Not affected | Not affected | Not affected |
Some fixes available 6 of 12
A buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead to an overflow when calculating the max_glyph_size value, allocating a smaller than needed buffer for the glyph, this further leads...
3 affected packages
grub2-unsigned, grub2-signed, grub2
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| grub2-unsigned | Not affected | Not affected | Fixed | Fixed | Fixed |
| grub2-signed | Not affected | Not affected | Fixed | Fixed | Fixed |
| grub2 | Not affected | Not affected | Not affected | Not affected | Not affected |
Some fixes available 6 of 12
A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap. To a successful to be performed the attacker needs to perform some triage over the heap layout and...
3 affected packages
grub2, grub2-unsigned, grub2-signed
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| grub2 | Not affected | Not affected | Not affected | Not affected | Not affected |
| grub2-unsigned | Not affected | Not affected | Fixed | Fixed | Fixed |
| grub2-signed | Not affected | Not affected | Fixed | Fixed | Fixed |
Some fixes available 6 of 12
A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data corruption in the heap space. Confidentiality, Integrity and Availablity impact may be considered Low as it's...
3 affected packages
grub2, grub2-unsigned, grub2-signed
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| grub2 | Not affected | Not affected | Not affected | Not affected | Not affected |
| grub2-unsigned | Not affected | Not affected | Fixed | Fixed | Fixed |
| grub2-signed | Not affected | Not affected | Fixed | Fixed | Fixed |
Some fixes available 6 of 12
A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause heap data corruption or eventually arbitrary code execution and circumvent secure boot...
3 affected packages
grub2, grub2-unsigned, grub2-signed
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| grub2 | Not affected | Not affected | Not affected | Not affected | Not affected |
| grub2-unsigned | Not affected | Not affected | Fixed | Fixed | Fixed |
| grub2-signed | Not affected | Not affected | Fixed | Fixed | Fixed |
Some fixes available 4 of 10
A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged users to read its content. This represents a low severity confidentiality issue, as...
3 affected packages
grub2, grub2-signed, grub2-unsigned
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| grub2 | Not affected | Not affected | Not affected | Not affected | Not affected |
| grub2-signed | Not affected | Not affected | Fixed | Fixed | Ignored |
| grub2-unsigned | Not affected | Not affected | Fixed | Fixed | Ignored |
Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service via a crafted script file.
45 affected packages
enigma, freeciv, freedroidrpg, fs-uae, golly...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| enigma | Not affected | Not affected | Not affected | Not affected | Not affected |
| freeciv | Not affected | Not affected | Not affected | Not affected | Not affected |
| freedroidrpg | Needs evaluation | Needs evaluation | Needs evaluation | Ignored | Ignored |
| fs-uae | Needs evaluation | Needs evaluation | Needs evaluation | Ignored | Ignored |
| golly | Needs evaluation | Needs evaluation | Needs evaluation | Ignored | Ignored |
| goxel | Needs evaluation | Needs evaluation | Needs evaluation | Ignored | Ignored |
| grub2 | Not affected | Not affected | Not affected | Not affected | Not affected |
| gtk2-engines | Not affected | Not affected | Not affected | Not affected | Not affected |
| haskell-hslua | Not affected | Not affected | Not affected | Not affected | Not affected |
| hedgewars | Not affected | Not affected | Not affected | Not affected | Not affected |
| lua5.1 | Not affected | Not affected | Not affected | Not affected | Not affected |
| lua5.2 | Not affected | Not affected | Not affected | Not affected | Not affected |
| lua5.3 | Not affected | Not affected | Not affected | Not affected | Not affected |
| lua5.4 | Not affected | Not affected | Not affected | Not in release | Not in release |
| lua50 | Not in release | Not in release | Not in release | Not affected | Not affected |
| luajit | Not affected | Not affected | Not affected | Not affected | Not affected |
| mame | Not affected | Not affected | Not affected | Not affected | Not affected |
| naev | Needs evaluation | Needs evaluation | Needs evaluation | Ignored | — |
| openscenegraph | Not affected | Not affected | Not affected | Not affected | Not affected |
| redis | Not affected | Not affected | Not affected | Not affected | Not affected |
| rust-lua52-sys | Needs evaluation | Needs evaluation | Needs evaluation | Ignored | — |
| scite | Needs evaluation | Needs evaluation | Needs evaluation | Ignored | Ignored |
| scorched3d | Needs evaluation | Needs evaluation | Needs evaluation | Ignored | Ignored |
| scummvm | Not affected | Not affected | Not affected | Not affected | Not affected |
| spring | Not affected | Not affected | Not affected | Not affected | Not affected |
| syslinux | Not affected | Not affected | Not affected | Not affected | Not affected |
| syslinux-legacy | Not in release | Not in release | Not in release | Not affected | Not affected |
| tagua | Not in release | Not affected | Not affected | Not affected | Not affected |
| tarantool | Not in release | Needs evaluation | Needs evaluation | Ignored | — |
| texlive-bin | Not affected | Not affected | Not affected | Not affected | Not affected |
| tup | Needs evaluation | Needs evaluation | Needs evaluation | Ignored | — |
| ufoai | Not affected | Not affected | Not affected | Not affected | Not affected |
| vifm | Needs evaluation | Needs evaluation | Needs evaluation | Ignored | Ignored |
| wcc | Needs evaluation | Needs evaluation | Needs evaluation | Ignored | Ignored |
| wesnoth | — | — | — | — | — |
| widelands | Needs evaluation | Needs evaluation | Needs evaluation | Ignored | Ignored |
| xmoto | Not affected | Not affected | Not affected | Not affected | Not affected |
| zfs-linux | Not affected | Not affected | Not affected | Not affected | Not affected |
| ardour | Not affected | Not affected | Not affected | Not affected | Not affected |
| blobby | Needs evaluation | Needs evaluation | Needs evaluation | Ignored | Ignored |
| ceph | Not affected | Not affected | Not affected | Not affected | Not affected |
| darktable | Needs evaluation | Needs evaluation | Needs evaluation | Ignored | Ignored |
| eja | Not in release | Not in release | Needs evaluation | Ignored | Ignored |
| emscripten | Needs evaluation | Needs evaluation | Needs evaluation | — | Ignored |
| bam | Needs evaluation | Needs evaluation | Needs evaluation | Ignored | Ignored |
If certificates that signed grub are installed into db, grub can be booted directly. It will then boot any kernel without signature validation. The booted kernel will think it was booted in secureboot mode and will implement...
3 affected packages
grub2, grub2-signed, grub2-unsigned
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| grub2 | — | — | Not affected | Not affected | Not affected |
| grub2-signed | — | — | Not affected | Not affected | Not affected |
| grub2-unsigned | — | — | Not affected | Not affected | Not affected |
Some fixes available 12 of 13
A flaw was found in grub2 in versions prior to 2.06. Setparam_prefix() in the menu rendering code performs a length calculation on the assumption that expressing a quoted single quote will require 3 characters, while it actually...
3 affected packages
grub2-signed, grub2-unsigned, grub2
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| grub2-signed | Not affected | Not affected | Not affected | Fixed | Fixed |
| grub2-unsigned | Not affected | Not affected | Not affected | Fixed | Fixed |
| grub2 | Not affected | Not affected | Not affected | Not affected | Not affected |
Some fixes available 12 of 13
A flaw was found in grub2 in versions prior to 2.06. The option parser allows an attacker to write past the end of a heap-allocated buffer by calling certain commands with a large number of specific short forms of options. The...
3 affected packages
grub2-signed, grub2-unsigned, grub2
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| grub2-signed | Not affected | Not affected | Not affected | Fixed | Fixed |
| grub2-unsigned | Not affected | Not affected | Not affected | Fixed | Fixed |
| grub2 | Not affected | Not affected | Not affected | Not affected | Not affected |