Non notée
CVE-2020-25632 A flaw was found in grub2 in versions prior to 2.06
Description
A flaw was found in grub2 in versions prior to 2.06. The rmmod implementation allows the unloading of a module used as a dependency without checking if any other dependent module is still loaded leading to a use-after-free scenario. This could allow arbitrary code to be executed or a bypass of Secure Boot protections. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| grub2 | Versions non publiées |
Références
- bugzilla.redhat.com bugzilla.redhat.com
- FEDORA-2021-cab258a413 lists.fedoraproject.org
- GLSA-202104-05 security.gentoo.org
- security.netapp.com security.netapp.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de grub2
Les 14 CVE de grub2 →
CVE-2022-3775
When rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed glyph's width and…
7.1
Élevée
CVE-2022-2601
A buffer overflow was found in grub_font_construct_glyph()
8.6
Élevée
CVE-2021-3697
A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written…
Non notée
CVE-2021-3696
A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader
Non notée