CVE-2022-3775
High · 7.1CVSS
7.1
EPSS
1.0%
Published
Dec 19, 2022
CISA due date
—
Cloudanix analysis
Monitor only
SSVC: Track
A problem in the software that starts up many computers can cause crashes or let attackers interfere with the boot process if they already have local access.
- Exploitation
- Local Privilege
- Attacker needs
- Low Privilege
- Complexity
- Moderate
- Impact
- Data Tampering
- Component
- Application
- Class
- Memory Corruption
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
Improper validation of glyph width and height against bitmap size in GRUB2 font rendering for certain unicode sequences allows an out-of-bounds write into the heap, resulting in memory corruption.
Why it matters to the business
Systems using affected GRUB2 versions on Red Hat Enterprise Linux or other distributions risk boot-time crashes or instability; the flaw's age and modest EPSS increase warrant monitoring for emerging exploitation despite no known ransomware use.
How an attack unfolds
An attacker with local access supplies a crafted unicode sequence or font that bypasses dimension checks during rendering, triggering heap corruption; while complex, this could enable availability denial or, in advanced scenarios, code execution before the OS loads.
How to fix it
Upgrade GRUB2 packages on all affected Red Hat Enterprise Linux and GNU GRUB2 installations to the latest vendor-provided versions that include font rendering bounds checks; rebuild initramfs and verify boot integrity after updates.
How to confirm the fix worked
Confirm GRUB2 package versions exceed the vulnerable range via package manager queries, review upstream changelogs for font glyph validation fixes, and test boot with sample unicode sequences in a lab environment.
Typical attack path
- Obtain local or physical access to the target system
- Modify boot configuration or supply a malicious font containing oversized glyphs
- Trigger GRUB2 font rendering of the crafted unicode sequence
- Exploit resulting heap corruption for denial of service or potential code execution
How to detect it
Review boot logs and GRUB2 debug output for font rendering errors or heap-related crashes; correlate with system availability incidents around unicode font handling.
What your security team should do
- Immediately inventory all systems using GNU GRUB2 or Red Hat Enterprise Linux and schedule updates
- Prioritize patching high-value boot environments given the 1398-day exposure window
- Monitor EPSS trend and threat intelligence feeds for any rise in exploitation activity
- Implement boot integrity monitoring to detect unauthorized configuration changes
The record
When rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed glyph's width and height is constrained within bitmap size. As consequence an attacker can craft an input which will lead to a out-of-bounds write into grub2's heap, leading to memory corruption and availability issues. Although complex, arbitrary code execution could not be discarded.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| AlmaLinux:8 | grub2-common | 0 | 1:2.02-142.el8_7.1.alma |
| AlmaLinux:8 | grub2-efi-aa64 | 0 | 1:2.02-142.el8_7.1.alma |
| AlmaLinux:8 | grub2-efi-aa64-cdboot | 0 | 1:2.02-142.el8_7.1.alma |
| AlmaLinux:8 | grub2-efi-aa64-modules | 0 | 1:2.02-142.el8_7.1.alma |
| AlmaLinux:8 | grub2-efi-ia32 | 0 | 1:2.02-142.el8_7.1.alma |
| AlmaLinux:8 | grub2-efi-ia32-cdboot | 0 | 1:2.02-142.el8_7.1.alma |
| AlmaLinux:8 | grub2-efi-ia32-modules | 0 | 1:2.02-142.el8_7.1.alma |
| AlmaLinux:8 | grub2-efi-x64 | 0 | 1:2.02-142.el8_7.1.alma |
| AlmaLinux:8 | grub2-efi-x64-cdboot | 0 | 1:2.02-142.el8_7.1.alma |
| AlmaLinux:8 | grub2-efi-x64-modules | 0 | 1:2.02-142.el8_7.1.alma |
| AlmaLinux:8 | grub2-pc | 0 | 1:2.02-142.el8_7.1.alma |
| AlmaLinux:8 | grub2-pc-modules | 0 | 1:2.02-142.el8_7.1.alma |
| AlmaLinux:8 | grub2-ppc64le | 0 | 1:2.02-142.el8_7.1.alma |
| AlmaLinux:8 | grub2-ppc64le-modules | 0 | 1:2.02-142.el8_7.1.alma |
| AlmaLinux:8 | grub2-tools | 0 | 1:2.02-142.el8_7.1.alma |
| AlmaLinux:8 | grub2-tools-efi | 0 | 1:2.02-142.el8_7.1.alma |
| AlmaLinux:8 | grub2-tools-extra | 0 | 1:2.02-142.el8_7.1.alma |
| AlmaLinux:8 | grub2-tools-minimal | 0 | 1:2.02-142.el8_7.1.alma |
| AlmaLinux:9 | grub2-common | 0 | 1:2.06-46.el9_1.3.alma |
| AlmaLinux:9 | grub2-efi-aa64 | 0 | 1:2.06-46.el9_1.3.alma |
| AlmaLinux:9 | grub2-efi-aa64-cdboot | 0 | 1:2.06-46.el9_1.3.alma |
| AlmaLinux:9 | grub2-efi-aa64-modules | 0 | 1:2.06-46.el9_1.3.alma |
| AlmaLinux:9 | grub2-efi-x64 | 0 | 1:2.06-46.el9_1.3.alma |
| AlmaLinux:9 | grub2-efi-x64-cdboot | 0 | 1:2.06-46.el9_1.3.alma |
| AlmaLinux:9 | grub2-efi-x64-modules | 0 | 1:2.06-46.el9_1.3.alma |
| AlmaLinux:9 | grub2-pc | 0 | 1:2.06-46.el9_1.3.alma |
| AlmaLinux:9 | grub2-pc-modules | 0 | 1:2.06-46.el9_1.3.alma |
| AlmaLinux:9 | grub2-ppc64le | 0 | 1:2.06-46.el9_1.3.alma |
| AlmaLinux:9 | grub2-ppc64le-modules | 0 | 1:2.06-46.el9_1.3.alma |
| AlmaLinux:9 | grub2-tools | 0 | 1:2.06-46.el9_1.3.alma |
| AlmaLinux:9 | grub2-tools-efi | 0 | 1:2.06-46.el9_1.3.alma |
| AlmaLinux:9 | grub2-tools-extra | 0 | 1:2.06-46.el9_1.3.alma |
| AlmaLinux:9 | grub2-tools-minimal | 0 | 1:2.06-46.el9_1.3.alma |
| Debian:10 | grub2 | 0 | 2.06-3~deb10u2 |
| Debian:10 | grub2 | 0 | 2.06-3~deb10u3 |
| Debian:11 | grub2 | 0 | 2.06-3~deb11u4 |
| Debian:12 | grub2 | 0 | 2.06-5 |
| Debian:13 | grub2 | 0 | 2.06-5 |
| Red Hat:enterprise_linux:8::baseos | grub2 | 0 | 1:2.02-142.el8_7.1 |
| Red Hat:enterprise_linux:8::baseos | grub2-common | 0 | 1:2.02-142.el8_7.1 |
| Red Hat:enterprise_linux:8::baseos | grub2-debuginfo | 0 | 1:2.02-142.el8_7.1 |
| Red Hat:enterprise_linux:8::baseos | grub2-debugsource | 0 | 1:2.02-142.el8_7.1 |
| Red Hat:enterprise_linux:8::baseos | grub2-efi-aa64 | 0 | 1:2.02-142.el8_7.1 |
| Red Hat:enterprise_linux:8::baseos | grub2-efi-aa64-cdboot | 0 | 1:2.02-142.el8_7.1 |
| Red Hat:enterprise_linux:8::baseos | grub2-efi-aa64-modules | 0 | 1:2.02-142.el8_7.1 |
| Red Hat:enterprise_linux:8::baseos | grub2-efi-ia32 | 0 | 1:2.02-142.el8_7.1 |
| Red Hat:enterprise_linux:8::baseos | grub2-efi-ia32-cdboot | 0 | 1:2.02-142.el8_7.1 |
| Red Hat:enterprise_linux:8::baseos | grub2-efi-ia32-modules | 0 | 1:2.02-142.el8_7.1 |
| Red Hat:enterprise_linux:8::baseos | grub2-efi-x64 | 0 | 1:2.02-142.el8_7.1 |
| Red Hat:enterprise_linux:8::baseos | grub2-efi-x64-cdboot | 0 | 1:2.02-142.el8_7.1 |
| Red Hat:enterprise_linux:8::baseos | grub2-efi-x64-modules | 0 | 1:2.02-142.el8_7.1 |
| Red Hat:enterprise_linux:8::baseos | grub2-pc | 0 | 1:2.02-142.el8_7.1 |
| Red Hat:enterprise_linux:8::baseos | grub2-pc-modules | 0 | 1:2.02-142.el8_7.1 |
| Red Hat:enterprise_linux:8::baseos | grub2-ppc64le | 0 | 1:2.02-142.el8_7.1 |
| Red Hat:enterprise_linux:8::baseos | grub2-ppc64le-modules | 0 | 1:2.02-142.el8_7.1 |
| Red Hat:enterprise_linux:8::baseos | grub2-tools | 0 | 1:2.02-142.el8_7.1 |
| Red Hat:enterprise_linux:8::baseos | grub2-tools-debuginfo | 0 | 1:2.02-142.el8_7.1 |
| Red Hat:enterprise_linux:8::baseos | grub2-tools-efi | 0 | 1:2.02-142.el8_7.1 |
| Red Hat:enterprise_linux:8::baseos | grub2-tools-efi-debuginfo | 0 | 1:2.02-142.el8_7.1 |
| Red Hat:enterprise_linux:8::baseos | grub2-tools-extra | 0 | 1:2.02-142.el8_7.1 |
| Red Hat:enterprise_linux:8::baseos | grub2-tools-extra-debuginfo | 0 | 1:2.02-142.el8_7.1 |
| Red Hat:enterprise_linux:8::baseos | grub2-tools-minimal | 0 | 1:2.02-142.el8_7.1 |
| Red Hat:enterprise_linux:8::baseos | grub2-tools-minimal-debuginfo | 0 | 1:2.02-142.el8_7.1 |
| Red Hat:enterprise_linux:9::baseos | grub2 | 0 | 1:2.06-46.el9_1.3 |
| Red Hat:enterprise_linux:9::baseos | grub2-common | 0 | 1:2.06-46.el9_1.3 |
| Red Hat:enterprise_linux:9::baseos | grub2-debuginfo | 0 | 1:2.06-46.el9_1.3 |
| Red Hat:enterprise_linux:9::baseos | grub2-debugsource | 0 | 1:2.06-46.el9_1.3 |
| Red Hat:enterprise_linux:9::baseos | grub2-efi-aa64 | 0 | 1:2.06-46.el9_1.3 |
| Red Hat:enterprise_linux:9::baseos | grub2-efi-aa64-cdboot | 0 | 1:2.06-46.el9_1.3 |
| Red Hat:enterprise_linux:9::baseos | grub2-efi-aa64-modules | 0 | 1:2.06-46.el9_1.3 |
| Red Hat:enterprise_linux:9::baseos | grub2-efi-x64 | 0 | 1:2.06-46.el9_1.3 |
| Red Hat:enterprise_linux:9::baseos | grub2-efi-x64-cdboot | 0 | 1:2.06-46.el9_1.3 |
| Red Hat:enterprise_linux:9::baseos | grub2-efi-x64-modules | 0 | 1:2.06-46.el9_1.3 |
| Red Hat:enterprise_linux:9::baseos | grub2-emu-debuginfo | 0 | 1:2.06-46.el9_1.3 |
| Red Hat:enterprise_linux:9::baseos | grub2-pc | 0 | 1:2.06-46.el9_1.3 |
| Red Hat:enterprise_linux:9::baseos | grub2-pc-modules | 0 | 1:2.06-46.el9_1.3 |
| Red Hat:enterprise_linux:9::baseos | grub2-ppc64le | 0 | 1:2.06-46.el9_1.3 |
| Red Hat:enterprise_linux:9::baseos | grub2-ppc64le-modules | 0 | 1:2.06-46.el9_1.3 |
| Red Hat:enterprise_linux:9::baseos | grub2-tools | 0 | 1:2.06-46.el9_1.3 |
| Red Hat:enterprise_linux:9::baseos | grub2-tools-debuginfo | 0 | 1:2.06-46.el9_1.3 |
| Red Hat:enterprise_linux:9::baseos | grub2-tools-efi | 0 | 1:2.06-46.el9_1.3 |
| Red Hat:enterprise_linux:9::baseos | grub2-tools-efi-debuginfo | 0 | 1:2.06-46.el9_1.3 |
| Red Hat:enterprise_linux:9::baseos | grub2-tools-extra | 0 | 1:2.06-46.el9_1.3 |
| Red Hat:enterprise_linux:9::baseos | grub2-tools-extra-debuginfo | 0 | 1:2.06-46.el9_1.3 |
| Red Hat:enterprise_linux:9::baseos | grub2-tools-minimal | 0 | 1:2.06-46.el9_1.3 |
| Red Hat:enterprise_linux:9::baseos | grub2-tools-minimal-debuginfo | 0 | 1:2.06-46.el9_1.3 |
| Red Hat:rhel_aus:8.2::baseos | grub2 | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_aus:8.2::baseos | grub2-common | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_aus:8.2::baseos | grub2-debuginfo | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_aus:8.2::baseos | grub2-debugsource | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_aus:8.2::baseos | grub2-efi-aa64-modules | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_aus:8.2::baseos | grub2-efi-ia32 | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_aus:8.2::baseos | grub2-efi-ia32-cdboot | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_aus:8.2::baseos | grub2-efi-ia32-modules | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_aus:8.2::baseos | grub2-efi-x64 | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_aus:8.2::baseos | grub2-efi-x64-cdboot | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_aus:8.2::baseos | grub2-efi-x64-modules | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_aus:8.2::baseos | grub2-pc | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_aus:8.2::baseos | grub2-pc-modules | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_aus:8.2::baseos | grub2-ppc64le-modules | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_aus:8.2::baseos | grub2-tools | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_aus:8.2::baseos | grub2-tools-debuginfo | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_aus:8.2::baseos | grub2-tools-efi | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_aus:8.2::baseos | grub2-tools-efi-debuginfo | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_aus:8.2::baseos | grub2-tools-extra | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_aus:8.2::baseos | grub2-tools-extra-debuginfo | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_aus:8.2::baseos | grub2-tools-minimal | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_aus:8.2::baseos | grub2-tools-minimal-debuginfo | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_e4s:8.1::baseos | grub2 | 0 | 1:2.02-87.el8_1.11 |
| Red Hat:rhel_e4s:8.1::baseos | grub2-common | 0 | 1:2.02-87.el8_1.11 |
| Red Hat:rhel_e4s:8.1::baseos | grub2-debuginfo | 0 | 1:2.02-87.el8_1.11 |
| Red Hat:rhel_e4s:8.1::baseos | grub2-debugsource | 0 | 1:2.02-87.el8_1.11 |
| Red Hat:rhel_e4s:8.1::baseos | grub2-efi-aa64-modules | 0 | 1:2.02-87.el8_1.11 |
| Red Hat:rhel_e4s:8.1::baseos | grub2-efi-ia32 | 0 | 1:2.02-87.el8_1.11 |
| Red Hat:rhel_e4s:8.1::baseos | grub2-efi-ia32-cdboot | 0 | 1:2.02-87.el8_1.11 |
| Red Hat:rhel_e4s:8.1::baseos | grub2-efi-ia32-modules | 0 | 1:2.02-87.el8_1.11 |
| Red Hat:rhel_e4s:8.1::baseos | grub2-efi-x64 | 0 | 1:2.02-87.el8_1.11 |
| Red Hat:rhel_e4s:8.1::baseos | grub2-efi-x64-cdboot | 0 | 1:2.02-87.el8_1.11 |
| Red Hat:rhel_e4s:8.1::baseos | grub2-efi-x64-modules | 0 | 1:2.02-87.el8_1.11 |
| Red Hat:rhel_e4s:8.1::baseos | grub2-pc | 0 | 1:2.02-87.el8_1.11 |
| Red Hat:rhel_e4s:8.1::baseos | grub2-pc-modules | 0 | 1:2.02-87.el8_1.11 |
| Red Hat:rhel_e4s:8.1::baseos | grub2-ppc64le | 0 | 1:2.02-87.el8_1.11 |
| Red Hat:rhel_e4s:8.1::baseos | grub2-ppc64le-modules | 0 | 1:2.02-87.el8_1.11 |
| Red Hat:rhel_e4s:8.1::baseos | grub2-tools | 0 | 1:2.02-87.el8_1.11 |
| Red Hat:rhel_e4s:8.1::baseos | grub2-tools-debuginfo | 0 | 1:2.02-87.el8_1.11 |
| Red Hat:rhel_e4s:8.1::baseos | grub2-tools-efi | 0 | 1:2.02-87.el8_1.11 |
| Red Hat:rhel_e4s:8.1::baseos | grub2-tools-efi-debuginfo | 0 | 1:2.02-87.el8_1.11 |
| Red Hat:rhel_e4s:8.1::baseos | grub2-tools-extra | 0 | 1:2.02-87.el8_1.11 |
| Red Hat:rhel_e4s:8.1::baseos | grub2-tools-extra-debuginfo | 0 | 1:2.02-87.el8_1.11 |
| Red Hat:rhel_e4s:8.1::baseos | grub2-tools-minimal | 0 | 1:2.02-87.el8_1.11 |
| Red Hat:rhel_e4s:8.1::baseos | grub2-tools-minimal-debuginfo | 0 | 1:2.02-87.el8_1.11 |
| Red Hat:rhel_e4s:8.2::baseos | grub2 | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_e4s:8.2::baseos | grub2-common | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_e4s:8.2::baseos | grub2-debuginfo | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_e4s:8.2::baseos | grub2-debugsource | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_e4s:8.2::baseos | grub2-efi-aa64-modules | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_e4s:8.2::baseos | grub2-efi-ia32 | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_e4s:8.2::baseos | grub2-efi-ia32-cdboot | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_e4s:8.2::baseos | grub2-efi-ia32-modules | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_e4s:8.2::baseos | grub2-efi-x64 | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_e4s:8.2::baseos | grub2-efi-x64-cdboot | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_e4s:8.2::baseos | grub2-efi-x64-modules | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_e4s:8.2::baseos | grub2-pc | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_e4s:8.2::baseos | grub2-pc-modules | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_e4s:8.2::baseos | grub2-ppc64le | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_e4s:8.2::baseos | grub2-ppc64le-modules | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_e4s:8.2::baseos | grub2-tools | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_e4s:8.2::baseos | grub2-tools-debuginfo | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_e4s:8.2::baseos | grub2-tools-efi | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_e4s:8.2::baseos | grub2-tools-efi-debuginfo | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_e4s:8.2::baseos | grub2-tools-extra | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_e4s:8.2::baseos | grub2-tools-extra-debuginfo | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_e4s:8.2::baseos | grub2-tools-minimal | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_e4s:8.2::baseos | grub2-tools-minimal-debuginfo | 0 | 1:2.02-87.el8_2.11 |
| Red Hat:rhel_eus:8.4::baseos | grub2 | 0 | 1:2.02-99.el8_4.10 |
| Red Hat:rhel_eus:8.4::baseos | grub2-common | 0 | 1:2.02-99.el8_4.10 |
| Red Hat:rhel_eus:8.4::baseos | grub2-debuginfo | 0 | 1:2.02-99.el8_4.10 |
| Red Hat:rhel_eus:8.4::baseos | grub2-debugsource | 0 | 1:2.02-99.el8_4.10 |
| Red Hat:rhel_eus:8.4::baseos | grub2-efi-aa64 | 0 | 1:2.02-99.el8_4.10 |
| Red Hat:rhel_eus:8.4::baseos | grub2-efi-aa64-cdboot | 0 | 1:2.02-99.el8_4.10 |
| Red Hat:rhel_eus:8.4::baseos | grub2-efi-aa64-modules | 0 | 1:2.02-99.el8_4.10 |
| Red Hat:rhel_eus:8.4::baseos | grub2-efi-ia32 | 0 | 1:2.02-99.el8_4.10 |
| Red Hat:rhel_eus:8.4::baseos | grub2-efi-ia32-cdboot | 0 | 1:2.02-99.el8_4.10 |
| Red Hat:rhel_eus:8.4::baseos | grub2-efi-ia32-modules | 0 | 1:2.02-99.el8_4.10 |
| Red Hat:rhel_eus:8.4::baseos | grub2-efi-x64 | 0 | 1:2.02-99.el8_4.10 |
| Red Hat:rhel_eus:8.4::baseos | grub2-efi-x64-cdboot | 0 | 1:2.02-99.el8_4.10 |
| Red Hat:rhel_eus:8.4::baseos | grub2-efi-x64-modules | 0 | 1:2.02-99.el8_4.10 |
| Red Hat:rhel_eus:8.4::baseos | grub2-pc | 0 | 1:2.02-99.el8_4.10 |
| Red Hat:rhel_eus:8.4::baseos | grub2-pc-modules | 0 | 1:2.02-99.el8_4.10 |
| Red Hat:rhel_eus:8.4::baseos | grub2-ppc64le | 0 | 1:2.02-99.el8_4.10 |
| Red Hat:rhel_eus:8.4::baseos | grub2-ppc64le-modules | 0 | 1:2.02-99.el8_4.10 |
| Red Hat:rhel_eus:8.4::baseos | grub2-tools | 0 | 1:2.02-99.el8_4.10 |
| Red Hat:rhel_eus:8.4::baseos | grub2-tools-debuginfo | 0 | 1:2.02-99.el8_4.10 |
| Red Hat:rhel_eus:8.4::baseos | grub2-tools-efi | 0 | 1:2.02-99.el8_4.10 |
| Red Hat:rhel_eus:8.4::baseos | grub2-tools-efi-debuginfo | 0 | 1:2.02-99.el8_4.10 |
| Red Hat:rhel_eus:8.4::baseos | grub2-tools-extra | 0 | 1:2.02-99.el8_4.10 |
| Red Hat:rhel_eus:8.4::baseos | grub2-tools-extra-debuginfo | 0 | 1:2.02-99.el8_4.10 |
| Red Hat:rhel_eus:8.4::baseos | grub2-tools-minimal | 0 | 1:2.02-99.el8_4.10 |
| Red Hat:rhel_eus:8.4::baseos | grub2-tools-minimal-debuginfo | 0 | 1:2.02-99.el8_4.10 |
| Red Hat:rhel_eus:8.6::baseos | grub2 | 0 | 1:2.02-123.el8_6.12 |
| Red Hat:rhel_eus:8.6::baseos | grub2-common | 0 | 1:2.02-123.el8_6.12 |
| Red Hat:rhel_eus:8.6::baseos | grub2-debuginfo | 0 | 1:2.02-123.el8_6.12 |
| Red Hat:rhel_eus:8.6::baseos | grub2-debugsource | 0 | 1:2.02-123.el8_6.12 |
| Red Hat:rhel_eus:8.6::baseos | grub2-efi-aa64 | 0 | 1:2.02-123.el8_6.12 |
| Red Hat:rhel_eus:8.6::baseos | grub2-efi-aa64-cdboot | 0 | 1:2.02-123.el8_6.12 |
| Red Hat:rhel_eus:8.6::baseos | grub2-efi-aa64-modules | 0 | 1:2.02-123.el8_6.12 |
| Red Hat:rhel_eus:8.6::baseos | grub2-efi-ia32 | 0 | 1:2.02-123.el8_6.12 |
| Red Hat:rhel_eus:8.6::baseos | grub2-efi-ia32-cdboot | 0 | 1:2.02-123.el8_6.12 |
| Red Hat:rhel_eus:8.6::baseos | grub2-efi-ia32-modules | 0 | 1:2.02-123.el8_6.12 |
| Red Hat:rhel_eus:8.6::baseos | grub2-efi-x64 | 0 | 1:2.02-123.el8_6.12 |
| Red Hat:rhel_eus:8.6::baseos | grub2-efi-x64-cdboot | 0 | 1:2.02-123.el8_6.12 |
| Red Hat:rhel_eus:8.6::baseos | grub2-efi-x64-modules | 0 | 1:2.02-123.el8_6.12 |
| Red Hat:rhel_eus:8.6::baseos | grub2-pc | 0 | 1:2.02-123.el8_6.12 |
| Red Hat:rhel_eus:8.6::baseos | grub2-pc-modules | 0 | 1:2.02-123.el8_6.12 |
| Red Hat:rhel_eus:8.6::baseos | grub2-ppc64le | 0 | 1:2.02-123.el8_6.12 |
| Red Hat:rhel_eus:8.6::baseos | grub2-ppc64le-modules | 0 | 1:2.02-123.el8_6.12 |
| Red Hat:rhel_eus:8.6::baseos | grub2-tools | 0 | 1:2.02-123.el8_6.12 |
| Red Hat:rhel_eus:8.6::baseos | grub2-tools-debuginfo | 0 | 1:2.02-123.el8_6.12 |
| Red Hat:rhel_eus:8.6::baseos | grub2-tools-efi | 0 | 1:2.02-123.el8_6.12 |
| Red Hat:rhel_eus:8.6::baseos | grub2-tools-efi-debuginfo | 0 | 1:2.02-123.el8_6.12 |
Related vulnerabilities
- CVE-2023-4692 An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. Also affects grub2-common
- CVE-2023-4693 An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. Also affects grub2-common
- CVE-2022-28736 There's a use-after-free vulnerability in grub_cmd_chainloader() function; The… Also affects grub2-common
- CVE-2022-28735 The GRUB2's shim_lock verifier allows non-kernel files to be loaded on shim-powered… Also affects grub2-common
- CVE-2022-28733 Integer underflow in grub_net_recv_ip4_packets; A malicious crafted IP packet can lead to… Also affects grub2-common
- CVE-2022-28734 Out-of-bounds write when handling split HTTP headers; When handling split HTTP headers… Also affects grub2-common
- CVE-2022-2601 A buffer overflow was found in grub_font_construct_glyph(). Also affects grub2-common
- CVE-2021-3695 A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. Also affects grub2-common