Back to search
CVE-2021-20225
Published: Mar 3, 2021
Modified: Aug 3, 2024
PUBLISHED
Description
A flaw was found in grub2 in versions prior to 2.06. The option parser allows an attacker to write past the end of a heap-allocated buffer by calling certain commands with a large number of specific short forms of options. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
| Vendor | Product | Versions |
|---|---|---|
n/a | grub2 | affected grub 2.06 |
Weaknesses (CWE)
References
https://bugzilla.redhat.com/show_bug.cgi?id=1924696
x_refsource_MISC
FEDORA-2021-cab258a413
vendor-advisory
x_refsource_FEDORA
GLSA-202104-05
vendor-advisory
x_refsource_GENTOO
https://security.netapp.com/advisory/ntap-20220325-0001/
x_refsource_CONFIRM
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now