grub2 (SUSE:Linux Enterprise Server 12 SP3-BCL) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Server 12 SP3-BCL package grub2, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (23)

• CVE-2022-2601 — CVSS 8.6 (high): A buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead to an overflow when calculating the…
• CVE-2020-10713 — CVSS 8.2 (high): A flaw was found in grub2, prior to version 2.06. An attacker may use the GRUB 2 flaw to hijack and tamper the GRUB verification process…
• CVE-2020-25632 — CVSS 8.2 (high): A flaw was found in grub2 in versions prior to 2.06. The rmmod implementation allows the unloading of a module used as a dependency without…
• CVE-2021-20233 — CVSS 8.2 (high): A flaw was found in grub2 in versions prior to 2.06. Setparam_prefix() in the menu rendering code performs a length calculation on the…
• CVE-2022-28734 — CVSS 8.1 (high): Out-of-bounds write when handling split HTTP headers; When handling split HTTP headers, GRUB2 HTTP code accidentally moves its internal…
• CVE-2022-28733 — CVSS 8.1 (high): Integer underflow in grub_net_recv_ip4_packets; A malicious crafted IP packet can lead to an integer underflow in grub_net_recv_ip4_packets(…
• CVE-2020-25647 — CVSS 7.6 (high): A flaw was found in grub2 in versions prior to 2.06. During USB device initialization, descriptors are read with very little bounds…
• CVE-2020-14372 — CVSS 7.5 (high): A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of the ACPI command when Secure Boot is…
• CVE-2020-27779 — CVSS 7.5 (high): A flaw was found in grub2 in versions prior to 2.06. The cutmem command does not honor secure boot locking allowing an privileged attacker…
• CVE-2022-3775 — CVSS 7.1 (high): When rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed glyph's width and height is constrained…
• CVE-2021-3697 — CVSS 7.0 (high): A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap. To a…
• CVE-2020-14309 — CVSS 6.7 (medium): There's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems containing a symbolic link with name length of…
• CVE-2021-20225 — CVSS 6.7 (medium): A flaw was found in grub2 in versions prior to 2.06. The option parser allows an attacker to write past the end of a heap-allocated buffer…
• CVE-2020-27749 — CVSS 6.7 (medium): A flaw was found in grub2 in versions prior to 2.06. Variable names present are expanded in the supplied command line into their…
• CVE-2020-15705 — CVSS 6.4 (medium): GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed. This only affects systems…
• CVE-2020-14308 — CVSS 6.4 (medium): In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic overflows on the requested allocation size…
• CVE-2022-28736 — CVSS 6.4 (medium): There's a use-after-free vulnerability in grub_cmd_chainloader() function; The chainloader command is used to boot up operating systems…
• CVE-2020-15706 — CVSS 6.4 (medium): GRUB2 contains a race condition in grub_script_function_create() leading to a use-after-free vulnerability which can be triggered by…
• CVE-2020-15707 — CVSS 5.7 (medium): Integer overflows were discovered in the functions grub_cmd_initrd and grub_initrd_init in the efilinux component of GRUB2, as shipped in…
• CVE-2020-14311 — CVSS 5.7 (medium): There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A filesystem containing a symbolic link with an…
• CVE-2020-14310 — CVSS 5.7 (medium): There is an issue on grub2 before version 2.06 at function read_section_as_string(). It expects a font name to be at max UINT32_MAX - 1…
• CVE-2021-3696 — CVSS 4.5 (medium): A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data corruption in the heap…
• CVE-2021-3695 — CVSS 4.5 (medium): A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause…