cve-2024-45779
MEDIUM CVSS 6.0 csaf_redhat
Description
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
Timeline
- Published
- 2024-01-01 00:00 UTC
- Last Modified
- 2026-06-30
CVSS Details
CVSS details not available.
Affected Products
No product information available.
Weaknesses (CWE)
References
No references available.
Linked Vulnerabilities
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_vex",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright © Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-45779.json"
}
],
"title": "grub2: fs/bfs: Integer overflow leads to Heap OOB Read in the BFS parser",
"tracking": {
"current_release_date": "2026-06-30T02:53:43+00:00",
"generator": {
"date": "2026-06-30T02:53:43+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.0"
}
},
"id": "CVE-2024-45779",
"initial_release_date": "2024-01-01T00:00:00+00:00",
"revision_history": [
{
"date": "2024-01-01T00:00:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-06-29T20:37:19+00:00",
"number": "2",
"summary": "Current version"
},
{
"date": "2026-06-30T02:53:43+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux 10",
"product": {
"name": "Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:10"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux 10"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux 7",
"product": {
"name": "Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux 7"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux 8",
"product": {
"name": "Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux 8"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux 9",
"product": {
"name": "Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux 9"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Container Platform 4",
"product": {
"name": "Red Hat OpenShift Container Platform 4",
"product_id": "red_hat_openshift_container_platform_4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:4"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Container Platform 4"
},
{
"category": "product_version",
"name": "grub2-common",
"product": {
"name": "grub2-common",
"product_id": "grub2-common",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grub2-common"
}
}
},
{
"category": "product_version",
"name": "grub2-pc-modules",
"product": {
"name": "grub2-pc-modules",
"product_id": "grub2-pc-modules",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grub2-pc-modules"
}
}
},
{
"category": "product_version",
"name": "grub2-tools-extra",
"product": {
"name": "grub2-tools-extra",
"product_id": "grub2-tools-extra",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grub2-tools-extra"
}
}
},
{
"category": "product_version",
"name": "grub2-efi-aa64",
"product": {
"name": "grub2-efi-aa64",
"product_id": "grub2-efi-aa64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grub2-efi-aa64"
}
}
},
{
"category": "product_version",
"name": "grub2-efi-x64-modules",
"product": {
"name": "grub2-efi-x64-modules",
"product_id": "grub2-efi-x64-modules",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grub2-efi-x64-modules"
}
}
},
{
"category": "product_version",
"name": "grub2-ppc64le-modules",
"product": {
"name": "grub2-ppc64le-modules",
"product_id": "grub2-ppc64le-modules",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grub2-ppc64le-modules"
}
}
},
{
"category": "product_version",
"name": "grub2-efi-aa64-modules",
"product": {
"name": "grub2-efi-aa64-modules",
"product_id": "grub2-efi-aa64-modules",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grub2-efi-aa64-modules"
}
}
},
{
"category": "product_version",
"name": "grub2-efi-aa64-cdboot",
"product": {
"name": "grub2-efi-aa64-cdboot",
"product_id": "grub2-efi-aa64-cdboot",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grub2-efi-aa64-cdboot"
}
}
},
{
"category": "product_version",
"name": "grub2-pc",
"product": {
"name": "grub2-pc",
"product_id": "grub2-pc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grub2-pc"
}
}
},
{
"category": "product_version",
"name": "grub2-ppc64le",
"product": {
"name": "grub2-ppc64le",
"product_id": "grub2-ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grub2-ppc64le"
}
}
},
{
"category": "product_version",
"name": "grub2-efi-x64-cdboot",
"product": {
"name": "grub2-efi-x64-cdboot",
"product_id": "grub2-efi-x64-cdboot",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grub2-efi-x64-cdboot"
}
}
},
{
"category": "product_version",
"name": "grub2-tools-efi",
"product": {
"name": "grub2-tools-efi",
"product_id": "grub2-tools-efi",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grub2-tools-efi"
}
}
},
{
"category": "product_version",
"name": "grub2-tools-minimal",
"product": {
"name": "grub2-tools-minimal",
"product_id": "grub2-tools-minimal",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grub2-tools-minimal"
}
}
},
{
"category": "product_version",
"name": "grub2.src",
"product": {
"name": "grub2.src",
"product_id": "grub2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grub2?arch=src"
}
}
},
{
"category": "product_version",
"name": "grub2-efi-x64",
"product": {
"name": "grub2-efi-x64",
"product_id": "grub2-efi-x64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grub2-efi-x64"
}
}
},
{
"category": "product_version",
"name": "grub2-tools",
"product": {
"name": "grub2-tools",
"product_id": "grub2-tools",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grub2-tools"
}
}
},
{
"category": "product_version",
"name": "grub2-efi-ia32",
"product": {
"name": "grub2-efi-ia32",
"product_id": "grub2-efi-ia32",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grub2-efi-ia32"
}
}
},
{
"category": "product_version",
"name": "grub2-ppc-modules",
"product": {
"name": "grub2-ppc-modules",
"product_id": "grub2-ppc-modules",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grub2-ppc-modules"
}
}
},
{
"category": "product_version",
"name": "grub2",
"product": {
"name": "grub2",
"product_id": "grub2",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grub2"
}
}
},
{
"category": "product_version",
"name": "grub2-efi",
"product": {
"name": "grub2-efi",
"product_id": "grub2-efi",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grub2-efi"
}
}
},
{
"category": "product_version",
"name": "grub2-efi-ia32-cdboot",
"product": {
"name": "grub2-efi-ia32-cdboot",
"product_id": "grub2-efi-ia32-cdboot",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grub2-efi-ia32-cdboot"
}
}
},
{
"category": "product_version",
"name": "grub2-ppc64",
"product": {
"name": "grub2-ppc64",
"product_id": "grub2-ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grub2-ppc64"
}
}
},
{
"category": "product_version",
"name": "grub2-efi-ia32-modules",
"product": {
"name": "grub2-efi-ia32-modules",
"product_id": "grub2-efi-ia32-modules",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grub2-efi-ia32-modules"
}
}
},
{
"category": "product_version",
"name": "grub2-ppc64-modules",
"product": {
"name": "grub2-ppc64-modules",
"product_id": "grub2-ppc64-modules",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grub2-ppc64-modules"
}
}
},
{
"category": "product_version",
"name": "grub2-efi-modules",
"product": {
"name": "grub2-efi-modules",
"product_id": "grub2-efi-modules",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grub2-efi-modules"
}
}
},
{
"category": "product_version",
"name": "rhcos",
"product": {
"name": "rhcos",
"product_id": "rhcos",
"product_identification_helper": {
"purl": "pkg:oci/rhcos?repository_url=registry.redhat.io/rhcos"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-common as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:grub2-common"
},
"product_reference": "grub2-common",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-efi-aa64 as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:grub2-efi-aa64"
},
"product_reference": "grub2-efi-aa64",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-efi-aa64-cdboot as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:grub2-efi-aa64-cdboot"
},
"product_reference": "grub2-efi-aa64-cdboot",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-efi-aa64-modules as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:grub2-efi-aa64-modules"
},
"product_reference": "grub2-efi-aa64-modules",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-efi-x64 as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:grub2-efi-x64"
},
"product_reference": "grub2-efi-x64",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-efi-x64-cdboot as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:grub2-efi-x64-cdboot"
},
"product_reference": "grub2-efi-x64-cdboot",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-efi-x64-modules as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:grub2-efi-x64-modules"
},
"product_reference": "grub2-efi-x64-modules",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-pc as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:grub2-pc"
},
"product_reference": "grub2-pc",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-pc-modules as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:grub2-pc-modules"
},
"product_reference": "grub2-pc-modules",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-ppc64le as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:grub2-ppc64le"
},
"product_reference": "grub2-ppc64le",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-ppc64le-modules as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:grub2-ppc64le-modules"
},
"product_reference": "grub2-ppc64le-modules",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-tools as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:grub2-tools"
},
"product_reference": "grub2-tools",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-tools-efi as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:grub2-tools-efi"
},
"product_reference": "grub2-tools-efi",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-tools-extra as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:grub2-tools-extra"
},
"product_reference": "grub2-tools-extra",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-tools-minimal as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:grub2-tools-minimal"
},
"product_reference": "grub2-tools-minimal",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2.src as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:grub2.src"
},
"product_reference": "grub2.src",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2 as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:grub2"
},
"product_reference": "grub2",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-common as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:grub2-common"
},
"product_reference": "grub2-common",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-efi as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:grub2-efi"
},
"product_reference": "grub2-efi",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-efi-aa64-modules as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:grub2-efi-aa64-modules"
},
"product_reference": "grub2-efi-aa64-modules",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-efi-ia32 as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:grub2-efi-ia32"
},
"product_reference": "grub2-efi-ia32",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-efi-ia32-cdboot as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:grub2-efi-ia32-cdboot"
},
"product_reference": "grub2-efi-ia32-cdboot",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-efi-ia32-modules as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:grub2-efi-ia32-modules"
},
"product_reference": "grub2-efi-ia32-modules",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-efi-modules as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:grub2-efi-modules"
},
"product_reference": "grub2-efi-modules",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-efi-x64 as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:grub2-efi-x64"
},
"product_reference": "grub2-efi-x64",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-efi-x64-cdboot as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:grub2-efi-x64-cdboot"
},
"product_reference": "grub2-efi-x64-cdboot",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-efi-x64-modules as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:grub2-efi-x64-modules"
},
"product_reference": "grub2-efi-x64-modules",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-pc as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:grub2-pc"
},
"product_reference": "grub2-pc",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-pc-modules as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:grub2-pc-modules"
},
"product_reference": "grub2-pc-modules",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-ppc-modules as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:grub2-ppc-modules"
},
"product_reference": "grub2-ppc-modules",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-ppc64 as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:grub2-ppc64"
},
"product_reference": "grub2-ppc64",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-ppc64-modules as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:grub2-ppc64-modules"
},
"product_reference": "grub2-ppc64-modules",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-ppc64le as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:grub2-ppc64le"
},
"product_reference": "grub2-ppc64le",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-ppc64le-modules as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:grub2-ppc64le-modules"
},
"product_reference": "grub2-ppc64le-modules",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-tools as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:grub2-tools"
},
"product_reference": "grub2-tools",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-tools-extra as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:grub2-tools-extra"
},
"product_reference": "grub2-tools-extra",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-tools-minimal as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:grub2-tools-minimal"
},
"product_reference": "grub2-tools-minimal",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2.src as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:grub2.src"
},
"product_reference": "grub2.src",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-common as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:grub2-common"
},
"product_reference": "grub2-common",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-efi-aa64 as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:grub2-efi-aa64"
},
"product_reference": "grub2-efi-aa64",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-efi-aa64-cdboot as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:grub2-efi-aa64-cdboot"
},
"product_reference": "grub2-efi-aa64-cdboot",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-efi-aa64-modules as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:grub2-efi-aa64-modules"
},
"product_reference": "grub2-efi-aa64-modules",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-efi-ia32 as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:grub2-efi-ia32"
},
"product_reference": "grub2-efi-ia32",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-efi-ia32-cdboot as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:grub2-efi-ia32-cdboot"
},
"product_reference": "grub2-efi-ia32-cdboot",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-efi-ia32-modules as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:grub2-efi-ia32-modules"
},
"product_reference": "grub2-efi-ia32-modules",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-efi-x64 as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:grub2-efi-x64"
},
"product_reference": "grub2-efi-x64",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-efi-x64-cdboot as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:grub2-efi-x64-cdboot"
},
"product_reference": "grub2-efi-x64-cdboot",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-efi-x64-modules as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:grub2-efi-x64-modules"
},
"product_reference": "grub2-efi-x64-modules",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-pc as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:grub2-pc"
},
"product_reference": "grub2-pc",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-pc-modules as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:grub2-pc-modules"
},
"product_reference": "grub2-pc-modules",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-ppc64le as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:grub2-ppc64le"
},
"product_reference": "grub2-ppc64le",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-ppc64le-modules as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:grub2-ppc64le-modules"
},
"product_reference": "grub2-ppc64le-modules",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-tools as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:grub2-tools"
},
"product_reference": "grub2-tools",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-tools-efi as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:grub2-tools-efi"
},
"product_reference": "grub2-tools-efi",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-tools-extra as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:grub2-tools-extra"
},
"product_reference": "grub2-tools-extra",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-tools-minimal as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:grub2-tools-minimal"
},
"product_reference": "grub2-tools-minimal",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2.src as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:grub2.src"
},
"product_reference": "grub2.src",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-common as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:grub2-common"
},
"product_reference": "grub2-common",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-efi-aa64 as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:grub2-efi-aa64"
},
"product_reference": "grub2-efi-aa64",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-efi-aa64-cdboot as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:grub2-efi-aa64-cdboot"
},
"product_reference": "grub2-efi-aa64-cdboot",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-efi-aa64-modules as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:grub2-efi-aa64-modules"
},
"product_reference": "grub2-efi-aa64-modules",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-efi-x64 as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:grub2-efi-x64"
},
"product_reference": "grub2-efi-x64",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-efi-x64-cdboot as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:grub2-efi-x64-cdboot"
},
"product_reference": "grub2-efi-x64-cdboot",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-efi-x64-modules as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:grub2-efi-x64-modules"
},
"product_reference": "grub2-efi-x64-modules",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-pc as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:grub2-pc"
},
"product_reference": "grub2-pc",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-pc-modules as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:grub2-pc-modules"
},
"product_reference": "grub2-pc-modules",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-ppc64le as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:grub2-ppc64le"
},
"product_reference": "grub2-ppc64le",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-ppc64le-modules as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:grub2-ppc64le-modules"
},
"product_reference": "grub2-ppc64le-modules",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-tools as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:grub2-tools"
},
"product_reference": "grub2-tools",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-tools-efi as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:grub2-tools-efi"
},
"product_reference": "grub2-tools-efi",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-tools-extra as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:grub2-tools-extra"
},
"product_reference": "grub2-tools-extra",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2-tools-minimal as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:grub2-tools-minimal"
},
"product_reference": "grub2-tools-minimal",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grub2.src as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:grub2.src"
},
"product_reference": "grub2.src",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhcos as a component of Red Hat OpenShift Container Platform 4",
"product_id": "red_hat_openshift_container_platform_4:rhcos"
},
"product_reference": "rhcos",
"relates_to_product_reference": "red_hat_openshift_container_platform_4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-45779",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2025-02-14T21:10:30.586000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"red_hat_enterprise_linux_10:grub2-common",
"red_hat_enterprise_linux_10:grub2-efi-aa64",
"red_hat_enterprise_linux_10:grub2-efi-aa64-cdboot",
"red_hat_enterprise_linux_10:grub2-efi-aa64-modules",
"red_hat_enterprise_linux_10:grub2-efi-x64",
"red_hat_enterprise_linux_10:grub2-efi-x64-cdboot",
"red_hat_enterprise_linux_10:grub2-efi-x64-modules",
"red_hat_enterprise_linux_10:grub2-pc",
"red_hat_enterprise_linux_10:grub2-pc-modules",
"red_hat_enterprise_linux_10:grub2-ppc64le",
"red_hat_enterprise_linux_10:grub2-ppc64le-modules",
"red_hat_enterprise_linux_10:grub2-tools",
"red_hat_enterprise_linux_10:grub2-tools-efi",
"red_hat_enterprise_linux_10:grub2-tools-extra",
"red_hat_enterprise_linux_10:grub2-tools-minimal",
"red_hat_enterprise_linux_10:grub2.src",
"red_hat_enterprise_linux_7:grub2",
"red_hat_enterprise_linux_7:grub2-common",
"red_hat_enterprise_linux_7:grub2-efi",
"red_hat_enterprise_linux_7:grub2-efi-aa64-modules",
"red_hat_enterprise_linux_7:grub2-efi-ia32",
"red_hat_enterprise_linux_7:grub2-efi-ia32-cdboot",
"red_hat_enterprise_linux_7:grub2-efi-ia32-modules",
"red_hat_enterprise_linux_7:grub2-efi-modules",
"red_hat_enterprise_linux_7:grub2-efi-x64",
"red_hat_enterprise_linux_7:grub2-efi-x64-cdboot",
"red_hat_enterprise_linux_7:grub2-efi-x64-modules",
"red_hat_enterprise_linux_7:grub2-pc",
"red_hat_enterprise_linux_7:grub2-pc-modules",
"red_hat_enterprise_linux_7:grub2-ppc-modules",
"red_hat_enterprise_linux_7:grub2-ppc64",
"red_hat_enterprise_linux_7:grub2-ppc64-modules",
"red_hat_enterprise_linux_7:grub2-ppc64le",
"red_hat_enterprise_linux_7:grub2-ppc64le-modules",
"red_hat_enterprise_linux_7:grub2-tools",
"red_hat_enterprise_linux_7:grub2-tools-extra",
"red_hat_enterprise_linux_7:grub2-tools-minimal",
"red_hat_enterprise_linux_7:grub2.src",
"red_hat_enterprise_linux_8:grub2-common",
"red_hat_enterprise_linux_8:grub2-efi-aa64",
"red_hat_enterprise_linux_8:grub2-efi-aa64-cdboot",
"red_hat_enterprise_linux_8:grub2-efi-aa64-modules",
"red_hat_enterprise_linux_8:grub2-efi-ia32",
"red_hat_enterprise_linux_8:grub2-efi-ia32-cdboot",
"red_hat_enterprise_linux_8:grub2-efi-ia32-modules",
"red_hat_enterprise_linux_8:grub2-efi-x64",
"red_hat_enterprise_linux_8:grub2-efi-x64-cdboot",
"red_hat_enterprise_linux_8:grub2-efi-x64-modules",
"red_hat_enterprise_linux_8:grub2-pc",
"red_hat_enterprise_linux_8:grub2-pc-modules",
"red_hat_enterprise_linux_8:grub2-ppc64le",
"red_hat_enterprise_linux_8:grub2-ppc64le-modules",
"red_hat_enterprise_linux_8:grub2-tools",
"red_hat_enterprise_linux_8:grub2-tools-efi",
"red_hat_enterprise_linux_8:grub2-tools-extra",
"red_hat_enterprise_linux_8:grub2-tools-minimal",
"red_hat_enterprise_linux_8:grub2.src",
"red_hat_enterprise_linux_9:grub2-common",
"red_hat_enterprise_linux_9:grub2-efi-aa64",
"red_hat_enterprise_linux_9:grub2-efi-aa64-cdboot",
"red_hat_enterprise_linux_9:grub2-efi-aa64-modules",
"red_hat_enterprise_linux_9:grub2-efi-x64",
"red_hat_enterprise_linux_9:grub2-efi-x64-cdboot",
"red_hat_enterprise_linux_9:grub2-efi-x64-modules",
"red_hat_enterprise_linux_9:grub2-pc",
"red_hat_enterprise_linux_9:grub2-pc-modules",
"red_hat_enterprise_linux_9:grub2-ppc64le",
"red_hat_enterprise_linux_9:grub2-ppc64le-modules",
"red_hat_enterprise_linux_9:grub2-tools",
"red_hat_enterprise_linux_9:grub2-tools-efi",
"red_hat_enterprise_linux_9:grub2-tools-extra",
"red_hat_enterprise_linux_9:grub2-tools-minimal",
"red_hat_enterprise_linux_9:grub2.src",
"red_hat_openshift_container_platform_4:rhcos"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2345854"
}
],
"notes": [
{
"category": "description",
"text": "An integer overflow flaw was found in the BFS file system driver in grub2. When reading a file with an indirect extent map, grub2 fails to validate the number of extent entries to be read. A crafted or corrupted BFS filesystem may cause an integer overflow during the file reading, leading to a heap of bounds read. As a consequence, sensitive data may be leaked, or grub2 will crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "grub2: fs/bfs: Integer overflow leads to Heap OOB Read in the BFS parser",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to trick a user into running grub2 with a specially crafted BFS file system image, limiting the exposure of this flaw. For this reason, this vulnerability has been rated with a Moderate severity.\n\nThe grub2 package as shipped in Red Hat Enterprise Linux 7, 8, 9 and in Red Hat OpenShift Container Platform 4 is not affected by this vulnerability because the BFS module is not built, so this issue is not applicable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"known_not_affected": [
"red_hat_enterprise_linux_10:grub2-common",
"red_hat_enterprise_linux_10:grub2-efi-aa64",
"red_hat_enterprise_linux_10:grub2-efi-aa64-cdboot",
"red_hat_enterprise_linux_10:grub2-efi-aa64-modules",
"red_hat_enterprise_linux_10:grub2-efi-x64",
"red_hat_enterprise_linux_10:grub2-efi-x64-cdboot",
"red_hat_enterprise_linux_10:grub2-efi-x64-modules",
"red_hat_enterprise_linux_10:grub2-pc",
"red_hat_enterprise_linux_10:grub2-pc-modules",
"red_hat_enterprise_linux_10:grub2-ppc64le",
"red_hat_enterprise_linux_10:grub2-ppc64le-modules",
"red_hat_enterprise_linux_10:grub2-tools",
"red_hat_enterprise_linux_10:grub2-tools-efi",
"red_hat_enterprise_linux_10:grub2-tools-extra",
"red_hat_enterprise_linux_10:grub2-tools-minimal",
"red_hat_enterprise_linux_10:grub2.src",
"red_hat_enterprise_linux_7:grub2",
"red_hat_enterprise_linux_7:grub2-common",
"red_hat_enterprise_linux_7:grub2-efi",
"red_hat_enterprise_linux_7:grub2-efi-aa64-modules",
"red_hat_enterprise_linux_7:grub2-efi-ia32",
"red_hat_enterprise_linux_7:grub2-efi-ia32-cdboot",
"red_hat_enterprise_linux_7:grub2-efi-ia32-modules",
"red_hat_enterprise_linux_7:grub2-efi-modules",
"red_hat_enterprise_linux_7:grub2-efi-x64",
"red_hat_enterprise_linux_7:grub2-efi-x64-cdboot",
"red_hat_enterprise_linux_7:grub2-efi-x64-modules",
"red_hat_enterprise_linux_7:grub2-pc",
"red_hat_enterprise_linux_7:grub2-pc-modules",
"red_hat_enterprise_linux_7:grub2-ppc-modules",
"red_hat_enterprise_linux_7:grub2-ppc64",
"red_hat_enterprise_linux_7:grub2-ppc64-modules",
"red_hat_enterprise_linux_7:grub2-ppc64le",
"red_hat_enterprise_linux_7:grub2-ppc64le-modules",
"red_hat_enterprise_linux_7:grub2-tools",
"red_hat_enterprise_linux_7:grub2-tools-extra",
"red_hat_enterprise_linux_7:grub2-tools-minimal",
"red_hat_enterprise_linux_7:grub2.src",
"red_hat_enterprise_linux_8:grub2-common",
"red_hat_enterprise_linux_8:grub2-efi-aa64",
"red_hat_enterprise_linux_8:grub2-efi-aa64-cdboot",
"red_hat_enterprise_linux_8:grub2-efi-aa64-modules",
"red_hat_enterprise_linux_8:grub2-efi-ia32",
"red_hat_enterprise_linux_8:grub2-efi-ia32-cdboot",
"red_hat_enterprise_linux_8:grub2-efi-ia32-modules",
"red_hat_enterprise_linux_8:grub2-efi-x64",
"red_hat_enterprise_linux_8:grub2-efi-x64-cdboot",
"red_hat_enterprise_linux_8:grub2-efi-x64-modules",
"red_hat_enterprise_linux_8:grub2-pc",
"red_hat_enterprise_linux_8:grub2-pc-modules",
"red_hat_enterprise_linux_8:grub2-ppc64le",
"red_hat_enterprise_linux_8:grub2-ppc64le-modules",
"red_hat_enterprise_linux_8:grub2-tools",
"red_hat_enterprise_linux_8:grub2-tools-efi",
"red_hat_enterprise_linux_8:grub2-tools-extra",
"red_hat_enterprise_linux_8:grub2-tools-minimal",
"red_hat_enterprise_linux_8:grub2.src",
"red_hat_enterprise_linux_9:grub2-common",
"red_hat_enterprise_linux_9:grub2-efi-aa64",
"red_hat_enterprise_linux_9:grub2-efi-aa64-cdboot",
"red_hat_enterprise_linux_9:grub2-efi-aa64-modules",
"red_hat_enterprise_linux_9:grub2-efi-x64",
"red_hat_enterprise_linux_9:grub2-efi-x64-cdboot",
"red_hat_enterprise_linux_9:grub2-efi-x64-modules",
"red_hat_enterprise_linux_9:grub2-pc",
"red_hat_enterprise_linux_9:grub2-pc-modules",
"red_hat_enterprise_linux_9:grub2-ppc64le",
"red_hat_enterprise_linux_9:grub2-ppc64le-modules",
"red_hat_enterprise_linux_9:grub2-tools",
"red_hat_enterprise_linux_9:grub2-tools-efi",
"red_hat_enterprise_linux_9:grub2-tools-extra",
"red_hat_enterprise_linux_9:grub2-tools-minimal",
"red_hat_enterprise_linux_9:grub2.src",
"red_hat_openshift_container_platform_4:rhcos"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45779"
},
{
"category": "external",
"summary": "RHBZ#2345854",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2345854"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45779",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45779"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45779",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45779"
},
{
"category": "external",
"summary": "https://lists.gnu.org/archive/html/grub-devel/2025-02/msg00024.html",
"url": "https://lists.gnu.org/archive/html/grub-devel/2025-02/msg00024.html"
}
],
"release_date": "2025-02-18T18:00:00+00:00",
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.0,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"red_hat_enterprise_linux_10:grub2-common",
"red_hat_enterprise_linux_10:grub2-efi-aa64",
"red_hat_enterprise_linux_10:grub2-efi-aa64-cdboot",
"red_hat_enterprise_linux_10:grub2-efi-aa64-modules",
"red_hat_enterprise_linux_10:grub2-efi-x64",
"red_hat_enterprise_linux_10:grub2-efi-x64-cdboot",
"red_hat_enterprise_linux_10:grub2-efi-x64-modules",
"red_hat_enterprise_linux_10:grub2-pc",
"red_hat_enterprise_linux_10:grub2-pc-modules",
"red_hat_enterprise_linux_10:grub2-ppc64le",
"red_hat_enterprise_linux_10:grub2-ppc64le-modules",
"red_hat_enterprise_linux_10:grub2-tools",
"red_hat_enterprise_linux_10:grub2-tools-efi",
"red_hat_enterprise_linux_10:grub2-tools-extra",
"red_hat_enterprise_linux_10:grub2-tools-minimal",
"red_hat_enterprise_linux_10:grub2.src",
"red_hat_enterprise_linux_7:grub2",
"red_hat_enterprise_linux_7:grub2-common",
"red_hat_enterprise_linux_7:grub2-efi",
"red_hat_enterprise_linux_7:grub2-efi-aa64-modules",
"red_hat_enterprise_linux_7:grub2-efi-ia32",
"red_hat_enterprise_linux_7:grub2-efi-ia32-cdboot",
"red_hat_enterprise_linux_7:grub2-efi-ia32-modules",
"red_hat_enterprise_linux_7:grub2-efi-modules",
"red_hat_enterprise_linux_7:grub2-efi-x64",
"red_hat_enterprise_linux_7:grub2-efi-x64-cdboot",
"red_hat_enterprise_linux_7:grub2-efi-x64-modules",
"red_hat_enterprise_linux_7:grub2-pc",
"red_hat_enterprise_linux_7:grub2-pc-modules",
"red_hat_enterprise_linux_7:grub2-ppc-modules",
"red_hat_enterprise_linux_7:grub2-ppc64",
"red_hat_enterprise_linux_7:grub2-ppc64-modules",
"red_hat_enterprise_linux_7:grub2-ppc64le",
"red_hat_enterprise_linux_7:grub2-ppc64le-modules",
"red_hat_enterprise_linux_7:grub2-tools",
"red_hat_enterprise_linux_7:grub2-tools-extra",
"red_hat_enterprise_linux_7:grub2-tools-minimal",
"red_hat_enterprise_linux_7:grub2.src",
"red_hat_enterprise_linux_8:grub2-common",
"red_hat_enterprise_linux_8:grub2-efi-aa64",
"red_hat_enterprise_linux_8:grub2-efi-aa64-cdboot",
"red_hat_enterprise_linux_8:grub2-efi-aa64-modules",
"red_hat_enterprise_linux_8:grub2-efi-ia32",
"red_hat_enterprise_linux_8:grub2-efi-ia32-cdboot",
"red_hat_enterprise_linux_8:grub2-efi-ia32-modules",
"red_hat_enterprise_linux_8:grub2-efi-x64",
"red_hat_enterprise_linux_8:grub2-efi-x64-cdboot",
"red_hat_enterprise_linux_8:grub2-efi-x64-modules",
"red_hat_enterprise_linux_8:grub2-pc",
"red_hat_enterprise_linux_8:grub2-pc-modules",
"red_hat_enterprise_linux_8:grub2-ppc64le",
"red_hat_enterprise_linux_8:grub2-ppc64le-modules",
"red_hat_enterprise_linux_8:grub2-tools",
"red_hat_enterprise_linux_8:grub2-tools-efi",
"red_hat_enterprise_linux_8:grub2-tools-extra",
"red_hat_enterprise_linux_8:grub2-tools-minimal",
"red_hat_enterprise_linux_8:grub2.src",
"red_hat_enterprise_linux_9:grub2-common",
"red_hat_enterprise_linux_9:grub2-efi-aa64",
"red_hat_enterprise_linux_9:grub2-efi-aa64-cdboot",
"red_hat_enterprise_linux_9:grub2-efi-aa64-modules",
"red_hat_enterprise_linux_9:grub2-efi-x64",
"red_hat_enterprise_linux_9:grub2-efi-x64-cdboot",
"red_hat_enterprise_linux_9:grub2-efi-x64-modules",
"red_hat_enterprise_linux_9:grub2-pc",
"red_hat_enterprise_linux_9:grub2-pc-modules",
"red_hat_enterprise_linux_9:grub2-ppc64le",
"red_hat_enterprise_linux_9:grub2-ppc64le-modules",
"red_hat_enterprise_linux_9:grub2-tools",
"red_hat_enterprise_linux_9:grub2-tools-efi",
"red_hat_enterprise_linux_9:grub2-tools-extra",
"red_hat_enterprise_linux_9:grub2-tools-minimal",
"red_hat_enterprise_linux_9:grub2.src",
"red_hat_openshift_container_platform_4:rhcos"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate",
"product_ids": [
"red_hat_enterprise_linux_10:grub2-common",
"red_hat_enterprise_linux_10:grub2-efi-aa64",
"red_hat_enterprise_linux_10:grub2-efi-aa64-cdboot",
"red_hat_enterprise_linux_10:grub2-efi-aa64-modules",
"red_hat_enterprise_linux_10:grub2-efi-x64",
"red_hat_enterprise_linux_10:grub2-efi-x64-cdboot",
"red_hat_enterprise_linux_10:grub2-efi-x64-modules",
"red_hat_enterprise_linux_10:grub2-pc",
"red_hat_enterprise_linux_10:grub2-pc-modules",
"red_hat_enterprise_linux_10:grub2-ppc64le",
"red_hat_enterprise_linux_10:grub2-ppc64le-modules",
"red_hat_enterprise_linux_10:grub2-tools",
"red_hat_enterprise_linux_10:grub2-tools-efi",
"red_hat_enterprise_linux_10:grub2-tools-extra",
"red_hat_enterprise_linux_10:grub2-tools-minimal",
"red_hat_enterprise_linux_10:grub2.src",
"red_hat_enterprise_linux_7:grub2",
"red_hat_enterprise_linux_7:grub2-common",
"red_hat_enterprise_linux_7:grub2-efi",
"red_hat_enterprise_linux_7:grub2-efi-aa64-modules",
"red_hat_enterprise_linux_7:grub2-efi-ia32",
"red_hat_enterprise_linux_7:grub2-efi-ia32-cdboot",
"red_hat_enterprise_linux_7:grub2-efi-ia32-modules",
"red_hat_enterprise_linux_7:grub2-efi-modules",
"red_hat_enterprise_linux_7:grub2-efi-x64",
"red_hat_enterprise_linux_7:grub2-efi-x64-cdboot",
"red_hat_enterprise_linux_7:grub2-efi-x64-modules",
"red_hat_enterprise_linux_7:grub2-pc",
"red_hat_enterprise_linux_7:grub2-pc-modules",
"red_hat_enterprise_linux_7:grub2-ppc-modules",
"red_hat_enterprise_linux_7:grub2-ppc64",
"red_hat_enterprise_linux_7:grub2-ppc64-modules",
"red_hat_enterprise_linux_7:grub2-ppc64le",
"red_hat_enterprise_linux_7:grub2-ppc64le-modules",
"red_hat_enterprise_linux_7:grub2-tools",
"red_hat_enterprise_linux_7:grub2-tools-extra",
"red_hat_enterprise_linux_7:grub2-tools-minimal",
"red_hat_enterprise_linux_7:grub2.src",
"red_hat_enterprise_linux_8:grub2-common",
"red_hat_enterprise_linux_8:grub2-efi-aa64",
"red_hat_enterprise_linux_8:grub2-efi-aa64-cdboot",
"red_hat_enterprise_linux_8:grub2-efi-aa64-modules",
"red_hat_enterprise_linux_8:grub2-efi-ia32",
"red_hat_enterprise_linux_8:grub2-efi-ia32-cdboot",
"red_hat_enterprise_linux_8:grub2-efi-ia32-modules",
"red_hat_enterprise_linux_8:grub2-efi-x64",
"red_hat_enterprise_linux_8:grub2-efi-x64-cdboot",
"red_hat_enterprise_linux_8:grub2-efi-x64-modules",
"red_hat_enterprise_linux_8:grub2-pc",
"red_hat_enterprise_linux_8:grub2-pc-modules",
"red_hat_enterprise_linux_8:grub2-ppc64le",
"red_hat_enterprise_linux_8:grub2-ppc64le-modules",
"red_hat_enterprise_linux_8:grub2-tools",
"red_hat_enterprise_linux_8:grub2-tools-efi",
"red_hat_enterprise_linux_8:grub2-tools-extra",
"red_hat_enterprise_linux_8:grub2-tools-minimal",
"red_hat_enterprise_linux_8:grub2.src",
"red_hat_enterprise_linux_9:grub2-common",
"red_hat_enterprise_linux_9:grub2-efi-aa64",
"red_hat_enterprise_linux_9:grub2-efi-aa64-cdboot",
"red_hat_enterprise_linux_9:grub2-efi-aa64-modules",
"red_hat_enterprise_linux_9:grub2-efi-x64",
"red_hat_enterprise_linux_9:grub2-efi-x64-cdboot",
"red_hat_enterprise_linux_9:grub2-efi-x64-modules",
"red_hat_enterprise_linux_9:grub2-pc",
"red_hat_enterprise_linux_9:grub2-pc-modules",
"red_hat_enterprise_linux_9:grub2-ppc64le",
"red_hat_enterprise_linux_9:grub2-ppc64le-modules",
"red_hat_enterprise_linux_9:grub2-tools",
"red_hat_enterprise_linux_9:grub2-tools-efi",
"red_hat_enterprise_linux_9:grub2-tools-extra",
"red_hat_enterprise_linux_9:grub2-tools-minimal",
"red_hat_enterprise_linux_9:grub2.src",
"red_hat_openshift_container_platform_4:rhcos"
]
}
],
"title": "grub2: fs/bfs: Integer overflow leads to Heap OOB Read in the BFS parser"
}
]
}
Enrichment data
Aggregated bundle (all enrichments)