Grub (Gnu) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2023-11-10. Vendor: Gnu.

CVEs of Grub

• CVE-2023-4949 - CVSS 8.1 (high), 2023-11-10: An attacker with local access to a system (either through a disk or external drive) can present a modified XFS partition to grub-legacy in such a way to…
• CVE-2013-4577 - CVSS 2.1 (low), 2014-05-12: A certain Debian patch for GNU GRUB uses world-readable permissions for grub.cfg, which allows local users to obtain password hashes, as demonstrated by…