Gnu Grub (Gnu Project) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2023-07-20. Vendor: Gnu Project.

CVEs of Gnu Grub

• CVE-2022-28735 - CVSS 7.8 (high), 2023-07-20: The GRUB2's shim_lock verifier allows non-kernel files to be loaded on shim-powered secure boot systems. Allowing such files to be loaded may lead to…
• CVE-2022-28734 - CVSS 8.1 (high), 2023-07-20: Out-of-bounds write when handling split HTTP headers; When handling split HTTP headers, GRUB2 HTTP code accidentally moves its internal data buffer point by…
• CVE-2022-28733 - CVSS 8.1 (high), 2023-07-20: Integer underflow in grub_net_recv_ip4_packets; A malicious crafted IP packet can lead to an integer underflow in grub_net_recv_ip4_packets() function on…
• CVE-2022-28736 - CVSS 7.8 (high), 2023-07-20: There's a use-after-free vulnerability in grub_cmd_chainloader() function; The chainloader command is used to boot up operating systems that doesn't support…