https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:17:13 +0000 https://cve.radiocsirt.org/vuln/alsa-2025:2867 <p><strong>Affected:</strong> AlmaLinux:9: grub2-common, AlmaLinux:9: grub2-efi-aa64, AlmaLinux:9: grub2-efi-aa64-cdboot, AlmaLinux:9: grub2-efi-aa64-modules, AlmaLinux:9: grub2-efi-x64, AlmaLinux:9: grub2-efi-x64-cdboot, AlmaLinux:9: grub2-efi-x64-modules, AlmaLinux:9: grub2-pc, AlmaLinux:9: grub2-pc-modules, AlmaLinux:9: grub2-ppc64le and 5 more</p> <p>The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices.</p> <p>Security Fix(es):</p> <p>* grub2: net: Out-of-bounds write in grub_net_search_config_file() (CVE-2025-0624)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: grub2-common, AlmaLinux:9: grub2-efi-aa64, AlmaLinux:9: grub2-efi-aa64-cdboot, AlmaLinux:9: grub2-efi-aa64-modules, AlmaLinux:9: grub2-efi-x64, AlmaLinux:9: grub2-efi-x64-cdboot, AlmaLinux:9: grub2-efi-x64-modules, AlmaLinux:9: grub2-pc, AlmaLinux:9: grub2-pc-modules, AlmaLinux:9: grub2-ppc64le and 5 more</p> <p>The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices.</p> <p>Security Fix(es):</p> <p>* grub2: net: Out-of-bounds write in grub_net_search_config_file() (CVE-2025-0624)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2025:2867 https://cve.radiocsirt.org/vuln/bdu:2025-02685 bdu:2025-02685 https://cve.radiocsirt.org/vuln/bdu:2025-02685 https://cve.radiocsirt.org/vuln/bell-cve-2025-0624 <p><strong>Affected:</strong> Alpaquita:23: grub, Alpaquita:stream: grub</p> <p><strong>Affected:</strong> Alpaquita:23: grub, Alpaquita:stream: grub</p> https://cve.radiocsirt.org/vuln/bell-cve-2025-0624 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0370 certfr-2025-avi-0370 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0370 https://cve.radiocsirt.org/vuln/cnvd-2025-08319 cnvd-2025-08319 https://cve.radiocsirt.org/vuln/cnvd-2025-08319 https://cve.radiocsirt.org/vuln/essa-2025:2835 <p>security update for grub2</p> <p>security update for grub2</p> https://cve.radiocsirt.org/vuln/essa-2025:2835 https://cve.radiocsirt.org/vuln/euvd-2026-361949 EUVD-2026-361949 https://cve.radiocsirt.org/vuln/euvd-2026-361949 https://cve.radiocsirt.org/vuln/fkie_cve-2025-0624 <p>A flaw was found in grub2. During the network boot process, when trying to search for the configuration file, grub copies data from a user controlled environment variable into an internal buffer using the grub_strcpy() function. During this step, it fails to consider the environment variable length when allocating the internal buffer, resulting in an out-of-bounds write. If correctly exploited, this issue may result in remote code execution through the same network segment grub is searching for the boot information, which can be used to by-pass secure boot protections.</p> <p>A flaw was found in grub2. During the network boot process, when trying to search for the configuration file, grub copies data from a user controlled environment variable into an internal buffer using the grub_strcpy() function. During this step, it fails to consider the environment variable length when allocating the internal buffer, resulting in an out-of-bounds write. If correctly exploited, this issue may result in remote code execution through the same network segment grub is searching for the boot information, which can be used to by-pass secure boot protections.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-0624 https://cve.radiocsirt.org/vuln/ghsa-q3rr-g46f-jgqr <p>A flaw was found in grub2. During the network boot process, when trying to search for the configuration file, grub copies data from a user controlled environment variable into an internal buffer using the grub_strcpy() function. During this step, it fails to consider the environment variable length when allocating the internal buffer, resulting in an out-of-bounds write. If correctly exploited, this issue may result in remote code execution through the same network segment grub is searching for the boot information, which can be used to by-pass secure boot protections.</p> <p>A flaw was found in grub2. During the network boot process, when trying to search for the configuration file, grub copies data from a user controlled environment variable into an internal buffer using the grub_strcpy() function. During this step, it fails to consider the environment variable length when allocating the internal buffer, resulting in an out-of-bounds write. If correctly exploited, this issue may result in remote code execution through the same network segment grub is searching for the boot information, which can be used to by-pass secure boot protections.</p> https://cve.radiocsirt.org/vuln/ghsa-q3rr-g46f-jgqr https://cve.radiocsirt.org/vuln/msrc_cve-2025-0624 msrc_CVE-2025-0624 https://cve.radiocsirt.org/vuln/msrc_cve-2025-0624 https://cve.radiocsirt.org/vuln/oesa-2025-1216 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: grub2</p> <p>GNU GRUB is a Multiboot boot loader. It was derived from GRUB, the GRand Unified Bootloader, which was originally designed and implemented by Erich Stefan Boleyn. Security Fix(es):</p> <p>A flaw was found in grub2. A specially crafted JPEG file can cause the JPEG parser of grub2 to incorrectly check the bounds of its internal buffers, resulting in an out-of-bounds write. The possibility of overwriting sensitive information to bypass secure boot protections is not discarded.(CVE-2024-45774)</p> <p>A flaw was found in grub2 where the grub_extcmd_dispatcher() function calls grub_arg_list_alloc() to allocate memory for the grub&amp;apos;s argument list. However, it fails to check in case the memory allocation fails. Once the allocation fails, a NULL point will be processed by the parse_option() function, leading grub to crash or, in some rare scenarios, corrupt the IVT data.(CVE-2024-45775)</p> <p>When reading the language .mo file in grub_mofile_open(), grub2 fails to verify an integer overflow when allocating its internal buffer. A crafted .mo file may lead the buffer size calculation to overflow, leading to out-of-bound reads and writes. This flaw allows an attacker to leak sensitive data or overwrite critical data, possibly circumventing secure boot protections.(CVE-2024-45776)</p> <p>A flaw was found in grub2. The calculation of the translation buffer when reading a language .mo file in grub_gettext_getstr_from_position() may overflow, leading to a Out-of-bound write. This issue can be leveraged by…</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: grub2</p> <p>GNU GRUB is a Multiboot boot loader. It was derived from GRUB, the GRand Unified Bootloader, which was originally designed and implemented by Erich Stefan Boleyn. Security Fix(es):</p> <p>A flaw was found in grub2. A specially crafted JPEG file can cause the JPEG parser of grub2 to incorrectly check the bounds of its internal buffers, resulting in an out-of-bounds write. The possibility of overwriting sensitive information to bypass secure boot protections is not discarded.(CVE-2024-45774)</p> <p>A flaw was found in grub2 where the grub_extcmd_dispatcher() function calls grub_arg_list_alloc() to allocate memory for the grub&amp;apos;s argument list. However, it fails to check in case the memory allocation fails. Once the allocation fails, a NULL point will be processed by the parse_option() function, leading grub to crash or, in some rare scenarios, corrupt the IVT data.(CVE-2024-45775)</p> <p>When reading the language .mo file in grub_mofile_open(), grub2 fails to verify an integer overflow when allocating its internal buffer. A crafted .mo file may lead the buffer size calculation to overflow, leading to out-of-bound reads and writes. This flaw allows an attacker to leak sensitive data or overwrite critical data, possibly circumventing secure boot protections.(CVE-2024-45776)</p> <p>A flaw was found in grub2. The calculation of the translation buffer when reading a language .mo file in grub_gettext_getstr_from_position() may overflow, leading to a Out-of-bound write. This issue can be leveraged by…</p> https://cve.radiocsirt.org/vuln/oesa-2025-1216 https://cve.radiocsirt.org/vuln/rhsa-2025:2521 <p>grub2: net: Out-of-bounds write in grub_net_search_config_file()</p> <p>grub2: net: Out-of-bounds write in grub_net_search_config_file()</p> https://cve.radiocsirt.org/vuln/rhsa-2025:2521 https://cve.radiocsirt.org/vuln/suse-su-2025:01961-1 <p>Security update for grub2</p> <p>Security update for grub2</p> https://cve.radiocsirt.org/vuln/suse-su-2025:01961-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-0624 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: grub2, Ubuntu:Pro:14.04:LTS: grub2-signed, Ubuntu:16.04:LTS: grub2-signed, Ubuntu:16.04:LTS: grub2-unsigned, Ubuntu:18.04:LTS: grub2-signed, Ubuntu:18.04:LTS: grub2-unsigned, Ubuntu:20.04:LTS: grub2-signed, Ubuntu:20.04:LTS: grub2-unsigned, Ubuntu:22.04:LTS: grub2-signed, Ubuntu:22.04:LTS: grub2-unsigned and 6 more</p> <p>A flaw was found in grub2. During the network boot process, when trying to search for the configuration file, grub copies data from a user controlled environment variable into an internal buffer using the grub_strcpy() function. During this step, it fails to consider the environment variable length when allocating the internal buffer, resulting in an out-of-bounds write. If correctly exploited, this issue may result in remote code execution through the same network segment grub is searching for the boot information, which can be used to by-pass secure boot protections.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: grub2, Ubuntu:Pro:14.04:LTS: grub2-signed, Ubuntu:16.04:LTS: grub2-signed, Ubuntu:16.04:LTS: grub2-unsigned, Ubuntu:18.04:LTS: grub2-signed, Ubuntu:18.04:LTS: grub2-unsigned, Ubuntu:20.04:LTS: grub2-signed, Ubuntu:20.04:LTS: grub2-unsigned, Ubuntu:22.04:LTS: grub2-signed, Ubuntu:22.04:LTS: grub2-unsigned and 6 more</p> <p>A flaw was found in grub2. During the network boot process, when trying to search for the configuration file, grub copies data from a user controlled environment variable into an internal buffer using the grub_strcpy() function. During this step, it fails to consider the environment variable length when allocating the internal buffer, resulting in an out-of-bounds write. If correctly exploited, this issue may result in remote code execution through the same network segment grub is searching for the boot information, which can be used to by-pass secure boot protections.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-0624 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0396 <p>Ein Angreifer kann mehrere Schwachstellen in Grub ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen preiszugeben oder nicht spezifizierte Auswirkungen zu verursachen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Grub ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen preiszugeben oder nicht spezifizierte Auswirkungen zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0396