Red Hat Enterprise Linux 7/grub2

Red Hat · Package

28 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
lzo: lzo1x_decompress_safe() integer overflowCVE-2014-4607	Red Hat Enterprise Linux 5/busybox Red Hat Enterprise Linux 5/dump	Red Hat	Medium	No fix reported	Not recorded
grub2: Incorrect permission in grub.cfg allow unprivileged user to read the file contentCVE-2021-3981	Red Hat Enterprise Linux 7/grub2	Red Hat	Low	No fix reported	Not recorded
grub2: Crafted JPEG image can lead to buffer underflow write in the heapCVE-2021-3697	Red Hat Enterprise Linux 7/grub2	Red Hat	Medium	No fix reported	Not recorded
grub2: Crafted PNG image may lead to out-of-bound write during huffman table handlingCVE-2021-3696	Red Hat Enterprise Linux 7/grub2	Red Hat	Medium	No fix reported	Not recorded
grub2: Crafted PNG grayscale images may lead to out-of-bounds write in heapCVE-2021-3695	Red Hat Enterprise Linux 7/grub2	Red Hat	Medium	No fix reported	Not recorded
grub2: use-after-free in grub_cmd_chainloader()CVE-2022-28736	Red Hat Enterprise Linux 7/grub2	Red Hat	Medium	No fix reported	Not recorded
grub2: shim_lock verifier allows non-kernel files to be loadedCVE-2022-28735	Red Hat Enterprise Linux 7/grub2	Red Hat	Medium	No fix reported	Not recorded
grub2: Out-of-bound write when handling split HTTP headersCVE-2022-28734	Red Hat Enterprise Linux 7/grub2	Red Hat	Medium	No fix reported	Not recorded
grub2: Heap based out-of-bounds write when redering certain unicode sequencesCVE-2022-3775	Red Hat Enterprise Linux 7/grub2	Red Hat	Medium	No fix reported	Not recorded
grub2: out-of-bounds read at fs/ntfs.cCVE-2023-4693	Red Hat Enterprise Linux 7/grub2	Red Hat	Low	No fix reported	Not recorded
grub2: Out-of-bounds write at fs/ntfs.c may lead to unsigned code executionCVE-2023-4692	Red Hat Enterprise Linux 7/grub2	Red Hat	Low	No fix reported	Not recorded
grub2: Observable Timing Discrepancy resulting side-channel attacksCVE-2024-56738	Red Hat Enterprise Linux 10/grub2 Red Hat Enterprise Linux 7/grub2	Red Hat	Medium	No fix reported	Not recorded
grub2: commands/extcmd: Missing check for failed allocationCVE-2024-45775	Red Hat Enterprise Linux 7/grub2 Red Hat Enterprise Linux 8/grub2	Red Hat	Medium	No fix reported	Not recorded
grub2: reader/jpeg: Heap OOB Write during JPEG parsingCVE-2024-45774	Red Hat Enterprise Linux 7/grub2 Red Hat Enterprise Linux 8/grub2	Red Hat	Medium	No fix reported	Not recorded
grub2: grub-core/gettext: Integer overflow leads to Heap OOB Write.CVE-2024-45777	Red Hat Enterprise Linux 10/grub2 Red Hat Enterprise Linux 7/grub2	Red Hat	Medium	No fix reported	Not recorded
grub2: commands/dump: The dump command is not in lockdown when secure boot is enabledCVE-2025-1118	Red Hat Enterprise Linux 7/grub2 Red Hat Enterprise Linux 8/grub2	Red Hat	Medium	No fix reported	Not recorded
grub2: read: Integer overflow may lead to out-of-bounds writeCVE-2025-0690	Red Hat Enterprise Linux 7/grub2 Red Hat Enterprise Linux 8/grub2	Red Hat	Medium	No fix reported	Not recorded
grub2: UFS: Integer overflow may lead to heap based out-of-bounds write when handling symlinksCVE-2025-0677	Red Hat Enterprise Linux 7/grub2 Red Hat Enterprise Linux 8/grub2	Red Hat	Medium	No fix reported	Not recorded
grub2: command/gpg: Use-after-free due to hooks not being removed on module unloadCVE-2025-0622	Red Hat Enterprise Linux 7/grub2 Red Hat Enterprise Linux 8/grub2	Red Hat	Medium	No fix reported	Not recorded
grub2: fs/hfs+: refcount can be decremented twiceCVE-2024-45783	Red Hat Enterprise Linux 7/grub2 Red Hat Enterprise Linux 8/grub2	Red Hat	Medium	No fix reported	Not recorded