Out-of-Bounds Write Vulnerability in Grub2 Affects Red Hat Products
CVE-2024-45774

6.7MEDIUM

Key Information:

Summary

A vulnerability exists in the Grub2 bootloader, where a specially crafted JPEG file can exploit the JPEG parser, leading to improper boundary checks on internal buffers. This flaw can allow for out-of-bounds write actions, potentially enabling an attacker to overwrite sensitive data. While the direct impact on secure boot protections requires further analysis, the risk of unauthorized access to critical information poses a significant concern for users relying on Grub2 in their systems.

References

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.