Stack Overflow Vulnerability in Grub2 Affects Red Hat Products
CVE-2024-45778

4.1MEDIUM

Key Information:

Status
Red Hat Enterprise Linux 10
Red Hat Enterprise Linux 7
Red Hat Enterprise Linux 8
Vendor
CVE Published:
3 March 2025

What is CVE-2024-45778?

A stack overflow vulnerability has been identified in Grub2 when processing files from a Broken File System (BFS). An attacker could craft a malicious BFS filesystem that triggers an uncontrolled loop within Grub2, leading to application crashes. This flaw could disrupt system operations, making it imperative for users to apply security updates and mitigate potential impacts on system stability.

References

https://access.redhat.com/security/cve/CVE-2024-45778
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2345640
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
4.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.