[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for list of grub2 CVEs
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Wed Feb 19 06:05:08 GMT 2025
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
0d89c590 by Salvatore Bonaccorso at 2025-02-19T07:04:25+01:00
Add Debian bug reference for list of grub2 CVEs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -121,87 +121,87 @@ CVE-2024-13316 (The Scratch & Win \u2013 Giveaways and Contests. Boost subscribe
CVE-2024-12860 (The CarSpot \u2013 Dealership Wordpress Classified Theme theme for Wor ...)
NOT-FOR-US: WordPress plugin
CVE-2025-1125 [fs/hfs: Interger overflow may lead to heap based out-of-bounds write]
- - grub2 <unfixed>
+ - grub2 <unfixed> (bug #1098319)
NOTE: https://lists.gnu.org/archive/html/grub-devel/2025-02/msg00024.html
NOTE: https://www.openwall.com/lists/oss-security/2025/02/18/3
CVE-2025-1118 [commands/dump: The dump command is not in lockdown when secure boot is enabled]
- - grub2 <unfixed>
+ - grub2 <unfixed> (bug #1098319)
NOTE: https://lists.gnu.org/archive/html/grub-devel/2025-02/msg00024.html
NOTE: https://www.openwall.com/lists/oss-security/2025/02/18/3
CVE-2025-0690 [read: Integer overflow may lead to out-of-bounds write]
- - grub2 <unfixed>
+ - grub2 <unfixed> (bug #1098319)
NOTE: https://lists.gnu.org/archive/html/grub-devel/2025-02/msg00024.html
NOTE: https://www.openwall.com/lists/oss-security/2025/02/18/3
CVE-2025-0689 [udf: Heap based buffer overflow in grub_udf_read_block() may lead to arbitrary code execution]
- - grub2 <unfixed>
+ - grub2 <unfixed> (bug #1098319)
NOTE: https://lists.gnu.org/archive/html/grub-devel/2025-02/msg00024.html
NOTE: https://www.openwall.com/lists/oss-security/2025/02/18/3
CVE-2025-0686 [romfs: Integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data]
- - grub2 <unfixed>
+ - grub2 <unfixed> (bug #1098319)
NOTE: https://lists.gnu.org/archive/html/grub-devel/2025-02/msg00024.html
NOTE: https://www.openwall.com/lists/oss-security/2025/02/18/3
CVE-2025-0685 [jfs: Integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data]
- - grub2 <unfixed>
+ - grub2 <unfixed> (bug #1098319)
NOTE: https://lists.gnu.org/archive/html/grub-devel/2025-02/msg00024.html
NOTE: https://www.openwall.com/lists/oss-security/2025/02/18/3
CVE-2025-0684 [reiserfs: Integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data]
- - grub2 <unfixed>
+ - grub2 <unfixed> (bug #1098319)
NOTE: https://lists.gnu.org/archive/html/grub-devel/2025-02/msg00024.html
NOTE: https://www.openwall.com/lists/oss-security/2025/02/18/3
CVE-2025-0678 [squash4: Integer overflow may lead to heap based out-of-bounds write when reading data]
- - grub2 <unfixed>
+ - grub2 <unfixed> (bug #1098319)
NOTE: https://lists.gnu.org/archive/html/grub-devel/2025-02/msg00024.html
NOTE: https://www.openwall.com/lists/oss-security/2025/02/18/3
CVE-2025-0677 [UFS: Integer overflow may lead to heap based out-of-bounds write when handling symlinks]
- - grub2 <unfixed>
+ - grub2 <unfixed> (bug #1098319)
NOTE: https://lists.gnu.org/archive/html/grub-devel/2025-02/msg00024.html
NOTE: https://www.openwall.com/lists/oss-security/2025/02/18/3
CVE-2025-0624 [net: Out-of-bounds write in grub_net_search_config_file()]
- - grub2 <unfixed>
+ - grub2 <unfixed> (bug #1098319)
NOTE: https://lists.gnu.org/archive/html/grub-devel/2025-02/msg00024.html
NOTE: https://www.openwall.com/lists/oss-security/2025/02/18/3
CVE-2025-0622 (A flaw was found in command/gpg. In some scenarios, hooks created by l ...)
- - grub2 <unfixed>
+ - grub2 <unfixed> (bug #1098319)
NOTE: https://lists.gnu.org/archive/html/grub-devel/2025-02/msg00024.html
NOTE: https://www.openwall.com/lists/oss-security/2025/02/18/3
CVE-2024-45783 (A flaw was found in grub2. When failing to mount an HFS+ grub, the hfs ...)
- - grub2 <unfixed>
+ - grub2 <unfixed> (bug #1098319)
NOTE: https://lists.gnu.org/archive/html/grub-devel/2025-02/msg00024.html
NOTE: https://www.openwall.com/lists/oss-security/2025/02/18/3
CVE-2024-45782 [fs/hfs: strcpy() using the volume name (fs/hfs.c:382)]
- - grub2 <unfixed>
+ - grub2 <unfixed> (bug #1098319)
NOTE: https://lists.gnu.org/archive/html/grub-devel/2025-02/msg00024.html
NOTE: https://www.openwall.com/lists/oss-security/2025/02/18/3
CVE-2024-45781 (A flaw was found in grub2. When reading a symbolic link's name from a ...)
- - grub2 <unfixed>
+ - grub2 <unfixed> (bug #1098319)
NOTE: https://lists.gnu.org/archive/html/grub-devel/2025-02/msg00024.html
NOTE: https://www.openwall.com/lists/oss-security/2025/02/18/3
CVE-2024-45780 [fs/tar: Integer Overflow causes Heap OOB Write]
- - grub2 <unfixed>
+ - grub2 <unfixed> (bug #1098319)
NOTE: https://lists.gnu.org/archive/html/grub-devel/2025-02/msg00024.html
NOTE: https://www.openwall.com/lists/oss-security/2025/02/18/3
CVE-2024-45779 [fs/bfs: Integer overflow leads to Heap OOB Read (Write?) in the BFS parser]
- - grub2 <unfixed>
+ - grub2 <unfixed> (bug #1098319)
NOTE: https://lists.gnu.org/archive/html/grub-devel/2025-02/msg00024.html
NOTE: https://www.openwall.com/lists/oss-security/2025/02/18/3
CVE-2024-45778 [fs/bfs: Integer overflow in the BFS parser]
- - grub2 <unfixed>
+ - grub2 <unfixed> (bug #1098319)
NOTE: https://lists.gnu.org/archive/html/grub-devel/2025-02/msg00024.html
NOTE: https://www.openwall.com/lists/oss-security/2025/02/18/3
CVE-2024-45777 [grub-core/gettext: Integer overflow leads to Heap OOB Write]
- - grub2 <unfixed>
+ - grub2 <unfixed> (bug #1098319)
NOTE: https://lists.gnu.org/archive/html/grub-devel/2025-02/msg00024.html
NOTE: https://www.openwall.com/lists/oss-security/2025/02/18/3
CVE-2024-45776 (When reading the language .mo file in grub_mofile_open(), grub2 fails ...)
- - grub2 <unfixed>
+ - grub2 <unfixed> (bug #1098319)
NOTE: https://lists.gnu.org/archive/html/grub-devel/2025-02/msg00024.html
NOTE: https://www.openwall.com/lists/oss-security/2025/02/18/3
CVE-2024-45775 (A flaw was found in grub2 where the grub_extcmd_dispatcher() function ...)
- - grub2 <unfixed>
+ - grub2 <unfixed> (bug #1098319)
NOTE: https://lists.gnu.org/archive/html/grub-devel/2025-02/msg00024.html
NOTE: https://www.openwall.com/lists/oss-security/2025/02/18/3
CVE-2024-45774 (A flaw was found in grub2. A specially crafted JPEG file can cause the ...)
- - grub2 <unfixed>
+ - grub2 <unfixed> (bug #1098319)
NOTE: https://lists.gnu.org/archive/html/grub-devel/2025-02/msg00024.html
NOTE: https://www.openwall.com/lists/oss-security/2025/02/18/3
CVE-2025-XXXX [Null-deref in xmlPatMatch]
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0d89c590bc1db79e05f051aea2a93defbe70ec3f
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0d89c590bc1db79e05f051aea2a93defbe70ec3f
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250219/990b3cb8/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list