medium6.7
CVE-2024-45777
A flaw was found in grub2.
Impact
A flaw was found in grub2. The calculation of the translation buffer when reading a language .mo file in grub_gettext_getstr_from_position() may overflow, leading to a Out-of-bound write. This issue can be leveraged by an attacker to overwrite grub2's sensitive heap data, eventually leading to the circumvention of secure boot protections.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gnu | Grub2 | through 2.12 |
| Redhat | Openshift | Version 4.0 |
| Redhat | Enterprise Linux | Versions 7.0, 8.0, 9.0, 10.0 |