CVE-2024-45778

MEDIUM4.1Memory safety

JSON export Create alert

Description

A stack overflow flaw was found when reading a BFS file system. A crafted BFS filesystem may lead to an uncontrolled loop, causing grub2 to crash.

CVSS breakdown

CVSS 3.1

Attack Vector

Local

Attack Complexity

High

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Affected products

gnu / grub22.12
RedHat / enterprise_linux7.0 – 7.0
RedHat / enterprise_linux8.0 – 8.0
RedHat / enterprise_linux9.0 – 9.0
RedHat / openshift_container_platform4.0 – 4.0

References

VENDOR_ADVISORYhttps://access.redhat.com/security/cve/CVE-2024-45778
MISChttps://bugzilla.redhat.com/show_bug.cgi?id=2345640
MAILING_LISThttps://lists.gnu.org/archive/html/grub-devel/2025-02/msg00024.html

Updated 38m ago · 8 sources