Known vulnerabilities in grub2
Vendor:
Fedoraproject
Software:
grub2
Software CPE:
cpe:2.3:o:fedoraproject:grub2:*:*:*:*:*:fedora:*:*
Website:
https://getfedora.org/
Total vulnerabilities:
16
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.2
Breakdown by Severity Chart
2.02-110.fc31
2.04-22.fc32
2.02-87.fc30
2.02-86.fc30
2.02-103.fc31
2.02-85.fc30
2.02-102.fc31
2.02-75.fc30
2.02-0.25.fc23
2.02-0.18.fc22
2.02-0.17.fc22
2.02-0.24.fc23
2.02-0.13.fc21
2.06-57.fc36
2.06-14.fc35
2.06-13.fc35
2.06-56.fc36
2.06-63.fc37
2.06-55.fc36
2.06-12.fc35
2.06-42.fc36
2.06-11.fc35
2.06-9.fc34
2.06-10.fc35
2.06-8.fc34
2.06-9.fc35
2.06~rc1-1.fc33
2.06~rc1-2.fc34
2.06~rc1-1.fc34
2.04-37.fc34
2.06-118.fc38
2.06-120.fc39
2.06-121.fc40
2.06-118.fc39
2.06-115.fc38
2.06-117.fc39
2.06-114.fc38
2.06-116.fc39
Vulnerabilities (16)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU97100 - Privilege Defined With Unsafe Actions CVE-2019-14865 |
CWE-267 | Low | 2.02-85.fc30, 2.02-86.fc30, 2.02-87.fc30, 2.02-102.fc31, 2.02-103.fc31 | 10.09.2024 |
SB2019112921 SB20240910138 SB20240910146 and 8 more |
||
| #VU87164 - Resource Management Errors CVE-2024-1048 |
CWE-399 | Low | 2.06-118.fc39, 2.06-115.fc38, 2.06-117.fc39 | 06.03.2024 |
SB2024030663 SB2024030664 SB2024043039 and 7 more |
||
| #VU85654 - Security Features CVE-2023-4001 |
CWE-254 | Low | 2.06-114.fc38, 2.06-116.fc39 | 22.01.2024 |
SB2024012217 SB2024012224 SB2024012225 and 2 more |
||
| #VU81628 - Out-of-bounds read CVE-2023-4693 |
CWE-125 | Low | 2.06-118.fc38, 2.06-120.fc39, 2.06-121.fc40 | 05.10.2023 |
SB2023100511 SB2023100523 SB2023100703 and 26 more |
||
| #VU81627 - Out-of-bounds write CVE-2023-4692 |
CWE-787 | Low | 2.06-118.fc38, 2.06-120.fc39, 2.06-121.fc40 | 05.10.2023 |
SB2023100511 SB2023100523 SB2023100703 and 27 more |
||
| #VU69395 - Out-of-bounds write CVE-2022-3775 |
CWE-787 | Low | 2.06-12.fc35, 2.06-13.fc35, 2.06-14.fc35, 2.06-55.fc36, 2.06-56.fc36, 2.06-57.fc36, 2.06-63.fc37 | 16.11.2022 |
SB2022111652 SB2022111654 SB2022111661 and 38 more |
||
| #VU69394 - Out-of-bounds write CVE-2022-2601 |
CWE-787 | Low | 2.06-12.fc35, 2.06-13.fc35, 2.06-14.fc35, 2.06-55.fc36, 2.06-56.fc36, 2.06-57.fc36, 2.06-63.fc37 | 16.11.2022 |
SB2022111652 SB2022111654 SB2022111661 and 44 more |
||
| #VU64272 - Insecure inherited permissions CVE-2021-3981 |
CWE-277 | Low | 2.06-8.fc34, 2.06-9.fc34, 2.06-9.fc35, 2.06-10.fc35 | 14.06.2022 |
SB2022061416 SB2022061422 SB2022092509 and 9 more |
||
| #VU64065 - Use After Free CVE-2022-28736 |
CWE-416 | Low | 2.06-11.fc35, 2.06-42.fc36 | 08.06.2022 |
SB2022060810 SB2022061540 SB2022061566 and 32 more |
||
| #VU64064 - Insufficient Verification of Data Authenticity CVE-2022-28735 |
CWE-345 | Low | 2.06-11.fc35, 2.06-42.fc36 | 08.06.2022 |
SB2022060810 SB2022061540 SB2022061566 and 24 more |
||
| #VU64063 - Out-of-bounds write CVE-2022-28734 |
CWE-787 | Medium | 2.06-11.fc35, 2.06-42.fc36 | 08.06.2022 |
SB2022060810 SB2022061540 SB2022061566 and 36 more |
||
| #VU64062 - Integer underflow CVE-2022-28733 |
CWE-191 | High | 2.06-11.fc35, 2.06-42.fc36 | 08.06.2022 |
SB2022060810 SB2022061540 SB2022061566 and 38 more |
||
| #VU64061 - Integer underflow CVE-2021-3697 |
CWE-191 | Low | 2.06-11.fc35, 2.06-42.fc36 | 08.06.2022 |
SB2022060810 SB2022061540 SB2022061566 and 31 more |
||
| #VU64059 - Out-of-bounds write CVE-2021-3696 |
CWE-787 | Low | 2.06-11.fc35, 2.06-42.fc36 | 08.06.2022 |
SB2022060810 SB2022061540 SB2022061566 and 31 more |
||
| #VU64057 - Out-of-bounds write CVE-2021-3695 |
CWE-787 | Low | 2.06-11.fc35, 2.06-42.fc36 | 08.06.2022 |
SB2022060810 SB2022061540 SB2022061566 and 31 more |
||
| #VU32506 - Integer overflow CVE-2014-4607 |
CWE-190 | High | 2.02-0.13.fc21 | 12.02.2020 |
SB2020021227 SB2014072507 SB2014073102 and 8 more |