Known vulnerabilities in grub2 - page 3
Vendor:
SUSE
Software:
grub2
Software CPE:
cpe:2.3:o:suse:grub2:*:*:*:*:*:suse_linux:*:*
Website:
https://www.suse.com/
Total vulnerabilities:
54
Public exploits:
3
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.2
Breakdown by Severity Chart
2.02-199.1
2.06-150400.11.72.2
2.12-150600.8.52.1
2.06-150500.29.65.1
2.12-150700.19.29.1
2.06-150400.11.69.1
2.02-196.1
2.06-150500.29.62.1
2.12-150700.19.26.1
2.12-150600.8.49.1
2.12-150700.19.19.1
2.06-150400.11.66.1
2.02-193.1
2.12-150600.8.44.2
2.06-150500.29.59.1
2.04-150300.22.61.1
2.12-150600.8.37.1
2.12-150700.19.16.1
2.12-150700.19.13.2
2.06-150500.29.56.1
2.12-150600.8.34.1
2.06-150400.11.63.1
2.02-190.1
2.04-150300.3.14.2
2.06-150500.29.53.1
2.04-150300.22.58.1
2.02-187.2
2.04-150300.3.11.1
2.12-150700.19.3.1
2.04-150300.22.55.2
2.06-150500.29.46.2
2.12-150600.8.21.2
2.02-184.2
2.06-150400.11.58.2
2.02-181.2
2.04-150300.22.52.3
2.06-150500.29.43.2
2.12-150600.8.18.2
2.06-150400.11.55.2
2.06-150500.29.37.1
2.12-150600.8.12.1
2.06-150500.29.34.2
2.06-150500.29.25.12
2.06-150500.29.22.2
2.06-150400.11.38.1
2.06-150500.29.8.1
2.04-150300.22.43.1
2.02-169.1
2.06-150400.11.25.1
2.04-150300.3.8.1
2.04-150300.22.32.1
2.04-150200.9.73.1
2.02-150100.123.22.1
2.02-158.1
2.02-115.74.1
2.02-19.66.1
2.02-26.43.1
2.04-9.34.1
2.02-4.69.1
2.02-12.47.1
2.02-115.59.1
2.02-153.1
2.04-150300.22.25.1
2.04-150200.9.68.1
2.02-115.72.1
2.02-142.1
2.02-150100.123.17.1
2.06-150400.11.17.1
2.02-150000.122.17.1
2.04-9.45.2
2.04-150300.3.5.1
2.04-150300.22.20.2
2.02-150100.123.12.2
2.02-115.67.2
2.02-143.2
2.02-137.2
2.02-150000.122.12.2
2.06-150400.11.5.2
2.04-150200.9.63.2
Vulnerabilities (54)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU64065 - Use After Free CVE-2022-28736 |
CWE-416 | Low | 2.02-115.67.2, 2.02-137.2, 2.02-143.2, 2.02-150000.122.12.2, 2.02-150100.123.12.2, 2.04-150200.9.63.2, 2.04-150300.3.5.1, 2.04-150300.22.20.2, 2.06-150400.11.5.2 | 08.06.2022 |
SB2022060810 SB2022061540 SB2022061566 and 32 more |
||
| #VU64064 - Insufficient Verification of Data Authenticity CVE-2022-28735 |
CWE-345 | Low | 2.04-150200.9.63.2, 2.04-150300.3.5.1, 2.04-150300.22.20.2, 2.06-150400.11.5.2 | 08.06.2022 |
SB2022060810 SB2022061540 SB2022061566 and 24 more |
||
| #VU64063 - Out-of-bounds write CVE-2022-28734 |
CWE-787 | Medium | 2.02-115.67.2, 2.02-137.2, 2.02-143.2, 2.02-150000.122.12.2, 2.02-150100.123.12.2, 2.04-150200.9.63.2, 2.04-150300.3.5.1, 2.04-150300.22.20.2, 2.06-150400.11.5.2 | 08.06.2022 |
SB2022060810 SB2022061540 SB2022061566 and 36 more |
||
| #VU64062 - Integer underflow CVE-2022-28733 |
CWE-191 | High | 2.02-115.67.2, 2.02-137.2, 2.02-143.2, 2.02-150000.122.12.2, 2.02-150100.123.12.2, 2.04-150200.9.63.2, 2.04-150300.3.5.1, 2.04-150300.22.20.2, 2.06-150400.11.5.2 | 08.06.2022 |
SB2022060810 SB2022061540 SB2022061566 and 38 more |
||
| #VU64061 - Integer underflow CVE-2021-3697 |
CWE-191 | Low | 2.02-115.67.2, 2.02-137.2, 2.02-143.2, 2.02-150000.122.12.2, 2.02-150100.123.12.2, 2.04-150200.9.63.2, 2.04-150300.3.5.1, 2.04-150300.22.20.2, 2.06-150400.11.5.2 | 08.06.2022 |
SB2022060810 SB2022061540 SB2022061566 and 31 more |
||
| #VU64059 - Out-of-bounds write CVE-2021-3696 |
CWE-787 | Low | 2.02-115.67.2, 2.02-137.2, 2.02-143.2, 2.02-150000.122.12.2, 2.02-150100.123.12.2, 2.04-150200.9.63.2, 2.04-150300.3.5.1, 2.04-150300.22.20.2, 2.06-150400.11.5.2 | 08.06.2022 |
SB2022060810 SB2022061540 SB2022061566 and 31 more |
||
| #VU64057 - Out-of-bounds write CVE-2021-3695 |
CWE-787 | Low | 2.02-115.67.2, 2.02-137.2, 2.02-143.2, 2.02-150000.122.12.2, 2.02-150100.123.12.2, 2.04-150200.9.63.2, 2.04-150300.3.5.1, 2.04-150300.22.20.2, 2.06-150400.11.5.2 | 08.06.2022 |
SB2022060810 SB2022061540 SB2022061566 and 31 more |
||
| #VU51198 - Out-of-bounds write CVE-2021-20233 |
CWE-787 | Low | 2.02-4.69.1, 2.02-12.47.1, 2.02-19.66.1, 2.02-26.43.1, 2.02-115.59.1, 2.04-9.34.1 | 03.03.2021 |
SB2021030311 SB2021030401 SB2021030402 and 37 more |
||
| #VU51197 - Out-of-bounds write CVE-2021-20225 |
CWE-787 | Low | 2.02-4.69.1, 2.02-12.47.1, 2.02-19.66.1, 2.02-26.43.1, 2.02-115.59.1, 2.04-9.34.1 | 03.03.2021 |
SB2021030311 SB2021030401 SB2021030402 and 37 more |
||
| #VU51194 - Improper Authorization CVE-2020-27779 |
CWE-285 | Low | 2.02-4.69.1, 2.02-12.47.1, 2.02-19.66.1, 2.02-26.43.1, 2.02-115.59.1, 2.04-9.34.1 | 03.03.2021 |
SB2021030311 SB2021030401 SB2021030402 and 37 more |
||
| #VU51193 - Stack-based buffer overflow CVE-2020-27749 |
CWE-121 | Low | 2.02-4.69.1, 2.02-12.47.1, 2.02-19.66.1, 2.02-26.43.1, 2.02-115.59.1, 2.04-9.34.1 | 03.03.2021 |
SB2021030311 SB2021030401 SB2021030402 and 37 more |
||
| #VU51189 - Out-of-bounds write CVE-2020-25647 |
CWE-787 | Low | 2.02-4.69.1, 2.02-12.47.1, 2.02-19.66.1, 2.02-26.43.1, 2.02-115.59.1, 2.04-9.34.1 | 03.03.2021 |
SB2021030311 SB2021030401 SB2021030402 and 35 more |
||
| #VU51188 - Use After Free CVE-2020-25632 |
CWE-416 | Low | 2.02-4.69.1, 2.02-12.47.1, 2.02-19.66.1, 2.02-26.43.1, 2.02-115.59.1, 2.04-9.34.1 | 03.03.2021 |
SB2021030311 SB2021030401 SB2021030402 and 37 more |
||
| #VU51187 - Permissions, Privileges, and Access Controls CVE-2020-14372 |
CWE-264 | Low | 2.02-4.69.1, 2.02-12.47.1, 2.02-19.66.1, 2.02-26.43.1, 2.02-115.59.1, 2.04-9.34.1 | 03.03.2021 |
SB2021030311 SB2021030401 SB2021030402 and 37 more |
Showing elements 41 - 60 out of 54