A flaw was found in grub2 in versions prior to 2.06. The option parser allows an attacker to write past the end of a heap-allocated buffer by calling certain commands with a large number of specific short forms of options. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-shim-aa64alma-upgrade-shim-ia32alma-upgrade-shim-unsigned-aarch64alma-upgrade-shim-unsigned-x64alma-upgrade-shim-x64 | May 4, 2022 | Mar 3, 2021 | |
| Alpine Linux | alpine-linux-upgrade-grub | Aug 22, 2024 | Mar 3, 2021 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-grub2amazon-linux-ami-2-upgrade-grub2-commonamazon-linux-ami-2-upgrade-grub2-debuginfoamazon-linux-ami-2-upgrade-grub2-efi-aa64amazon-linux-ami-2-upgrade-grub2-efi-aa64-cdbootamazon-linux-ami-2-upgrade-grub2-efi-aa64-ec2amazon-linux-ami-2-upgrade-grub2-efi-aa64-modulesamazon-linux-ami-2-upgrade-grub2-efi-x64amazon-linux-ami-2-upgrade-grub2-efi-x64-cdbootamazon-linux-ami-2-upgrade-grub2-efi-x64-ec2amazon-linux-ami-2-upgrade-grub2-efi-x64-modulesamazon-linux-ami-2-upgrade-grub2-emuamazon-linux-ami-2-upgrade-grub2-emu-modulesamazon-linux-ami-2-upgrade-grub2-pcamazon-linux-ami-2-upgrade-grub2-pc-modulesamazon-linux-ami-2-upgrade-grub2-toolsamazon-linux-ami-2-upgrade-grub2-tools-efiamazon-linux-ami-2-upgrade-grub2-tools-extraamazon-linux-ami-2-upgrade-grub2-tools-minimal | Jul 19, 2021 | Mar 3, 2021 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Mar 3, 2021 | |
| Centos_linux | — | centos-upgrade-fwupdcentos-upgrade-fwupd-debuginfocentos-upgrade-fwupd-debugsourcecentos-upgrade-fwupd-tests-debuginfocentos-upgrade-grub2centos-upgrade-grub2-commoncentos-upgrade-grub2-debuginfocentos-upgrade-grub2-debugsourcecentos-upgrade-grub2-efi-aa64-modulescentos-upgrade-grub2-efi-ia32centos-upgrade-grub2-efi-ia32-cdbootcentos-upgrade-grub2-efi-ia32-modulescentos-upgrade-grub2-efi-x64centos-upgrade-grub2-efi-x64-cdbootcentos-upgrade-grub2-efi-x64-modulescentos-upgrade-grub2-pccentos-upgrade-grub2-pc-modulescentos-upgrade-grub2-ppc-modulescentos-upgrade-grub2-ppc64-modulescentos-upgrade-grub2-ppc64le-modulescentos-upgrade-grub2-toolscentos-upgrade-grub2-tools-debuginfocentos-upgrade-grub2-tools-eficentos-upgrade-grub2-tools-efi-debuginfocentos-upgrade-grub2-tools-extracentos-upgrade-grub2-tools-extra-debuginfocentos-upgrade-grub2-tools-minimalcentos-upgrade-grub2-tools-minimal-debuginfocentos-upgrade-shim-ia32centos-upgrade-shim-x64 | Mar 3, 2021 | Mar 2, 2021 |
| Debian | debian-upgrade-grub2 | Mar 4, 2021 | Mar 4, 2021 | |
| Gentoo Linux | gentoo-linux-upgrade-sys-devel-grub | May 3, 2021 | Mar 3, 2021 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-grub2huawei-euleros-2_0_sp2-upgrade-grub2-commonhuawei-euleros-2_0_sp2-upgrade-grub2-efi-x64huawei-euleros-2_0_sp2-upgrade-grub2-pchuawei-euleros-2_0_sp2-upgrade-grub2-pc-moduleshuawei-euleros-2_0_sp2-upgrade-grub2-toolshuawei-euleros-2_0_sp2-upgrade-grub2-tools-extrahuawei-euleros-2_0_sp2-upgrade-grub2-tools-minimal | Sep 16, 2021 | Mar 3, 2021 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-grub2huawei-euleros-2_0_sp3-upgrade-grub2-commonhuawei-euleros-2_0_sp3-upgrade-grub2-efi-x64huawei-euleros-2_0_sp3-upgrade-grub2-efi-x64-cdboothuawei-euleros-2_0_sp3-upgrade-grub2-efi-x64-moduleshuawei-euleros-2_0_sp3-upgrade-grub2-pchuawei-euleros-2_0_sp3-upgrade-grub2-pc-moduleshuawei-euleros-2_0_sp3-upgrade-grub2-toolshuawei-euleros-2_0_sp3-upgrade-grub2-tools-extrahuawei-euleros-2_0_sp3-upgrade-grub2-tools-minimal | Apr 30, 2021 | Mar 3, 2021 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-grub2huawei-euleros-2_0_sp5-upgrade-grub2-commonhuawei-euleros-2_0_sp5-upgrade-grub2-efi-ia32huawei-euleros-2_0_sp5-upgrade-grub2-efi-ia32-cdboothuawei-euleros-2_0_sp5-upgrade-grub2-efi-x64huawei-euleros-2_0_sp5-upgrade-grub2-efi-x64-cdboothuawei-euleros-2_0_sp5-upgrade-grub2-efi-x64-moduleshuawei-euleros-2_0_sp5-upgrade-grub2-pchuawei-euleros-2_0_sp5-upgrade-grub2-pc-moduleshuawei-euleros-2_0_sp5-upgrade-grub2-toolshuawei-euleros-2_0_sp5-upgrade-grub2-tools-extrahuawei-euleros-2_0_sp5-upgrade-grub2-tools-minimal | May 19, 2021 | Mar 3, 2021 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-grub2-commonhuawei-euleros-2_0_sp8-upgrade-grub2-efi-aa64huawei-euleros-2_0_sp8-upgrade-grub2-efi-aa64-cdboothuawei-euleros-2_0_sp8-upgrade-grub2-efi-aa64-moduleshuawei-euleros-2_0_sp8-upgrade-grub2-toolshuawei-euleros-2_0_sp8-upgrade-grub2-tools-extrahuawei-euleros-2_0_sp8-upgrade-grub2-tools-minimal | May 18, 2021 | Mar 3, 2021 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-grub2-commonhuawei-euleros-2_0_sp9-upgrade-grub2-efi-aa64huawei-euleros-2_0_sp9-upgrade-grub2-efi-aa64-moduleshuawei-euleros-2_0_sp9-upgrade-grub2-toolshuawei-euleros-2_0_sp9-upgrade-grub2-tools-extrahuawei-euleros-2_0_sp9-upgrade-grub2-tools-minimal | Jun 2, 2021 | Mar 3, 2021 | |
| Oracle_linux | — | oracle-linux-upgrade-grub2oracle-linux-upgrade-grub2-commonoracle-linux-upgrade-grub2-efi-aa64oracle-linux-upgrade-grub2-efi-aa64-cdbootoracle-linux-upgrade-grub2-efi-aa64-modulesoracle-linux-upgrade-grub2-efi-ia32oracle-linux-upgrade-grub2-efi-ia32-cdbootoracle-linux-upgrade-grub2-efi-ia32-modulesoracle-linux-upgrade-grub2-efi-x64oracle-linux-upgrade-grub2-efi-x64-cdbootoracle-linux-upgrade-grub2-efi-x64-modulesoracle-linux-upgrade-grub2-pcoracle-linux-upgrade-grub2-pc-modulesoracle-linux-upgrade-grub2-toolsoracle-linux-upgrade-grub2-tools-efioracle-linux-upgrade-grub2-tools-extraoracle-linux-upgrade-grub2-tools-minimal | Mar 3, 2021 | Mar 2, 2021 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-fwupdredhat-upgrade-fwupd-debuginforedhat-upgrade-fwupd-debugsourceredhat-upgrade-fwupd-tests-debuginforedhat-upgrade-grub2redhat-upgrade-grub2-commonredhat-upgrade-grub2-debuginforedhat-upgrade-grub2-debugsourceredhat-upgrade-grub2-efi-aa64-modulesredhat-upgrade-grub2-efi-ia32redhat-upgrade-grub2-efi-ia32-cdbootredhat-upgrade-grub2-efi-ia32-modulesredhat-upgrade-grub2-efi-x64redhat-upgrade-grub2-efi-x64-cdbootredhat-upgrade-grub2-efi-x64-modulesredhat-upgrade-grub2-pcredhat-upgrade-grub2-pc-modulesredhat-upgrade-grub2-ppc-modulesredhat-upgrade-grub2-ppc64-modulesredhat-upgrade-grub2-ppc64le-modulesredhat-upgrade-grub2-toolsredhat-upgrade-grub2-tools-debuginforedhat-upgrade-grub2-tools-efiredhat-upgrade-grub2-tools-efi-debuginforedhat-upgrade-grub2-tools-extraredhat-upgrade-grub2-tools-extra-debuginforedhat-upgrade-grub2-tools-minimalredhat-upgrade-grub2-tools-minimal-debuginforedhat-upgrade-shim-ia32redhat-upgrade-shim-unsigned-x64redhat-upgrade-shim-x64 | Mar 3, 2021 | Mar 2, 2021 | |
| Rocky_linux | rocky-upgrade-fwupdrocky-upgrade-fwupd-debuginforocky-upgrade-fwupd-debugsource | Mar 12, 2024 | Mar 3, 2021 | |
| Suse | — | suse-upgrade-grub2suse-upgrade-grub2-arm64-efisuse-upgrade-grub2-branding-upstreamsuse-upgrade-grub2-i386-efisuse-upgrade-grub2-i386-efi-debugsuse-upgrade-grub2-i386-pcsuse-upgrade-grub2-i386-pc-debugsuse-upgrade-grub2-i386-xensuse-upgrade-grub2-powerpc-ieee1275suse-upgrade-grub2-s390x-emususe-upgrade-grub2-snapper-pluginsuse-upgrade-grub2-systemd-sleep-pluginsuse-upgrade-grub2-x86_64-efisuse-upgrade-grub2-x86_64-efi-debugsuse-upgrade-grub2-x86_64-xen | Mar 3, 2021 | Mar 2, 2021 |
| Ubuntu | ubuntu-upgrade-grub-efi-amd64-binubuntu-upgrade-grub-efi-amd64-signedubuntu-upgrade-grub-efi-arm64-binubuntu-upgrade-grub-efi-arm64-signed | Jun 18, 2021 | Mar 2, 2021 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Mar 3, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub