2334772 – (CVE-2024-56737) CVE-2024-56737 grub2: heap-based buffer overflow

Bug 2334772 (CVE-2024-56737) - CVE-2024-56737 grub2: heap-based buffer overflow

Summary: CVE-2024-56737 grub2: heap-based buffer overflow

Keywords:
Status:	NEW
Alias:	CVE-2024-56737
Product:	Security Response
Classification:	Other
Component:	vulnerability
Sub Component:
Version:	unspecified
Hardware:	All
OS:	Linux
Priority:	medium
Severity:	medium
Target Milestone:	---
Assignee:	Product Security DevOps Team
QA Contact:
Docs Contact:
URL:
Whiteboard:
Depends On:	2334778 2334774 2334775 2334776 2334777 2334779
Blocks:
TreeView+	depends on / blocked

Attachments	(Terms of Use)

Description OSIDB Bzimport 2024-12-29 07:01:06 UTC

GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem.

Note You need to log in before you can comment on or make changes to this bug.