Debian/grub: unknown

Grub Legacy 0.97 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive info

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: DEBIAN-CVE-2008-3896#Debian:13/grub
• https://security-tracker.debian.org/tracker/CVE-2008-3896

published 2008-09-03T14:12:00Z · modified 2026-10-23T17:47:42.170576361Z · JSON