Debian/grub2: high 7.6
A flaw was found in grub2 in versions prior to 2.06. During USB device initialization, descriptors are read with very little bounds checking and assumes the USB device is providing sane values. If pro
Action: Upgrade grub2 to 2.04-16 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.04-16 | - |
Fixed versions
| 2.04-16 |
Sources
- osv: DEBIAN-CVE-2020-25647#Debian:14/grub2
- https://security-tracker.debian.org/tracker/CVE-2020-25647
published · modified · JSON