Debian/grub2: medium 6.7
A flaw was found in grub2 in versions prior to 2.06. The option parser allows an attacker to write past the end of a heap-allocated buffer by calling certain commands with a large number of specific s
Action: Upgrade grub2 to 2.04-16 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.04-16 | - |
Fixed versions
| 2.04-16 |
Sources
- osv: DEBIAN-CVE-2021-20225#Debian:13/grub2
- https://security-tracker.debian.org/tracker/CVE-2021-20225
published · modified · JSON