Debian/grub2: medium 6.7
A flaw was found in grub2. When reading tar files, grub2 allocates an internal buffer for the file name. However, it fails to properly verify the allocation against possible integer overflows. It's po
Action: Upgrade grub2 to 2.12-6 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.12-6 | - |
Fixed versions
| 2.12-6 |
Sources
- osv: DEBIAN-CVE-2024-45780#Debian:14/grub2
- https://security-tracker.debian.org/tracker/CVE-2024-45780
published · modified · JSON