CVE-2024-45777

Katalog CVE

CVSS 6.7 · Medium EPSS 0,25%

Kerentanan Out-of-bounds Write pada gnu grub2, redhat openshift +1 lainnya. Skor CVSS 3.1 6.7 (Medium) menurut redhat.com.

Deskripsi (NVD)

A flaw was found in grub2. The calculation of the translation buffer when reading a language .mo file in grub_gettext_getstr_from_position() may overflow, leading to a Out-of-bound write. This issue can be leveraged by an attacker to overwrite grub2's sensitive heap data, eventually leading to the circumvention of secure boot protections.

Rincian

Terbit di NVD

19 Februari 2025

Terakhir diubah

29 Juni 2026

Status NVD

Modified

CVSS 3.1

6.7 (Medium), sumber redhat.com
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,25% peluang dieksploitasi; lebih tinggi dari 15,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/security/cve/CVE-2024-45777 advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=2346343 issue tracking · advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2025:20532