Skip to content
CVE PROGRAM SOURCE RECORD4.1 Medium

CVE-2024-45778

Grub2: fs/bfs: integer overflow in the bfs parser.

Description

A stack overflow flaw was found when reading a BFS file system. A crafted BFS filesystem may lead to an uncontrolled loop, causing grub2 to crash.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

grub2

Default version status: unaffected

  • 0 to ≤ 2.12affected

Red Hat Red Hat Enterprise Linux 10

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 7

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: unaffected

Red Hat Red Hat OpenShift Container Platform 4

Default version status: unaffected

References