Wind River Support Network

HomeDefectsLIN10-8333
Fixed

LIN10-8333 : Security Advisory - grub - CVE-2021-20225

Created: Mar 2, 2021    Updated: May 30, 2021
Resolved Date: May 30, 2021
Found In Version: 10.17.41.1
Severity: Standard
Applicable for: Wind River Linux LTS 17
Component/s: Userspace

Description

A flaw was found in grub2 in versions prior to 2.06. The option parser allows an attacker to write past the end of a heap-allocated buffer by calling certain commands with a large number of specific short forms of options. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

https://nvd.nist.gov/vuln/detail/CVE-2021-20225

CVEs


Live chat
Online