Wind River Support Network


LIN6-10685 : Security Advisory - grub2 - CVE-2015-8370

Created: Dec 29, 2015    Updated: Dec 3, 2018
Resolved Date: Mar 4, 2016
Found In Version:
Fix Version:
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Userspace


Multiple integer underflows in Grub2 1.98 through 2.02 allow physically proximate attackers to bypass authentication, obtain sensitive information, or cause a denial of service (disk corruption) via backspace characters in the (1) grub_username_get function in grub-core/normal/auth.c or the (2) grub_password_get function in lib/crypto.c, which trigger an Off-by-two or Out of bounds overwrite memory error.

Other Downloads

Live chat