PT-2017-19169 · Gnu+1 · Gnu Grub+1

Publicado 2017-06-19 · Atualizado 2021-03-02 · CVE-2017-9763

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions GNU GRUB versions prior to 2013-11-12

Description The issue allows remote attackers to cause a denial of service, leading to excessive stack use and application crash, via a crafted binary file. This is related to the use of a variable-size stack array in the grub ext2 read block function.

Recommendations For GNU GRUB versions prior to 2013-11-12, update to a version released after 2013-11-12 to resolve the issue.

Exploit

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2017-9763

SUSE-SU-2019:13989-1

SUSE-SU-2019_13989-1

SUSE-SU-2021:14659-1

SUSE-SU-2021_14659-1

Produtos afetados

Gnu Grub

Suse

Referências · 53

• 🔥 https://github.com/kukrimate/CVE-2020-14372 · Exploit
• https://github.com/radare/radare2/issues/7723 · Correção
• https://github.com/radare/radare2/commit/65000a7fd9eea62359e6d6714f17b94a99a82edd · Correção
• https://suse.com/support/update/announcement/2019/suse-su-201913989-1 · Nota
• https://suse.com/security/cve/CVE-2020-27779 · Nota
• https://bdu.fstec.ru/vul/2022-00338 · Nota de Segurança
• https://bugzilla.suse.com/1175970 · Nota
• https://suse.com/security/cve/CVE-2021-20233.html · Nota
• http://git.savannah.gnu.org/cgit/grub.git/commit/grub-core/fs/ext2.c?id=ac8cac1dac50daaf1c390d701cca3b55e16ee768 · Correção
• https://suse.com/security/cve/CVE-2020-27749.html · Nota
• https://bdu.fstec.ru/vul/2022-00308 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2017-9763 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2020-27779.html · Nota
• https://suse.com/security/cve/CVE-2020-25647.html · Nota
• https://bugzilla.suse.com/1177883 · Nota