PT-2022-5549 · Grub2+10 · Grub2+10

Marco Benatto · Published 2022-06-07 · Updated 2024-09-05 · CVE-2021-3696

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions grub2 versions prior to 2.12

Description A heap out-of-bounds write may happen during the handling of Huffman tables in the PNG reader, leading to data corruption in the heap space. The impact on Confidentiality, Integrity, and Availability may be considered Low due to the complexity of controlling the encoding and positioning of corrupted Huffman entries to achieve results such as arbitrary code execution and/or secure boot circumvention.

Recommendations For versions prior to 2.12, update to version 2.12 or later to resolve the issue. As a temporary workaround, consider restricting access to the PNG reader to minimize the risk of exploitation.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

ALSA-2022:5095

ALSA-2022:5099

ALT-PU-2023-1427

ALT-PU-2023-6074

ALT-PU-2024-11222

AZL-31035

AZL-34784

BDU:2022-06896

CESA-2022_5095

CVE-2021-3696

OESA-2022-1734

OPENSUSE-SU-2022_2035-1

OPENSUSE-SU-2022_2064-1

OPENSUSE-SU-2024:12137-1

RHSA-2022:5095

RHSA-2022:5096

RHSA-2022:5098

RHSA-2022:5099

RHSA-2022:5100

RHSA-2022_5095

RHSA-2022_5099

RLSA-2022:5095

RLSA-2022:5099

SUSE-SU-2022:2035-1

SUSE-SU-2022:2036-1

SUSE-SU-2022:2037-1

SUSE-SU-2022:2038-1

SUSE-SU-2022:2039-1

SUSE-SU-2022:2041-1

SUSE-SU-2022:2064-1

SUSE-SU-2022:2073-1

SUSE-SU-2022:2074-1

USN-6355-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

Grub2

References · 131

• https://osv.dev/vulnerability/SUSE-SU-2022:2035-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-3696 · Security Note
• https://linux.oracle.com/errata/ELSA-2022-5095.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-28734 · Security Note
• https://linux.oracle.com/errata/ELSA-2025-20530.html · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2022:5099 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-28735 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-3696 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2022:5095 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2022:5099 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-28737 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6355-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2022-9595.html · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2022-1734 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6355-1 · Vendor Advisory