PT-2024-8699 · Grub2+2 · Grub2+2

Cathy Hu + 1 · Published 2024-11-06 · Updated 2025-10-17 · CVE-2024-49504

Positive Technologies (AI Summary)

CVSS v4.0

7.0

High

Base vector

AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions grub2 (affected versions not specified)

Description The issue is related to grub2, where attackers with access to the grub shell can access files on encrypted disks. This is due to incorrectly used standard permissions. Exploitation of the issue may allow an attacker to bypass security restrictions and gain unauthorized access to protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

BDU:2024-10301

CVE-2024-49504

OESA-2025-1452

OPENSUSE-SU-2024:14464-1

OPENSUSE-SU-2025_0586-1

SUSE-SU-2025:0586-1

SUSE-SU-2025:20511-1

SUSE-SU-2025:20863-1

SUSE-SU-2025_0586-1

Affected Products

Debian

Suse

Grub2

References · 78

• https://osv.dev/vulnerability/CVE-2024-49504 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-49504 · Security Note
• https://osv.dev/vulnerability/OESA-2025-1452 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:20511-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:14464-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:0586-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-10301 · Security Note
• https://ubuntu.com/security/CVE-2024-49504 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:20863-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-49504 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-49504 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-49504 · Vendor Advisory
• https://bugzilla.suse.com/1237012 · Note
• https://suse.com/security/cve/CVE-2024-56738 · Note
• https://twitter.com/VulmonFeeds/status/1856800503805411584 · Twitter Post