CVE-2024-45780
MediumCVSS 6.7Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
A flaw was found in grub2 when reading tar files. The function allocating a buffer for the file name does not properly check for integer overflows, which can lead to a heap out-of-bounds write. This allows an attacker to bypass secure boot protections.
Risk Assessment
An attacker can supply a crafted tar file that causes a buffer overflow and potentially execute arbitrary code during system boot, compromising the integrity of the secure boot process.
Recommendation
Immediately update grub2 to a version containing the fix for this vulnerability. Until the update is applied, avoid loading untrusted tar files via grub2.
Original NVD description (English source)
A flaw was found in grub2. When reading tar files, grub2 allocates an internal buffer for the file name. However, it fails to properly verify the allocation against possible integer overflows. It's possible to cause the allocation length to overflow with a crafted tar file, leading to a heap out-of-bounds write. This flaw eventually allows an attacker to circumvent secure boot protections.