A flaw was found in grub2 in versions prior to 2.06. The option parser allows an attacker to write past the end of a heap-allocated buffer by calling certain commands with a large number of specific short forms of options. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
{ "binaries": [ { "binary_name": "grub-efi-amd64-signed", "binary_version": "1.167~18.04.5+2.04-1ubuntu44.1.2" }, { "binary_name": "grub-efi-arm64-signed", "binary_version": "1.167~18.04.5+2.04-1ubuntu44.1.2" } ], "availability": "No subscription required", "ubuntu_priority": "medium" }
{ "binaries": [ { "binary_name": "grub-efi-amd64", "binary_version": "2.04-1ubuntu44.1.2" }, { "binary_name": "grub-efi-amd64-bin", "binary_version": "2.04-1ubuntu44.1.2" }, { "binary_name": "grub-efi-amd64-dbg", "binary_version": "2.04-1ubuntu44.1.2" }, { "binary_name": "grub-efi-arm64", "binary_version": "2.04-1ubuntu44.1.2" }, { "binary_name": "grub-efi-arm64-bin", "binary_version": "2.04-1ubuntu44.1.2" }, { "binary_name": "grub-efi-arm64-dbg", "binary_version": "2.04-1ubuntu44.1.2" } ], "availability": "No subscription required", "ubuntu_priority": "medium" }
{ "binaries": [ { "binary_name": "grub-efi-amd64", "binary_version": "2.04-1ubuntu44.2" }, { "binary_name": "grub-efi-amd64-bin", "binary_version": "2.04-1ubuntu44.2" }, { "binary_name": "grub-efi-amd64-dbg", "binary_version": "2.04-1ubuntu44.2" }, { "binary_name": "grub-efi-arm64", "binary_version": "2.04-1ubuntu44.2" }, { "binary_name": "grub-efi-arm64-bin", "binary_version": "2.04-1ubuntu44.2" }, { "binary_name": "grub-efi-arm64-dbg", "binary_version": "2.04-1ubuntu44.2" } ], "availability": "No subscription required", "ubuntu_priority": "medium" }
{ "binaries": [ { "binary_name": "grub-efi-amd64", "binary_version": "2.06-2ubuntu7" }, { "binary_name": "grub-efi-amd64-bin", "binary_version": "2.06-2ubuntu7" }, { "binary_name": "grub-efi-amd64-dbg", "binary_version": "2.06-2ubuntu7" }, { "binary_name": "grub-efi-arm64", "binary_version": "2.06-2ubuntu7" }, { "binary_name": "grub-efi-arm64-bin", "binary_version": "2.06-2ubuntu7" }, { "binary_name": "grub-efi-arm64-dbg", "binary_version": "2.06-2ubuntu7" } ], "availability": "No subscription required", "ubuntu_priority": "medium" }