VDB
CVE-2021-46705
CVE-2021-46705
PUBLISHED
CVSS 5.5 MEDIUM
A Insecure Temporary File vulnerability in grub-once of grub2 in SUSE Linux Enterprise Server 15 SP4, openSUSE Factory allows local attackers to truncate arbitrary files. This issue affects: SUSE Linux Enterprise Server 15 SP4 grub2 versions prior to 2.06-150400.7.1. SUSE openSUSE Factory grub2 versions prior to 2.06-18.1.
EPSS 0.24% · 15.1th percentile
Risk Scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
EPSS Score
0.24%
15.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| SUSE | openSUSE Factory | * |
| SUSE | SUSE Linux Enterprise Server 15 SP4 | grub2 |
| gnu | grub2 | 0, 0 |
Timeline
- Mar 16, 2022 CVE Published
- Mar 17, 2022 EPSS Score
- May 8, 2022 EPSS Score
- Jun 29, 2022 EPSS Score
- Aug 20, 2022 EPSS Score
- Oct 11, 2022 EPSS Score
- Dec 2, 2022 EPSS Score
- Jan 23, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 15, 2023 EPSS Score
- May 6, 2023 EPSS Score
- Jun 27, 2023 EPSS Score