DEBIAN-CVE-2017-9763

DEBIAN-CVE-2017-9763 PUBLISHED CVSS 7.5 HIGH

The grub_ext2_read_block function in fs/ext2.c in GNU GRUB before 2013-11-12, as used in shlr/grub/fs/ext2.c in radare2 1.5.0, allows remote attackers to cause a denial of service (excessive stack use and application crash) via a crafted binary file, related to use of a variable-size stack array.

Risk Scores

CVSS v3.0

7.5

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

Vendor	Product	Versions
Debian:14	grub2	0, 0, 0
Debian:12	grub2	0, 0, 0
Debian:11	grub2	0, 0, 0
Debian:13	grub2	0, 0, 0

Timeline

Jun 19, 2017 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2017-9763 advisory

Open in Interactive Console →