VDB

DEBIAN-CVE-2024-45778

DEBIAN-CVE-2024-45778 PUBLISHED CVSS 5.5 MEDIUM

A stack overflow flaw was found when reading a BFS file system. A crafted BFS filesystem may lead to an uncontrolled loop, causing grub2 to crash.

Risk Scores

CVSS v3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Debian:11grub22.12-6, 2.06-4, 2.06-4
Debian:14grub20, 0
Debian:13grub20, 0
Debian:12grub22.12~rc1-2, 2.12~rc1-3, 2.12~rc1-6

Timeline

  • Mar 3, 2025 CVE Published
  • May 16, 2026 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›