VDB
DEBIAN-CVE-2025-1118
DEBIAN-CVE-2025-1118
PUBLISHED
CVSS 4.400000095367432 MEDIUM
A flaw was found in grub2. Grub's dump command is not blocked when grub is in lockdown mode, which allows the user to read any memory information, and an attacker may leverage this in order to extract signatures, salts, and other sensitive information from the memory.
Risk Scores
CVSS 3.1
4.400000095367432
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:14 | grub2 | 0 |
| Debian:12 | grub2 | 0, 2.06-13, 2.06-13+deb12u1 |
| Debian:13 | grub2 | 0 |
Timeline
- Feb 19, 2025 CVE Published
- Oct 23, 2026 CVE Updated