漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
A buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead to an overflow when calculating the max_glyph_size value, allocating a smaller than needed buffer for the glyph, this further leads to a buffer overflow and a heap based out-of-bounds write. An attacker may use this vulnerability to circumvent the secure boot mechanism.
CVSS Information
N/A
Vulnerability Type
堆缓冲区溢出
Vulnerability Title
grub2 安全漏洞
Vulnerability Description
grub2是美国GNU社区的一款Linux系统引导程序。 grub2存在安全漏洞,该漏洞源于攻击者可以使用恶意制作的pf2字体实现越界写入导致内存损坏和安全引导规避。
CVSS Information
N/A
Vulnerability Type
N/A