Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Memory Corruption Vulnerability in Grub-Legacy's XFS Implementation
Vulnerability Description
An attacker with local access to a system (either through a disk or external drive) can present a modified XFS partition to grub-legacy in such a way to exploit a memory corruption in grub’s XFS file system implementation.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:H
Vulnerability Type
内存缓冲区边界内操作的限制不恰当
Vulnerability Title
Xen 缓冲区错误漏洞
Vulnerability Description
Xen是英国剑桥（Cambridge）大学的一款开源的虚拟机监视器产品。该产品能够使不同和不兼容的操作系统运行在同一台计算机上，并支持在运行时进行迁移，保证正常运行并且避免宕机。 Xen存在安全漏洞，该漏洞源于libfsimage disk handling存在安全漏洞。攻击者可利用该漏洞向grub遗留系统提供修改后的XFS分区，从而利用grub的XFS文件系统实现内存损坏进行攻击。
CVSS Information
N/A
Vulnerability Type
N/A