CVE-2024-45780

{"id": "CVE-2024-45780", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "secalert@redhat.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.8}]}, "published": "2025-03-03T15:15:14.950", "references": [{"url": "https://access.redhat.com/security/cve/CVE-2024-45780", "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2345856", "source": "secalert@redhat.com"}, {"url": "https://lists.gnu.org/archive/html/grub-devel/2025-02/msg00024.html", "source": "secalert@redhat.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "secalert@redhat.com", "description": [{"lang": "en", "value": "CWE-787"}]}], "descriptions": [{"lang": "en", "value": "A flaw was found in grub2. When reading tar files, grub2 allocates an internal buffer for the file name. However, it fails to properly verify the allocation against possible integer overflows. It's possible to cause the allocation length to overflow with a crafted tar file, leading to a heap out-of-bounds write. This flaw eventually allows an attacker to circumvent secure boot protections."}, {"lang": "es", "value": "Se encontr\u00f3 una falla en grub2. Al leer archivos tar, grub2 asigna un b\u00fafer interno para el nombre del archivo. Sin embargo, no verifica correctamente la asignaci\u00f3n contra posibles desbordamientos de n\u00fameros enteros. Es posible provocar que la longitud de la asignaci\u00f3n se desborde con un archivo tar manipulado, lo que lleva a una escritura fuera de los l\u00edmites en el mont\u00f3n. Esta falla finalmente permite a un atacante eludir las protecciones de arranque seguro."}], "lastModified": "2025-03-05T21:15:19.167", "sourceIdentifier": "secalert@redhat.com"}