There is an issue on grub2 before version 2.06 at function readsectionasstring(). It expects a font name to be at max UINT32MAX - 1 length in bytes but it doesn't verify it before proceed with buffer allocation to read the value from the font value. An attacker may leverage that by crafting a malicious font file which has a name with UINT32MAX, leading to readsectionasstring() to an arithmetic overflow, zero-sized allocation and further heap-based buffer overflow.
{
"binaries": [
{
"binary_name": "grub-common",
"binary_version": "2.02~beta2-36ubuntu3.26"
},
{
"binary_name": "grub-coreboot",
"binary_version": "2.02~beta2-36ubuntu3.26"
},
{
"binary_name": "grub-coreboot-bin",
"binary_version": "2.02~beta2-36ubuntu3.26"
},
{
"binary_name": "grub-efi",
"binary_version": "2.02~beta2-36ubuntu3.26"
},
{
"binary_name": "grub-efi-amd64",
"binary_version": "2.02~beta2-36ubuntu3.26"
},
{
"binary_name": "grub-efi-amd64-bin",
"binary_version": "2.02~beta2-36ubuntu3.26"
},
{
"binary_name": "grub-efi-arm",
"binary_version": "2.02~beta2-36ubuntu3.26"
},
{
"binary_name": "grub-efi-arm-bin",
"binary_version": "2.02~beta2-36ubuntu3.26"
},
{
"binary_name": "grub-efi-arm64",
"binary_version": "2.02~beta2-36ubuntu3.26"
},
{
"binary_name": "grub-efi-arm64-bin",
"binary_version": "2.02~beta2-36ubuntu3.26"
},
{
"binary_name": "grub-efi-ia32",
"binary_version": "2.02~beta2-36ubuntu3.26"
},
{
"binary_name": "grub-efi-ia32-bin",
"binary_version": "2.02~beta2-36ubuntu3.26"
},
{
"binary_name": "grub-emu",
"binary_version": "2.02~beta2-36ubuntu3.26"
},
{
"binary_name": "grub-firmware-qemu",
"binary_version": "2.02~beta2-36ubuntu3.26"
},
{
"binary_name": "grub-ieee1275",
"binary_version": "2.02~beta2-36ubuntu3.26"
},
{
"binary_name": "grub-ieee1275-bin",
"binary_version": "2.02~beta2-36ubuntu3.26"
},
{
"binary_name": "grub-linuxbios",
"binary_version": "2.02~beta2-36ubuntu3.26"
},
{
"binary_name": "grub-pc",
"binary_version": "2.02~beta2-36ubuntu3.26"
},
{
"binary_name": "grub-pc-bin",
"binary_version": "2.02~beta2-36ubuntu3.26"
},
{
"binary_name": "grub-rescue-pc",
"binary_version": "2.02~beta2-36ubuntu3.26"
},
{
"binary_name": "grub-theme-starfield",
"binary_version": "2.02~beta2-36ubuntu3.26"
},
{
"binary_name": "grub-uboot",
"binary_version": "2.02~beta2-36ubuntu3.26"
},
{
"binary_name": "grub-uboot-bin",
"binary_version": "2.02~beta2-36ubuntu3.26"
},
{
"binary_name": "grub-xen",
"binary_version": "2.02~beta2-36ubuntu3.26"
},
{
"binary_name": "grub-xen-bin",
"binary_version": "2.02~beta2-36ubuntu3.26"
},
{
"binary_name": "grub-xen-host",
"binary_version": "2.02~beta2-36ubuntu3.26"
},
{
"binary_name": "grub2",
"binary_version": "2.02~beta2-36ubuntu3.26"
},
{
"binary_name": "grub2-common",
"binary_version": "2.02~beta2-36ubuntu3.26"
}
],
"availability": "No subscription required"
}{
"binaries": [
{
"binary_name": "grub-efi-amd64",
"binary_version": "2.04-1ubuntu44.1.2"
},
{
"binary_name": "grub-efi-amd64-bin",
"binary_version": "2.04-1ubuntu44.1.2"
},
{
"binary_name": "grub-efi-arm64",
"binary_version": "2.04-1ubuntu44.1.2"
},
{
"binary_name": "grub-efi-arm64-bin",
"binary_version": "2.04-1ubuntu44.1.2"
}
]
}{
"binaries": [
{
"binary_name": "grub-common",
"binary_version": "2.02-2ubuntu8.16"
},
{
"binary_name": "grub-coreboot",
"binary_version": "2.02-2ubuntu8.16"
},
{
"binary_name": "grub-coreboot-bin",
"binary_version": "2.02-2ubuntu8.16"
},
{
"binary_name": "grub-efi",
"binary_version": "2.02-2ubuntu8.16"
},
{
"binary_name": "grub-efi-amd64",
"binary_version": "2.02-2ubuntu8.16"
},
{
"binary_name": "grub-efi-amd64-bin",
"binary_version": "2.02-2ubuntu8.16"
},
{
"binary_name": "grub-efi-arm",
"binary_version": "2.02-2ubuntu8.16"
},
{
"binary_name": "grub-efi-arm-bin",
"binary_version": "2.02-2ubuntu8.16"
},
{
"binary_name": "grub-efi-arm64",
"binary_version": "2.02-2ubuntu8.16"
},
{
"binary_name": "grub-efi-arm64-bin",
"binary_version": "2.02-2ubuntu8.16"
},
{
"binary_name": "grub-efi-ia32",
"binary_version": "2.02-2ubuntu8.16"
},
{
"binary_name": "grub-efi-ia32-bin",
"binary_version": "2.02-2ubuntu8.16"
},
{
"binary_name": "grub-emu",
"binary_version": "2.02-2ubuntu8.16"
},
{
"binary_name": "grub-firmware-qemu",
"binary_version": "2.02-2ubuntu8.16"
},
{
"binary_name": "grub-ieee1275",
"binary_version": "2.02-2ubuntu8.16"
},
{
"binary_name": "grub-ieee1275-bin",
"binary_version": "2.02-2ubuntu8.16"
},
{
"binary_name": "grub-linuxbios",
"binary_version": "2.02-2ubuntu8.16"
},
{
"binary_name": "grub-pc",
"binary_version": "2.02-2ubuntu8.16"
},
{
"binary_name": "grub-pc-bin",
"binary_version": "2.02-2ubuntu8.16"
},
{
"binary_name": "grub-rescue-pc",
"binary_version": "2.02-2ubuntu8.16"
},
{
"binary_name": "grub-theme-starfield",
"binary_version": "2.02-2ubuntu8.16"
},
{
"binary_name": "grub-uboot",
"binary_version": "2.02-2ubuntu8.16"
},
{
"binary_name": "grub-uboot-bin",
"binary_version": "2.02-2ubuntu8.16"
},
{
"binary_name": "grub-xen",
"binary_version": "2.02-2ubuntu8.16"
},
{
"binary_name": "grub-xen-bin",
"binary_version": "2.02-2ubuntu8.16"
},
{
"binary_name": "grub-xen-host",
"binary_version": "2.02-2ubuntu8.16"
},
{
"binary_name": "grub2",
"binary_version": "2.02-2ubuntu8.16"
},
{
"binary_name": "grub2-common",
"binary_version": "2.02-2ubuntu8.16"
}
],
"availability": "No subscription required"
}{
"binaries": [
{
"binary_name": "grub-efi-amd64",
"binary_version": "2.04-1ubuntu47.4"
},
{
"binary_name": "grub-efi-amd64-bin",
"binary_version": "2.04-1ubuntu47.4"
},
{
"binary_name": "grub-efi-arm64",
"binary_version": "2.04-1ubuntu47.4"
},
{
"binary_name": "grub-efi-arm64-bin",
"binary_version": "2.04-1ubuntu47.4"
}
],
"availability": "No subscription required"
}{
"binaries": [
{
"binary_name": "grub-common",
"binary_version": "2.04-1ubuntu26.1"
},
{
"binary_name": "grub-coreboot",
"binary_version": "2.04-1ubuntu26.1"
},
{
"binary_name": "grub-coreboot-bin",
"binary_version": "2.04-1ubuntu26.1"
},
{
"binary_name": "grub-efi",
"binary_version": "2.04-1ubuntu26.1"
},
{
"binary_name": "grub-efi-amd64",
"binary_version": "2.04-1ubuntu26.1"
},
{
"binary_name": "grub-efi-amd64-bin",
"binary_version": "2.04-1ubuntu26.1"
},
{
"binary_name": "grub-efi-amd64-signed-template",
"binary_version": "2.04-1ubuntu26.1"
},
{
"binary_name": "grub-efi-arm",
"binary_version": "2.04-1ubuntu26.1"
},
{
"binary_name": "grub-efi-arm-bin",
"binary_version": "2.04-1ubuntu26.1"
},
{
"binary_name": "grub-efi-arm64",
"binary_version": "2.04-1ubuntu26.1"
},
{
"binary_name": "grub-efi-arm64-bin",
"binary_version": "2.04-1ubuntu26.1"
},
{
"binary_name": "grub-efi-arm64-signed-template",
"binary_version": "2.04-1ubuntu26.1"
},
{
"binary_name": "grub-efi-ia32",
"binary_version": "2.04-1ubuntu26.1"
},
{
"binary_name": "grub-efi-ia32-bin",
"binary_version": "2.04-1ubuntu26.1"
},
{
"binary_name": "grub-emu",
"binary_version": "2.04-1ubuntu26.1"
},
{
"binary_name": "grub-firmware-qemu",
"binary_version": "2.04-1ubuntu26.1"
},
{
"binary_name": "grub-ieee1275",
"binary_version": "2.04-1ubuntu26.1"
},
{
"binary_name": "grub-ieee1275-bin",
"binary_version": "2.04-1ubuntu26.1"
},
{
"binary_name": "grub-linuxbios",
"binary_version": "2.04-1ubuntu26.1"
},
{
"binary_name": "grub-pc",
"binary_version": "2.04-1ubuntu26.1"
},
{
"binary_name": "grub-pc-bin",
"binary_version": "2.04-1ubuntu26.1"
},
{
"binary_name": "grub-rescue-pc",
"binary_version": "2.04-1ubuntu26.1"
},
{
"binary_name": "grub-theme-starfield",
"binary_version": "2.04-1ubuntu26.1"
},
{
"binary_name": "grub-uboot",
"binary_version": "2.04-1ubuntu26.1"
},
{
"binary_name": "grub-uboot-bin",
"binary_version": "2.04-1ubuntu26.1"
},
{
"binary_name": "grub-xen",
"binary_version": "2.04-1ubuntu26.1"
},
{
"binary_name": "grub-xen-bin",
"binary_version": "2.04-1ubuntu26.1"
},
{
"binary_name": "grub-xen-host",
"binary_version": "2.04-1ubuntu26.1"
},
{
"binary_name": "grub2",
"binary_version": "2.04-1ubuntu26.1"
},
{
"binary_name": "grub2-common",
"binary_version": "2.04-1ubuntu26.1"
}
],
"availability": "No subscription required"
}{
"binaries": [
{
"binary_name": "grub-efi-amd64",
"binary_version": "2.04-1ubuntu47.4"
},
{
"binary_name": "grub-efi-amd64-bin",
"binary_version": "2.04-1ubuntu47.4"
},
{
"binary_name": "grub-efi-arm64",
"binary_version": "2.04-1ubuntu47.4"
},
{
"binary_name": "grub-efi-arm64-bin",
"binary_version": "2.04-1ubuntu47.4"
}
],
"availability": "No subscription required"
}{
"binaries": [
{
"binary_name": "grub-common",
"binary_version": "2.02~beta2-9ubuntu1.20"
},
{
"binary_name": "grub-coreboot",
"binary_version": "2.02~beta2-9ubuntu1.20"
},
{
"binary_name": "grub-coreboot-bin",
"binary_version": "2.02~beta2-9ubuntu1.20"
},
{
"binary_name": "grub-efi",
"binary_version": "2.02~beta2-9ubuntu1.20"
},
{
"binary_name": "grub-efi-amd64",
"binary_version": "2.02~beta2-9ubuntu1.20"
},
{
"binary_name": "grub-efi-amd64-bin",
"binary_version": "2.02~beta2-9ubuntu1.20"
},
{
"binary_name": "grub-efi-arm",
"binary_version": "2.02~beta2-9ubuntu1.20"
},
{
"binary_name": "grub-efi-arm-bin",
"binary_version": "2.02~beta2-9ubuntu1.20"
},
{
"binary_name": "grub-efi-arm64",
"binary_version": "2.02~beta2-9ubuntu1.20"
},
{
"binary_name": "grub-efi-arm64-bin",
"binary_version": "2.02~beta2-9ubuntu1.20"
},
{
"binary_name": "grub-efi-ia32",
"binary_version": "2.02~beta2-9ubuntu1.20"
},
{
"binary_name": "grub-efi-ia32-bin",
"binary_version": "2.02~beta2-9ubuntu1.20"
},
{
"binary_name": "grub-emu",
"binary_version": "2.02~beta2-9ubuntu1.20"
},
{
"binary_name": "grub-firmware-qemu",
"binary_version": "2.02~beta2-9ubuntu1.20"
},
{
"binary_name": "grub-ieee1275",
"binary_version": "2.02~beta2-9ubuntu1.20"
},
{
"binary_name": "grub-ieee1275-bin",
"binary_version": "2.02~beta2-9ubuntu1.20"
},
{
"binary_name": "grub-linuxbios",
"binary_version": "2.02~beta2-9ubuntu1.20"
},
{
"binary_name": "grub-pc",
"binary_version": "2.02~beta2-9ubuntu1.20"
},
{
"binary_name": "grub-pc-bin",
"binary_version": "2.02~beta2-9ubuntu1.20"
},
{
"binary_name": "grub-rescue-pc",
"binary_version": "2.02~beta2-9ubuntu1.20"
},
{
"binary_name": "grub-theme-starfield",
"binary_version": "2.02~beta2-9ubuntu1.20"
},
{
"binary_name": "grub-uboot",
"binary_version": "2.02~beta2-9ubuntu1.20"
},
{
"binary_name": "grub-uboot-bin",
"binary_version": "2.02~beta2-9ubuntu1.20"
},
{
"binary_name": "grub-xen",
"binary_version": "2.02~beta2-9ubuntu1.20"
},
{
"binary_name": "grub-xen-bin",
"binary_version": "2.02~beta2-9ubuntu1.20"
},
{
"binary_name": "grub2",
"binary_version": "2.02~beta2-9ubuntu1.20"
},
{
"binary_name": "grub2-common",
"binary_version": "2.02~beta2-9ubuntu1.20"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}