UBUNTU-CVE-2024-45780

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2024-45780

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-45780.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2024-45780

Upstream

CVE-2024-45780

Published

2025-02-18T18:00:00Z

Modified

2025-10-10T15:21:26Z

Severity

6.7 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
6.7 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Ubuntu - medium

Summary

[none]

Details

A flaw was found in grub2. When reading tar files, grub2 allocates an internal buffer for the file name. However, it fails to properly verify the allocation against possible integer overflows. It's possible to cause the allocation length to overflow with a crafted tar file, leading to a heap out-of-bounds write. This flaw eventually allows an attacker to circumvent secure boot protections.

References

Affected packages

Ubuntu:22.04:LTS

grub2-signed

Package

Name: grub2-signed
Purl: pkg:deb/ubuntu/grub2-signed@1.187.12?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.173

1.174

1.176

1.177

1.178

1.179

1.180

1.182~22.04.1

1.187.2

1.187.3~22.04.1

1.187.4~22.04.1

1.187.6

1.187.12

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "grub-efi-amd64-signed",
            "binary_version": "1.187.12+2.06-2ubuntu14.8"
        },
        {
            "binary_name": "grub-efi-arm64-signed",
            "binary_version": "1.187.12+2.06-2ubuntu14.8"
        }
    ]
}

grub2-unsigned

Package

Name: grub2-unsigned
Purl: pkg:deb/ubuntu/grub2-unsigned@2.06-2ubuntu14.8?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.04-1ubuntu47

2.04-1ubuntu48

2.06-2ubuntu3

2.06-2ubuntu4

2.06-2ubuntu5

2.06-2ubuntu6

2.06-2ubuntu7

2.06-2ubuntu10

2.06-2ubuntu14

2.06-2ubuntu14.1

2.06-2ubuntu14.2

2.06-2ubuntu14.4

2.06-2ubuntu14.8

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "grub-efi-amd64",
            "binary_version": "2.06-2ubuntu14.8"
        },
        {
            "binary_name": "grub-efi-amd64-bin",
            "binary_version": "2.06-2ubuntu14.8"
        },
        {
            "binary_name": "grub-efi-arm64",
            "binary_version": "2.06-2ubuntu14.8"
        },
        {
            "binary_name": "grub-efi-arm64-bin",
            "binary_version": "2.06-2ubuntu14.8"
        }
    ]
}

Ubuntu:24.04:LTS

grub2-signed

Package

Name: grub2-signed
Purl: pkg:deb/ubuntu/grub2-signed@1.202.5?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.197

1.199

1.201

1.202

1.202.2

1.202.5

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "grub-efi-amd64-signed",
            "binary_version": "1.202.5+2.12-1ubuntu7.3"
        },
        {
            "binary_name": "grub-efi-arm64-signed",
            "binary_version": "1.202.5+2.12-1ubuntu7.3"
        }
    ]
}

grub2-unsigned

Package

Name: grub2-unsigned
Purl: pkg:deb/ubuntu/grub2-unsigned@2.12-1ubuntu7.3?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.12~rc1-10ubuntu4

2.12~rc1-12ubuntu2

2.12-1ubuntu1

2.12-1ubuntu7

2.12-1ubuntu7.1

2.12-1ubuntu7.3

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "grub-efi-amd64",
            "binary_version": "2.12-1ubuntu7.3"
        },
        {
            "binary_name": "grub-efi-amd64-bin",
            "binary_version": "2.12-1ubuntu7.3"
        },
        {
            "binary_name": "grub-efi-arm64",
            "binary_version": "2.12-1ubuntu7.3"
        },
        {
            "binary_name": "grub-efi-arm64-bin",
            "binary_version": "2.12-1ubuntu7.3"
        }
    ]
}

Ubuntu:25.04

grub2-signed

Package

Name: grub2-signed
Purl: pkg:deb/ubuntu/grub2-signed@1.212?arch=source&distro=plucky

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.209

1.209.1

1.211

1.212

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "grub-efi-amd64-signed",
            "binary_version": "1.212+2.12-5ubuntu11"
        },
        {
            "binary_name": "grub-efi-arm64-signed",
            "binary_version": "1.212+2.12-5ubuntu11"
        }
    ]
}

grub2-unsigned

Package

Name: grub2-unsigned
Purl: pkg:deb/ubuntu/grub2-unsigned@2.12-5ubuntu11?arch=source&distro=plucky

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.12-5ubuntu5

2.12-5ubuntu5.1

2.12-5ubuntu9

2.12-5ubuntu11

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "grub-efi-amd64",
            "binary_version": "2.12-5ubuntu11"
        },
        {
            "binary_name": "grub-efi-amd64-bin",
            "binary_version": "2.12-5ubuntu11"
        },
        {
            "binary_name": "grub-efi-amd64-unsigned",
            "binary_version": "2.12-5ubuntu11"
        },
        {
            "binary_name": "grub-efi-arm64",
            "binary_version": "2.12-5ubuntu11"
        },
        {
            "binary_name": "grub-efi-arm64-bin",
            "binary_version": "2.12-5ubuntu11"
        },
        {
            "binary_name": "grub-efi-arm64-unsigned",
            "binary_version": "2.12-5ubuntu11"
        }
    ]
}

Ubuntu:25.10

grub2-signed

Package

Name: grub2-signed
Purl: pkg:deb/ubuntu/grub2-signed@1.214?arch=source&distro=questing

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.212

1.213

1.214

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "grub-efi-amd64-signed",
            "binary_version": "1.214+2.14~git20250718.0e36779-1ubuntu4"
        },
        {
            "binary_name": "grub-efi-arm64-signed",
            "binary_version": "1.214+2.14~git20250718.0e36779-1ubuntu4"
        }
    ]
}

grub2-unsigned

Package

Name: grub2-unsigned
Purl: pkg:deb/ubuntu/grub2-unsigned@2.14~git20250718.0e36779-1ubuntu4?arch=source&distro=questing

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.12-5ubuntu11

2.14~git20250718.0e36779-1ubuntu1

2.14~git20250718.0e36779-1ubuntu4

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "grub-efi-amd64",
            "binary_version": "2.14~git20250718.0e36779-1ubuntu4"
        },
        {
            "binary_name": "grub-efi-amd64-bin",
            "binary_version": "2.14~git20250718.0e36779-1ubuntu4"
        },
        {
            "binary_name": "grub-efi-amd64-unsigned",
            "binary_version": "2.14~git20250718.0e36779-1ubuntu4"
        },
        {
            "binary_name": "grub-efi-arm64",
            "binary_version": "2.14~git20250718.0e36779-1ubuntu4"
        },
        {
            "binary_name": "grub-efi-arm64-bin",
            "binary_version": "2.14~git20250718.0e36779-1ubuntu4"
        },
        {
            "binary_name": "grub-efi-arm64-unsigned",
            "binary_version": "2.14~git20250718.0e36779-1ubuntu4"
        }
    ]
}

Ubuntu:Pro:14.04:LTS

grub2

Package

Name: grub2
Purl: pkg:deb/ubuntu/grub2@2.02~beta2-9ubuntu1.21?arch=source&distro=esm-infra-legacy/trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.00-19ubuntu2

2.00-19ubuntu3

2.00-19ubuntu4

2.00-20

2.00-21

2.00-22

2.02~beta2-5

2.02~beta2-6

2.02~beta2-7

2.02~beta2-8

2.02~beta2-9

2.02~beta2-9ubuntu1

2.02~beta2-9ubuntu1.1

2.02~beta2-9ubuntu1.2

2.02~beta2-9ubuntu1.3

2.02~beta2-9ubuntu1.4

2.02~beta2-9ubuntu1.5

2.02~beta2-9ubuntu1.6

2.02~beta2-9ubuntu1.7

2.02~beta2-9ubuntu1.8

2.02~beta2-9ubuntu1.11

2.02~beta2-9ubuntu1.12

2.02~beta2-9ubuntu1.14

2.02~beta2-9ubuntu1.15

2.02~beta2-9ubuntu1.16

2.02~beta2-9ubuntu1.17

2.02~beta2-9ubuntu1.20

2.02~beta2-9ubuntu1.21

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "grub-common",
            "binary_version": "2.02~beta2-9ubuntu1.21"
        },
        {
            "binary_name": "grub-coreboot",
            "binary_version": "2.02~beta2-9ubuntu1.21"
        },
        {
            "binary_name": "grub-coreboot-bin",
            "binary_version": "2.02~beta2-9ubuntu1.21"
        },
        {
            "binary_name": "grub-efi",
            "binary_version": "2.02~beta2-9ubuntu1.21"
        },
        {
            "binary_name": "grub-efi-amd64",
            "binary_version": "2.02~beta2-9ubuntu1.21"
        },
        {
            "binary_name": "grub-efi-amd64-bin",
            "binary_version": "2.02~beta2-9ubuntu1.21"
        },
        {
            "binary_name": "grub-efi-arm",
            "binary_version": "2.02~beta2-9ubuntu1.21"
        },
        {
            "binary_name": "grub-efi-arm-bin",
            "binary_version": "2.02~beta2-9ubuntu1.21"
        },
        {
            "binary_name": "grub-efi-arm64",
            "binary_version": "2.02~beta2-9ubuntu1.21"
        },
        {
            "binary_name": "grub-efi-arm64-bin",
            "binary_version": "2.02~beta2-9ubuntu1.21"
        },
        {
            "binary_name": "grub-efi-ia32",
            "binary_version": "2.02~beta2-9ubuntu1.21"
        },
        {
            "binary_name": "grub-efi-ia32-bin",
            "binary_version": "2.02~beta2-9ubuntu1.21"
        },
        {
            "binary_name": "grub-emu",
            "binary_version": "2.02~beta2-9ubuntu1.21"
        },
        {
            "binary_name": "grub-firmware-qemu",
            "binary_version": "2.02~beta2-9ubuntu1.21"
        },
        {
            "binary_name": "grub-ieee1275",
            "binary_version": "2.02~beta2-9ubuntu1.21"
        },
        {
            "binary_name": "grub-ieee1275-bin",
            "binary_version": "2.02~beta2-9ubuntu1.21"
        },
        {
            "binary_name": "grub-linuxbios",
            "binary_version": "2.02~beta2-9ubuntu1.21"
        },
        {
            "binary_name": "grub-pc",
            "binary_version": "2.02~beta2-9ubuntu1.21"
        },
        {
            "binary_name": "grub-pc-bin",
            "binary_version": "2.02~beta2-9ubuntu1.21"
        },
        {
            "binary_name": "grub-rescue-pc",
            "binary_version": "2.02~beta2-9ubuntu1.21"
        },
        {
            "binary_name": "grub-theme-starfield",
            "binary_version": "2.02~beta2-9ubuntu1.21"
        },
        {
            "binary_name": "grub-uboot",
            "binary_version": "2.02~beta2-9ubuntu1.21"
        },
        {
            "binary_name": "grub-uboot-bin",
            "binary_version": "2.02~beta2-9ubuntu1.21"
        },
        {
            "binary_name": "grub-xen",
            "binary_version": "2.02~beta2-9ubuntu1.21"
        },
        {
            "binary_name": "grub-xen-bin",
            "binary_version": "2.02~beta2-9ubuntu1.21"
        },
        {
            "binary_name": "grub2",
            "binary_version": "2.02~beta2-9ubuntu1.21"
        },
        {
            "binary_name": "grub2-common",
            "binary_version": "2.02~beta2-9ubuntu1.21"
        }
    ]
}

grub2-signed

Package

Name: grub2-signed
Purl: pkg:deb/ubuntu/grub2-signed@1.34.24?arch=source&distro=esm-infra-legacy/trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.22

1.23

1.24

1.25

1.26

1.27

1.30

1.31

1.32

1.33

1.34

1.34.1

1.34.2

1.34.3

1.34.4

1.34.5

1.34.6

1.34.7

1.34.8

1.34.9

1.34.13

1.34.14

1.34.16

1.34.17

1.34.18

1.34.20

1.34.22

1.34.24

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "grub-efi-amd64-signed",
            "binary_version": "1.34.24+2.02~beta2-9ubuntu1.21"
        }
    ]
}

Ubuntu:Pro:16.04:LTS

grub2-signed

Package

Name: grub2-signed
Purl: pkg:deb/ubuntu/grub2-signed@1.167~16.04.6?arch=source&distro=esm-infra/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.55

1.56

1.57

1.58

1.59

1.61

1.62

1.63

1.64

1.65

1.66

1.66.1

1.66.2

1.66.6

1.66.7

1.66.8

1.66.9

1.66.11

1.66.12

1.66.14

1.66.15

1.66.16

1.66.17

1.66.18

1.66.19

1.66.20

1.66.21

1.66.22

1.66.23

1.66.26

1.66.27

1.66.28

1.66.29

1.167~16.04.1

1.167~16.04.2

1.167~16.04.4

1.167~16.04.6

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "grub-efi-amd64-signed",
            "binary_version": "1.167~16.04.6+2.04-1ubuntu44.1.2"
        },
        {
            "binary_name": "grub-efi-arm64-signed",
            "binary_version": "1.167~16.04.6+2.04-1ubuntu44.1.2"
        }
    ]
}

grub2-unsigned

Package

Name: grub2-unsigned
Purl: pkg:deb/ubuntu/grub2-unsigned@2.04-1ubuntu44.1.2?arch=source&distro=esm-infra/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.04-1ubuntu44

2.04-1ubuntu44.1

2.04-1ubuntu44.1.2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "grub-efi-amd64",
            "binary_version": "2.04-1ubuntu44.1.2"
        },
        {
            "binary_name": "grub-efi-amd64-bin",
            "binary_version": "2.04-1ubuntu44.1.2"
        },
        {
            "binary_name": "grub-efi-arm64",
            "binary_version": "2.04-1ubuntu44.1.2"
        },
        {
            "binary_name": "grub-efi-arm64-bin",
            "binary_version": "2.04-1ubuntu44.1.2"
        }
    ]
}

Ubuntu:Pro:18.04:LTS

grub2-signed

Package

Name: grub2-signed
Purl: pkg:deb/ubuntu/grub2-signed@1.187.3~18.04.1?arch=source&distro=esm-infra/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.85

1.86

1.87

1.89

1.91

1.92

1.93

1.93.1

1.93.2

1.93.3

1.93.4

1.93.5

1.93.7

1.93.8

1.93.10

1.93.11

1.93.13

1.93.14

1.93.15

1.93.16

1.93.18

1.93.19

1.93.20

1.93.21

1.93.22

1.93.24

1.167~18.04.1

1.167~18.04.3

1.167~18.04.5

1.173.2~18.04.1

1.187.2~18.04.1

1.187.3~18.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "grub-efi-amd64-signed",
            "binary_version": "1.187.3~18.04.1+2.06-2ubuntu14.1"
        },
        {
            "binary_name": "grub-efi-arm64-signed",
            "binary_version": "1.187.3~18.04.1+2.06-2ubuntu14.1"
        }
    ]
}

grub2-unsigned

Package

Name: grub2-unsigned
Purl: pkg:deb/ubuntu/grub2-unsigned@2.06-2ubuntu14.1?arch=source&distro=esm-infra/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.04-1ubuntu44

2.04-1ubuntu44.1

2.04-1ubuntu44.1.2

2.04-1ubuntu47.4

2.06-2ubuntu14

2.06-2ubuntu14.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "grub-efi-amd64",
            "binary_version": "2.06-2ubuntu14.1"
        },
        {
            "binary_name": "grub-efi-amd64-bin",
            "binary_version": "2.06-2ubuntu14.1"
        },
        {
            "binary_name": "grub-efi-arm64",
            "binary_version": "2.06-2ubuntu14.1"
        },
        {
            "binary_name": "grub-efi-arm64-bin",
            "binary_version": "2.06-2ubuntu14.1"
        }
    ]
}

Ubuntu:Pro:20.04:LTS

grub2-signed

Package

Name: grub2-signed
Purl: pkg:deb/ubuntu/grub2-signed@1.187.12~20.04?arch=source&distro=esm-infra/focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.128

1.129

1.130

1.131

1.133

1.134

1.135

1.136

1.137

1.138

1.139

1.140

1.141

1.142

1.142.1

1.142.3

1.142.4

1.142.5

1.142.6

1.142.8

1.142.9

1.142.10

1.142.11

1.167

1.167.2

1.173.2~20.04.1

1.173.4

1.187.2~20.04.2

1.187.3~20.04.1

1.187.4~20.04.1

1.187.6~20.04.1

1.187.12~20.04

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "grub-efi-amd64-signed",
            "binary_version": "1.187.12~20.04+2.06-2ubuntu14.8"
        },
        {
            "binary_name": "grub-efi-arm64-signed",
            "binary_version": "1.187.12~20.04+2.06-2ubuntu14.8"
        }
    ]
}

grub2-unsigned

Package

Name: grub2-unsigned
Purl: pkg:deb/ubuntu/grub2-unsigned@2.06-2ubuntu14.8?arch=source&distro=esm-infra/focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.04-1ubuntu44

2.04-1ubuntu44.2

2.04-1ubuntu47.4

2.04-1ubuntu47.5

2.06-2ubuntu14

2.06-2ubuntu14.1

2.06-2ubuntu14.2

2.06-2ubuntu14.4

2.06-2ubuntu14.8

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "grub-efi-amd64",
            "binary_version": "2.06-2ubuntu14.8"
        },
        {
            "binary_name": "grub-efi-amd64-bin",
            "binary_version": "2.06-2ubuntu14.8"
        },
        {
            "binary_name": "grub-efi-arm64",
            "binary_version": "2.06-2ubuntu14.8"
        },
        {
            "binary_name": "grub-efi-arm64-bin",
            "binary_version": "2.06-2ubuntu14.8"
        }
    ]
}