NVD

Id
28542  
Name
CVE-2015-8370  
Description
Multiple integer underflows in Grub2 1.98 through 2.02 allow physically proximate attackers to bypass authentication, obtain sensitive information, or cause a denial of service (disk corruption) via backspace characters in the (1) grub_username_get function in grub-core/normal/auth.c or the (2) grub_password_get function in lib/crypto.c, which trigger an "Off-by-two" or "Out of bounds overwrite" memory error.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-12-16  
Modified Date
2016-12-07  
Seq
2015-8370  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
149936 28542 CVE-2015-8370 http://hmarco.org/bugs/CVE-2015-8370-Grub2-authentication-bypass.html  View
149937 28542 CVE-2015-8370 FEDORA-2015-cebe5133e7  View
149938 28542 CVE-2015-8370 FEDORA-2015-90c27b6e91  View
149939 28542 CVE-2015-8370 openSUSE-SU-2015:2375  View
149940 28542 CVE-2015-8370 SUSE-SU-2015:2385  View
149941 28542 CVE-2015-8370 SUSE-SU-2015:2386  View
149942 28542 CVE-2015-8370 SUSE-SU-2015:2387  View
149943 28542 CVE-2015-8370 openSUSE-SU-2015:2392  View
149944 28542 CVE-2015-8370 SUSE-SU-2015:2399  View
149945 28542 CVE-2015-8370 openSUSE-SU-2016:0036  View
149946 28542 CVE-2015-8370 http://packetstormsecurity.com/files/134831/Grub2-Authentication-Bypass.html  View
149947 28542 CVE-2015-8370 RHSA-2015:2623  View
149948 28542 CVE-2015-8370 20151216 Back to 28: Grub2 Authentication Bypass 0-Day [CVE-2015-8370]  View
149949 28542 CVE-2015-8370 DSA-3421  View
149950 28542 CVE-2015-8370 [oss-security] 20151215 Back to 28: Grub2 Authentication Bypass 0-Day [CVE-2015-8370]  View
149951 28542 CVE-2015-8370 http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html  View
149952 28542 CVE-2015-8370 http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html  View
149953 28542 CVE-2015-8370 20151215 Back to 28: Grub2 Authentication Bypass 0-Day [CVE-2015-8370]  View
149954 28542 CVE-2015-8370 79358  View
149955 28542 CVE-2015-8370 1034422  View
149956 28542 CVE-2015-8370 USN-2836-1  View
149957 28542 CVE-2015-8370 GLSA-201512-03  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11130 JVNDB-2015-006450 Grub2 における整数アンダーフローの脆弱性 Grub2 には、整数アンダーフローの脆弱性が存在します。 CVE-2015-8370 85595 CVE-2015-8370 28542 6.9 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006450.html 2015-12-14 2016-01-28 View