Medium severity · published Mar 3, 2025
CVE-2024-45780
Grub2: fs/tar: integer overflow causes heap oob write
6.7
CVSS
0.3%
EPSS
No
On KEV
Description
A flaw was found in grub2. When reading tar files, grub2 allocates an internal buffer for the file name. However, it fails to properly verify the allocation against possible integer overflows. It's possible to cause the allocation length to overflow with a crafted tar file, leading to a heap out-of-bounds write. This flaw eventually allows an attacker to circumvent secure boot protections.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 22% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GR
Grub2 · Gnu
through 2.12 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-45780
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-45780
Third Party Advisory
https://access.redhat.com/security/cve/CVE-2024-45780
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=2345856
Mailing List
https://lists.gnu.org/archive/html/grub-devel/2025-02/msg00024.html
More from Grub2
8.8
CVE-2024-56737
GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem
8.6
CVE-2022-2601
A buffer overflow was found in grub_font_construct_glyph()
8.2
CVE-2021-20233
A flaw was found in grub2 in versions prior to 2.06
8.2
CVE-2020-25632
A flaw was found in grub2 in versions prior to 2.06
8.2
CVE-2020-10713
A flaw was found in grub2, prior to version 2.06