Oval Definition:oval:org.cisecurity:def:367
Revision Date:2016-02-26Version:2
Title:DSA-3421-1 -- grub2 -- security update
Description:Hector Marco and Ismael Ripoll, from Cybersecurity UPV Research Group, found an integer underflow vulnerability in Grub2, a popular bootloader. A local attacker can bypass the Grub2 authentication by inserting a crafted input as username or password.
Family:unixClass:patch
Status:ACCEPTEDReference(s):CVE-2015-8370
DSA-3421-1
Platform(s):Debian 8
Debian GNU/kFreeBSD 7.0
Debian GNU/Linux 7.0
Product(s):grub2
Definition Synopsis
  • Debian 7
  • Debian 7 is installed
  • AND GNU/Linux or GNU/kFreeBSD kernel
  • Debian GNU/Linux is installed
  • OR Debian GNU/kFreeBSD is installed
  • AND grub2 is earlier than 0:1.99-27+deb7u3
  • OR Debian 8
  • Debian 8 is installed
  • AND grub2 is earlier than 0:2.02~beta2-22+deb8u1
  • BACK