Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:grub2:2.01:*:*:*:*:*:*:*

part: a version: 2.01 update: *

VendorGnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9)
ProductGrub2 (21a5cc08-627b-5b9f-871f-3b19ef873057)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/grub2 purl2cpe 2026-06-01 10:11:53.465595
pkg:deb/ubuntu/grub2 purl2cpe 2026-06-01 10:11:53.465596
pkg:github/3mdeb/grub2 purl2cpe 2026-06-01 10:11:53.465598
pkg:github/fanjinfei/grub2 purl2cpe 2026-06-01 10:11:53.465599
pkg:github/flihp/grub2 purl2cpe 2026-06-01 10:11:53.465600
pkg:gitlab/kalilinux/grub2 purl2cpe 2026-06-01 10:11:53.465602
pkg:gnu/grub purl2cpe 2026-06-01 10:11:53.465603
pkg:rpm/fedora/grub2 purl2cpe 2026-06-01 10:11:53.465604
pkg:rpm/opensuse/grub2 purl2cpe 2026-06-01 10:11:53.465606

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-8370 vulnerable 2026-06-08 05:07:03.779939 Details available
Multiple integer underflows in Grub2 1.98 through 2.02 allow physically proximate attackers to bypass authentication, obtain sensitive information, or cause a denial of service (disk corruption) via backspace characters in the (1) grub_username_get function in grub-core/normal/auth.c or the (2) grub_password_get function in lib/crypto.c, which trigger an "Off-by-two" or "Out of bounds overwrite" memory error.
Published: 2015-12-16T00:00:00.000Z
Updated: 2024-10-21T16:51:57.721Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.