Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:grub:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorGnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9)
ProductGrub (c69a4b8c-27db-5e77-9e74-f43a4628746c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/grub2 purl2cpe 2026-06-01 10:11:55.679726
pkg:deb/ubuntu/grub2 purl2cpe 2026-06-01 10:11:55.679727
pkg:github/coreos/grub purl2cpe 2026-06-01 10:11:55.679728
pkg:github/loongarch64/grub purl2cpe 2026-06-01 10:11:55.679730
pkg:github/olafhering/grub purl2cpe 2026-06-01 10:11:55.679731
pkg:gitlab/kalilinux/grub2 purl2cpe 2026-06-01 10:11:55.679733
pkg:gnu/grub purl2cpe 2026-06-01 10:11:55.679734
pkg:rpm/fedora/grub2 purl2cpe 2026-06-01 10:11:55.679736
pkg:rpm/opensuse/grub2 purl2cpe 2026-06-01 10:11:55.679737

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-4577 vulnerable 2026-06-08 05:04:48.325316 Details available
A certain Debian patch for GNU GRUB uses world-readable permissions for grub.cfg, which allows local users to obtain password hashes, as demonstrated by reading the password_pbkdf2 directive in the file.
Published: 2014-05-12T14:00:00.000Z
Updated: 2025-02-13T16:27:10.807Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.