PatchFirst · Свежие уязвимости
За последние 30 дней в grub2 опубликовано уязвимостей: 1; в каталоге KEV: 0.
Уязвимостей: 62
A certain Debian patch for GNU GRUB uses world-readable permissions for grub.cfg, which allows local users to obtain password hashes, as demonstrated by reading the password_pbkdf2 directive in the file.
GNU GRand Unified Bootloader (GRUB) 2 1.97 only compares the submitted portion of a password with the actual password, which makes it easier for physically proximate attackers to conduct brute force attacks and bypass authentication by submitting a password whose length is 1.
Сопоставьте установленный стек и версии со свежими базами уязвимостей.