CVE-2024-56737 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	8.8 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 42%

Affected Products (NVD)

Vendor	Product	Version
gnu	grub2	𝑥 ≤ 2.12

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

grub2

bookworm	no-dsa
bookworm (security)	vulnerable
bullseye	vulnerable
bullseye (security)	vulnerable
forky	2.14~git20250718.0e36779-2 fixed
sid	2.14~git20250718.0e36779-2 fixed
trixie	2.12-9 fixed

Ubuntu Releases

Ubuntu Product

Codename

grub2

bionic	not-affected
focal	not-affected
jammy	not-affected
noble	not-affected
oracular	not-affected
plucky	not-affected
questing	not-affected
trusty	ignored
xenial	not-affected

grub2-unsigned

bionic	needs-triage
focal	needs-triage
jammy	needs-triage
noble	needs-triage
oracular	ignored
plucky	needs-triage
questing	needs-triage
xenial	needs-triage

grub2-signed

bionic	needs-triage
focal	needs-triage
jammy	needs-triage
noble	needs-triage
oracular	ignored
plucky	needs-triage
questing	needs-triage
trusty	ignored
xenial	needs-triage

openSUSE / SLES Releases

openSUSE Product

Release

grub2

suse enterprise desktop 15 SP6	2.12-150600.8.18.2 fixed
suse enterprise desktop 15 SP7	2.12-150700.17.4 fixed
suse enterprise sap 15 SP6	2.12-150600.8.18.2 fixed
suse enterprise sap 15 SP7	2.12-150700.17.4 fixed
suse enterprise server 12 SP3	2.02-150.1 fixed
suse enterprise server 12 SP5	2.02-181.2 fixed
suse enterprise server 15 SP3	2.04-150300.22.52.3 fixed
suse enterprise server 15 SP4	2.06-150400.11.55.2 fixed
suse enterprise server 15 SP5	2.06-150500.29.43.2 fixed
suse enterprise server 15 SP6	2.12-150600.8.18.2 fixed
suse enterprise server 15 SP7	2.12-150700.17.4 fixed

grub2-arm64-efi

suse enterprise desktop 15 SP6	2.12-150600.8.18.2 fixed
suse enterprise desktop 15 SP7	2.12-150700.17.4 fixed
suse enterprise sap 15 SP6	2.12-150600.8.18.2 fixed
suse enterprise sap 15 SP7	2.12-150700.17.4 fixed
suse enterprise server 12 SP5	2.02-181.2 fixed
suse enterprise server 15 SP3	2.04-150300.22.52.3 fixed
suse enterprise server 15 SP4	2.06-150400.11.55.2 fixed
suse enterprise server 15 SP5	2.06-150500.29.43.2 fixed
suse enterprise server 15 SP6	2.12-150600.8.18.2 fixed
suse enterprise server 15 SP7	2.12-150700.17.4 fixed

grub2-i386-pc

suse enterprise desktop 15 SP6	2.12-150600.8.18.2 fixed
suse enterprise desktop 15 SP7	2.12-150700.17.4 fixed
suse enterprise sap 15 SP6	2.12-150600.8.18.2 fixed
suse enterprise sap 15 SP7	2.12-150700.17.4 fixed
suse enterprise server 12 SP3	2.02-150.1 fixed
suse enterprise server 12 SP5	2.02-181.2 fixed
suse enterprise server 15 SP3	2.04-150300.22.52.3 fixed
suse enterprise server 15 SP4	2.06-150400.11.55.2 fixed
suse enterprise server 15 SP5	2.06-150500.29.43.2 fixed
suse enterprise server 15 SP6	2.12-150600.8.18.2 fixed
suse enterprise server 15 SP7	2.12-150700.17.4 fixed

grub2-powerpc-ieee1275

suse enterprise desktop 15 SP6	2.12-150600.8.18.2 fixed
suse enterprise desktop 15 SP7	2.12-150700.17.4 fixed
suse enterprise sap 15 SP6	2.12-150600.8.18.2 fixed
suse enterprise sap 15 SP7	2.12-150700.17.4 fixed
suse enterprise server 12 SP5	2.02-181.2 fixed
suse enterprise server 15 SP3	2.04-150300.22.52.3 fixed
suse enterprise server 15 SP4	2.06-150400.11.55.2 fixed
suse enterprise server 15 SP5	2.06-150500.29.43.2 fixed
suse enterprise server 15 SP6	2.12-150600.8.18.2 fixed
suse enterprise server 15 SP7	2.12-150700.17.4 fixed

grub2-s390x-emu

suse enterprise desktop 15 SP6	2.12-150600.8.18.2 fixed
suse enterprise desktop 15 SP7	2.12-150700.17.4 fixed
suse enterprise sap 15 SP6	2.12-150600.8.18.2 fixed
suse enterprise sap 15 SP7	2.12-150700.17.4 fixed
suse enterprise server 12 SP5	2.02-181.2 fixed
suse enterprise server 15 SP3	2.04-150300.22.52.3 fixed
suse enterprise server 15 SP4	2.06-150400.11.55.2 fixed
suse enterprise server 15 SP5	2.06-150500.29.43.2 fixed
suse enterprise server 15 SP6	2.12-150600.8.18.2 fixed
suse enterprise server 15 SP7	2.12-150700.17.4 fixed

grub2-snapper-plugin

suse enterprise desktop 15 SP6	2.12-150600.8.18.2 fixed
suse enterprise desktop 15 SP7	2.12-150700.17.4 fixed
suse enterprise sap 15 SP6	2.12-150600.8.18.2 fixed
suse enterprise sap 15 SP7	2.12-150700.17.4 fixed
suse enterprise server 12 SP3	2.02-150.1 fixed
suse enterprise server 12 SP5	2.02-181.2 fixed
suse enterprise server 15 SP3	2.04-150300.22.52.3 fixed
suse enterprise server 15 SP4	2.06-150400.11.55.2 fixed
suse enterprise server 15 SP5	2.06-150500.29.43.2 fixed
suse enterprise server 15 SP6	2.12-150600.8.18.2 fixed
suse enterprise server 15 SP7	2.12-150700.17.4 fixed

grub2-systemd-sleep-plugin

suse enterprise desktop 15 SP6	2.12-150600.8.18.2 fixed
suse enterprise desktop 15 SP7	2.12-150700.17.4 fixed
suse enterprise sap 15 SP6	2.12-150600.8.18.2 fixed
suse enterprise sap 15 SP7	2.12-150700.17.4 fixed
suse enterprise server 12 SP3	2.02-150.1 fixed
suse enterprise server 12 SP5	2.02-181.2 fixed
suse enterprise server 15 SP3	2.04-150300.22.52.3 fixed
suse enterprise server 15 SP4	2.06-150400.11.55.2 fixed
suse enterprise server 15 SP5	2.06-150500.29.43.2 fixed
suse enterprise server 15 SP6	2.12-150600.8.18.2 fixed
suse enterprise server 15 SP7	2.12-150700.17.4 fixed

grub2-x86_64-efi

suse enterprise desktop 15 SP6	2.12-150600.8.18.2 fixed
suse enterprise desktop 15 SP7	2.12-150700.17.4 fixed
suse enterprise sap 15 SP6	2.12-150600.8.18.2 fixed
suse enterprise sap 15 SP7	2.12-150700.17.4 fixed
suse enterprise server 12 SP3	2.02-150.1 fixed
suse enterprise server 12 SP5	2.02-181.2 fixed
suse enterprise server 15 SP3	2.04-150300.22.52.3 fixed
suse enterprise server 15 SP4	2.06-150400.11.55.2 fixed
suse enterprise server 15 SP5	2.06-150500.29.43.2 fixed
suse enterprise server 15 SP6	2.12-150600.8.18.2 fixed
suse enterprise server 15 SP7	2.12-150700.17.4 fixed

grub2-x86_64-xen

suse enterprise server 12 SP3	2.02-150.1 fixed
suse enterprise server 12 SP5	2.02-181.2 fixed
suse enterprise server 15 SP3	2.04-150300.22.52.3 fixed
suse enterprise server 15 SP4	2.06-150400.11.55.2 fixed
suse enterprise server 15 SP5	2.06-150500.29.43.2 fixed

Common Weakness Enumeration

CWE-122 - Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

References

https://savannah.gnu.org/bugs/?66599