CVE-2015-8370 describes multiple integer underflows in Grub2 versions 1.98 through 2.02, affecting Fedora and GNU Grub2 products. This vulnerability allows physically proximate attackers to bypass authentication, access sensitive information, or cause disk corruption by using backspace characters in username or password input fields. With a CVSS score of 7.4 (HIGH), the attack requires physical access but is complex to execute, leading to high impacts on confidentiality, integrity, and availability. While there is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB) is unavailable, and it is not listed in the KEV catalog. Despite this, the vulnerability has garnered significant community attention and media coverage, indicating its potential risk.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.98CPE matchmatch criteria | cpe:2.3:a:gnu:grub2:1.98:*:*:*:*:*:*:* | ||
1.99CPE matchmatch criteria | cpe:2.3:a:gnu:grub2:1.99:*:*:*:*:*:*:* | ||
2.00CPE matchmatch criteria | cpe:2.3:a:gnu:grub2:2.00:*:*:*:*:*:*:* | ||
2.01CPE matchmatch criteria | cpe:2.3:a:gnu:grub2:2.01:*:*:*:*:*:*:* | ||
2.02CPE matchmatch criteria | cpe:2.3:a:gnu:grub2:2.02:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:L/AC:M/Au:N/C:C/I:C/A:C
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
CVE-2015-8370
Aug 11, 2020grub2: buffer overflow when checking password entered during bootup
Dec 10, 2015Multiple integer underflows in Grub2 1.98 through 2.02 allow physically proximate attackers to bypass authentication obtain sensitive information or cause a denial of service (disk corruption) via backspace characters in the (1) grub_username_get function in grub-core/normal/auth.c or the (2) grub_password_get function in lib/crypto.c which trigger an "Off-by-two" or "Out of bounds overwrite" memory error.
Dec 2, 2015