A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause heap data corruption or eventually arbitrary code execution and circumvent secure boot protections. This issue has a high complexity to be exploited as an attacker needs to perform some triage over the heap layout to achieve signifcant results, also the values written into the memory are repeated three times in a row making difficult to produce valid payloads. This flaw affects grub2 versions prior grub-2.12.
References
| Link | Resource |
|---|---|
| https://bugzilla.redhat.com/show_bug.cgi?id=1991685 | Issue Tracking Third Party Advisory |
| https://security.gentoo.org/glsa/202209-12 | Third Party Advisory |
| https://security.netapp.com/advisory/ntap-20220930-0001/ | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
| AND |
|
Configuration 5 (hide)
| AND |
|
Configuration 6 (hide)
|
History
13 Sep 2023, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:gnu:grub2:*:*:*:*:*:*:*:* | |
| First Time |
Gnu grub2
|
28 Oct 2022, 16:14
| Type | Values Removed | Values Added |
|---|---|---|
| References | (CONFIRM) https://security.netapp.com/advisory/ntap-20220930-0001/ - Third Party Advisory | |
| References | (GENTOO) https://security.gentoo.org/glsa/202209-12 - Third Party Advisory | |
| CPE | cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:* | |
| First Time |
Netapp
Netapp ontap Select Deploy Administration Utility |
30 Sep 2022, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
25 Sep 2022, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
15 Jul 2022, 20:52
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-787 | |
| CVSS |
v2 : v3 : |
v2 : 4.4
v3 : 4.5 |
| References | (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=1991685 - Issue Tracking, Third Party Advisory | |
| CPE | cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.1:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:9.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:8.1:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:* cpe:2.3:a:redhat:openshift_container_platform:4.9:*:*:*:*:*:*:* cpe:2.3:a:redhat:developer_tools:1.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.6:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.4:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.2:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.4:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:8.4:*:*:*:*:*:*:* cpe:2.3:a:redhat:openshift_container_platform:4.6:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.6:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:* cpe:2.3:a:redhat:openshift_container_platform:4.10:*:*:*:*:*:*:* cpe:2.3:a:gnu:grub:*:*:*:*:*:*:*:* cpe:2.3:a:redhat:codeready_linux_builder:-:*:*:*:*:*:*:* cpe:2.3:a:redhat:openshift:3.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.2:*:*:*:*:*:*:* |
|
| First Time |
Redhat openshift
Redhat codeready Linux Builder Fedoraproject fedora Redhat openshift Container Platform Redhat enterprise Linux Server Aus Fedoraproject Redhat enterprise Linux Eus Redhat Gnu grub Redhat enterprise Linux Redhat enterprise Linux For Power Little Endian Eus Redhat enterprise Linux For Power Little Endian Redhat developer Tools Redhat enterprise Linux Server For Power Little Endian Update Services For Sap Solutions Gnu Redhat enterprise Linux Server Tus |
06 Jul 2022, 16:19
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-07-06 16:15
Updated : 2023-12-10 14:35
NVD link : CVE-2021-3695
Mitre link : CVE-2021-3695
CVE.ORG link : CVE-2021-3695
JSON object : View
Products Affected
redhat
- developer_tools
- enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions
- codeready_linux_builder
- enterprise_linux_for_power_little_endian_eus
- enterprise_linux
- enterprise_linux_server_aus
- enterprise_linux_server_tus
- enterprise_linux_eus
- openshift
- openshift_container_platform
- enterprise_linux_for_power_little_endian
netapp
- ontap_select_deploy_administration_utility
gnu
- grub2
fedoraproject
- fedora
CWE
CWE-787
Out-of-bounds Write