CVE-2020-15707
Published Jul 29, 2020Integer overflows were discovered in the functions grub_cmd_initrd and grub_initrd_init in the efilinux component of GRUB2, as shipped in Debian, Red Hat, and Ubuntu (the function…
Vendor/product archive
redhat / enterprise_linux_atomic_host CVEs
Beta · best-effort5 CVEs tagged to redhat / enterprise_linux_atomic_host — 0 Critical, 1 High, 4 Medium, 0 Low, 0 Unrated.
CVE-2020-15706
Published Jul 29, 2020GRUB2 contains a race condition in grub_script_function_create() leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function…
CVE-2020-15705
Published Jul 29, 2020GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed. This only affects systems where the kernel signing certificate has…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2019-11478
Published Jun 19, 2019Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgm…
- evidence mentions
- 7
- Buzz score
- 35.3
CVE-2019-11477
Published Jun 19, 2019Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs).…
- evidence mentions
- 8
- Buzz score
- 36.5
Showing 1-5 of 5 CVEsPage 1 of 1