Multiple integer underflows in Grub2 1.98 through 2.02 allow physically proximate attackers to bypass authentication, obtain sensitive information, or cause a denial of service (disk corruption) via backspace characters in the (1) grub_username_get function in grub-core/normal/auth.c or the (2) grub_password_get function in lib/crypto.c, which trigger an Off-by-two or Out of bounds overwrite memory error.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Grub2 | Gnu | 1.98 (including) | 1.98 (including) |
| Grub2 | Gnu | 1.99 (including) | 1.99 (including) |
| Grub2 | Gnu | 2.00 (including) | 2.00 (including) |
| Grub2 | Gnu | 2.01 (including) | 2.01 (including) |
| Grub2 | Gnu | 2.02 (including) | 2.02 (including) |
| Red Hat Enterprise Linux 7 | RedHat | grub2-1:2.02-0.33.el7_2 | * |
| Grub2 | Ubuntu | precise | * |
| Grub2 | Ubuntu | trusty | * |
| Grub2 | Ubuntu | upstream | * |
| Grub2 | Ubuntu | vivid | * |
| Grub2 | Ubuntu | wily | * |