bugGNU GRUB - Bugs: bug #45119, Grub-macbless has a buffer overflow

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #45119: Grub-macbless has a buffer overflow

Submitted by:  Gregory Disney-Leugers <gdl>
Submitted on:  Sun 17 May 2015 08:09:27 AM UTC  
 
Category: SecuritySeverity: Major
Priority: 5 - NormalItem Group: Software Error
Status: FixedPrivacy: Public
Assigned to: NoneOriginator Name: Gregory Disney-Leguers
Open/Closed: ClosedRelease: 
Release: 2.02~beta1Reproducibility: Every Time
Planned Release: None

Wed 02 Mar 2016 10:47:41 AM UTC, comment #2:

Supposing it's fixed. Feel free to reopen if it's not the case.

Vladimir Serbinenko <phcoder>
Project Administrator
Sun 17 May 2015 11:21:46 AM UTC, comment #1:

There is no fprintf on line 134 in grub git master. Anyway, I fixed crash caused by grub-macbless - please test if current git master works for you.

Andrei Borzenkov <arvidjaar>
Project Member
Sun 17 May 2015 08:09:27 AM UTC, original submission:

grub-macbless contains a buffer overflow, due to fprintf() at line 134
at https://github.com/coreos/grub/blame/master/util/grub-macbless.c.
Steps to reproduce:
1. `/usr/sbin/grub-macbless --x86 `perl -e 'print "A"x1024 .
"\xfc\xff\xff\xff"x2`
2. gdb /usr/sbin/grub-macbless core.2067 Expected result: Segmentation
Fault caused by buffer overflow.

Gregory Disney-Leugers <gdl>

 

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by phcoder (Posted a comment)
  • -unavailable- added by arvidjaar (Posted a comment)
  • -unavailable- added by gdl (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 2 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Wed 02 Mar 2016 10:47:41 AM UTCphcoderStatusNone=>Fixed
      Open/ClosedOpen=>Closed

    Back to the top


    Powered by Savane 3.1-cleanup1