Your submission was sent successfully! Close

You have successfully unsubscribed! Close

Thank you for signing up for our newsletter!
In these regular emails you will find the latest updates about Ubuntu and upcoming events where you can meet our team.Close

CVE-2022-28736

Published: 20 July 2023

There's a use-after-free vulnerability in grub_cmd_chainloader() function; The chainloader command is used to boot up operating systems that doesn't support multiboot and do not have direct support from GRUB2. When executing chainloader more than once a use-after-free vulnerability is triggered. If an attacker can control the GRUB2's memory allocation pattern sensitive data may be exposed and arbitrary code execution can be achieved.

Priority

Medium

Cvss 3 Severity Score

6.4

Score breakdown

Status

Package Release Status
grub2
Launchpad, Ubuntu, Debian
jammy Needed

kinetic Not vulnerable
(2.06-2ubuntu12)
lunar Not vulnerable
(2.06-2ubuntu16)
bionic Needed

focal Needed

upstream
Released (2.06-3)
impish Ignored
(end of life)
mantic Not vulnerable
(2.06-2ubuntu18)
grub2-unsigned
Launchpad, Ubuntu, Debian
upstream Needs triage

trusty Does not exist

lunar Not vulnerable
(2.06-2ubuntu16)
xenial Needed

bionic
Released (2.06-2ubuntu14.1)
kinetic Ignored
(end of life)
mantic Not vulnerable
(2.06-2ubuntu17)
focal
Released (2.06-2ubuntu14.1)
jammy
Released (2.06-2ubuntu14.1)
grub2-signed
Launchpad, Ubuntu, Debian
trusty Needs triage

upstream Needs triage

kinetic Ignored
(end of life)
lunar Not vulnerable
(1.192)
xenial Needed

bionic
Released (1.187.3~18.04.1)
mantic Not vulnerable
(1.193)
focal
Released (1.187.3~20.04.1)
jammy
Released (1.187.3~22.04.1)

Severity score breakdown

Parameter Value
Base score 6.4
Attack vector Local
Attack complexity High
Privileges required High
User interaction None
Scope Unchanged
Confidentiality High
Integrity impact High
Availability impact High
Vector CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H