Jbo

The issue is related to the use of a non-constant time algorithm for `grub crypto memcmp`, which allows side-channel attacks. This means that an attacker could potentially exploit the difference in time it takes for the comparison to occur, gaining unauthorized access to sensitive information.

The issue is a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem. This can allow a remote attacker to impact the confidentiality, integrity, and availability of protected information. The vulnerability is related to the HFS File System Handler component of the GRUB2 bootloader.

The issue is related to security-relevant memory corruption via malformed data in a terminfo database file. This can be triggered by local users when the software is used by a setuid application. The corruption can occur when the software accesses files found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variables. The vulnerability may allow an attacker to impact the confidentiality, integrity, and availability of protected information.