CVE-2021-20225

Name of the Vulnerable Software and Affected Versions grub2 versions prior to 2.06

Description A flaw was found in the option parser of grub2, allowing an attacker to write past the end of a heap-allocated buffer by calling certain commands with a large number of specific short forms of options. This poses a threat to data confidentiality and integrity, as well as system availability. The vulnerability can be exploited to gain access to confidential data, compromise data integrity, and cause a denial of service.

Recommendations For versions prior to 2.06, update to version 2.06 or later to resolve the issue. As a temporary workaround, consider restricting the use of certain commands with short forms of options to minimize the risk of exploitation.