[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2015-8370":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":24,"cwes":25,"cpes":28,"technologies":35,"references":38,"score":62,"epss_score":63,"epss_percentile":64,"is_kev":24,"cisa_kev_date_added":65,"cisa_kev_due_date":65,"cisa_ssvc":66,"attack_mappings":76,"exploits":83},182453,"CVE-2015-8370","EUVD-2015-8254","Multiple integer underflows in Grub2 1.98 through 2.02 allow physically proximate attackers to bypass authentication, obtain sensitive information, or cause a denial of service (disk corruption) via backspace characters in the (1) grub_username_get function in grub-core\u002Fnormal\u002Fauth.c or the (2) grub_password_get function in lib\u002Fcrypto.c, which trigger an \"Off-by-two\" or \"Out of bounds overwrite\" memory error.","2015-12-16T21:59:00Z",{"cvss_v2.0":10,"cvss_v3.1":18},{"version":11,"baseScore":12,"accessVector":13,"vectorString":14,"authentication":15,"integrityImpact":16,"accessComplexity":17,"availabilityImpact":16,"confidentialityImpact":16},"2.0",6.9,"LOCAL","AV:L\u002FAC:M\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","NONE","COMPLETE","MEDIUM",{"scope":19,"version":20,"baseScore":21,"attackVector":13,"baseSeverity":22,"vectorString":23,"integrityImpact":22,"userInteraction":15,"attackComplexity":22,"availabilityImpact":22,"privilegesRequired":15,"confidentialityImpact":22},"UNCHANGED","3.1",7.4,"HIGH","CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",false,[26,27],"CWE-264","CWE-191",[29,30,31,32,33,34],"cpe:2.3:a:gnu:grub2:1.99:*:*:*:*:*:*:*","cpe:2.3:a:gnu:grub2:2.00:*:*:*:*:*:*:*","cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*","cpe:2.3:a:gnu:grub2:1.98:*:*:*:*:*:*:*","cpe:2.3:a:gnu:grub2:2.02:*:*:*:*:*:*:*","cpe:2.3:a:gnu:grub2:2.01:*:*:*:*:*:*:*",[36,37],"Fedoraproject Fedora","Gnu Grub2",[39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61],"http:\u002F\u002Fhmarco.org\u002Fbugs\u002FCVE-2015-8370-Grub2-authentication-bypass.html","http:\u002F\u002Flists.fedoraproject.org\u002Fpipermail\u002Fpackage-announce\u002F2015-December\u002F173703.html","http:\u002F\u002Flists.fedoraproject.org\u002Fpipermail\u002Fpackage-announce\u002F2015-December\u002F174049.html","http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2015-12\u002Fmsg00037.html","http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2015-12\u002Fmsg00039.html","http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2015-12\u002Fmsg00040.html","http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2015-12\u002Fmsg00041.html","http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2015-12\u002Fmsg00043.html","http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2015-12\u002Fmsg00044.html","http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-01\u002Fmsg00003.html","http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F134831\u002FGrub2-Authentication-Bypass.html","http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2015-2623.html","http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2015\u002FDec\u002F69","http:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2015\u002Fdsa-3421","http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2015\u002F12\u002F15\u002F6","http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2024\u002F01\u002F15\u002F3","http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Ftopics\u002Fsecurity\u002Fcpujan2016-2367955.html","http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Ftopics\u002Fsecurity\u002Flinuxbulletinoct2015-2719645.html","http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F537115\u002F100\u002F0\u002Fthreaded","http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F79358","http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1034422","http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-2836-1","https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F201512-03",0.52,0.01095,0.65321,null,{"timestamp":67,"automatable":68,"tech_impact":69,"exploitation":70,"cisa_decision":71,"cisa_remediation_timeline":75},"2024-03-06T21:01:48.674436Z","no","total","poc",{"vector":72,"decision":73,"priority":74},"CISAv1\u002FE:P\u002FA:N\u002FT:T\u002FM:H\u002F2026-10-25T04:15:17.674285\u002F","attend","medium","14D",[77],{"name":78,"source":79,"tactics":80,"technique_id":82},"Exploitation for Privilege Escalation","attack_vector",[81],"privilege-escalation","T1068",[84,85],{"link":39},{"link":49}]