CVE-2021-3696
published 2022-07-06CVE-2021-3696: A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data corruption in the heap space…
PriorityP427medium4.5CVSS 3.1
AVLACHPRLUINSUCLILAL
EPSS
0.47%
37.7th percentile
A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data corruption in the heap space. Confidentiality, Integrity and Availablity impact may be considered Low as it's very complex to an attacker control the encoding and positioning of corrupted Huffman entries to achieve results such as arbitrary code execution and/or secure boot circumvention. This flaw affects grub2 versions prior grub-2.12.
Affected
45 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | grub2 | < grub2 2.06-3 (bookworm) | grub2 2.06-3 (bookworm) |
| gnu | grub2 | — | — |
| gnu | grub2 | >= 0 < 2.06-3~deb11u1 | 2.06-3~deb11u1 |
| gnu | grub2 | >= 0 < 2.06-3 | 2.06-3 |
| gnu | grub2 | >= 0 < 2.06-3 | 2.06-3 |
| gnu | grub2 | >= 0 < 2.06-3 | 2.06-3 |
| gnu | grub2 | >= 2.00 < 2.12 | 2.12 |
| msrc | azl3_grub2_2.06-14_on_azure_linux_3.0 | — | — |
| msrc | azl3_grub2_2.06-23_on_azure_linux_3.0 | — | — |
| msrc | azure_linux_3.0_arm | — | — |
| msrc | azure_linux_3.0_x64 | — | — |
| msrc | cbl_mariner_2.0_arm | — | — |
| msrc | cbl_mariner_2.0_x64 | — | — |
| redhat | developer_tools | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux_eus | — | — |
| redhat | enterprise_linux_eus | — | — |
| redhat | enterprise_linux_eus | — | — |
| redhat | enterprise_linux_eus | — | — |
| redhat | enterprise_linux_for_power_little_endian | — | — |
| redhat | enterprise_linux_for_power_little_endian | — | — |
| redhat | enterprise_linux_for_power_little_endian_eus | — | — |
CVSS provenance
nvdv3.14.5MEDIUMCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L
nvdv2.06.9MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C
osv4.5MEDIUM
vendor_debian4.5MEDIUM
vendor_msrc4.5MEDIUM
vendor_redhat4.5MEDIUM
vendor_ubuntu4.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
grub2-signed, grub2-unsigned, shim, and shim-signed vulnerability
osv·2023-09-08·CVSS 4.5
CVE-2021-3695 [MEDIUM] grub2-signed, grub2-unsigned, shim, and shim-signed vulnerability
grub2-signed, grub2-unsigned, shim, and shim-signed vulnerability
Daniel Axtens discovered that specially crafted images could cause a
heap-based out-of-bonds write. A local attacker could possibly use
this to circumvent secure boot protections. (CVE-2021-3695)
Daniel Axtens discovered that specially crafted images could cause
out-of-bonds read and write. A local attacker could possibly use this
to circumvent secure boot protections. (CVE-2021-3696)
Daniel Axtens discovered that specially crafted images could cause
buffer underwrite which allows arbitrary data to be written to a heap.
A local attacker could possibly use this to circumvent secure
boot protections. (CVE-2021-3697)
It was discovered that GRUB2 configuration files were created with
the wrong permissions. An attacker could
GHSA
GHSA-mv5h-82v3-mq2x: A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader
ghsa_unreviewed·2022-07-07
CVE-2021-3696 [MEDIUM] CWE-787 GHSA-mv5h-82v3-mq2x: A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader
A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data corruption in the heap space. Confidentiality, Integrity and Availablity impact may be considered Low as it's very complex to an attacker control the encoding and positioning of corrupted Huffman entries to achieve results such as arbitrary code execution and/or secure boot circumvention. This flaw affects grub2 versions prior grub-2.12.
OSV
CVE-2021-3696: A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader
osv·2022-07-06·CVSS 4.5
CVE-2021-3696 [MEDIUM] CVE-2021-3696: A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader
A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data corruption in the heap space. Confidentiality, Integrity and Availablity impact may be considered Low as it's very complex to an attacker control the encoding and positioning of corrupted Huffman entries to achieve results such as arbitrary code execution and/or secure boot circumvention. This flaw affects grub2 versions prior grub-2.12.
Ubuntu
GRUB2 vulnerabilities
vendor_ubuntu·2023-09-08·CVSS 4.5
CVE-2022-28737 [MEDIUM] GRUB2 vulnerabilities
Title: GRUB2 vulnerabilities
Summary: Several security issues were fixed in GRUB2.
Daniel Axtens discovered that specially crafted images could cause a
heap-based out-of-bonds write. A local attacker could possibly use
this to circumvent secure boot protections. (CVE-2021-3695)
Daniel Axtens discovered that specially crafted images could cause
out-of-bonds read and write. A local attacker could possibly use this
to circumvent secure boot protections. (CVE-2021-3696)
Daniel Axtens discovered that specially crafted images could cause
buffer underwrite which allows arbitrary data to be written to a heap.
A local attacker could possibly use this to circumvent secure
boot protections. (CVE-2021-3697)
It was discovered that GRUB2 configuration files were created with
the wrong permissions.
Microsoft
A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data corruption in the heap space. Confidentiality Integrity and Availablity impact may
vendor_msrc·2022-07-12·CVSS 4.5
CVE-2021-3696 [MEDIUM] CWE-787 A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data corruption in the heap space. Confidentiality Integrity and Availablity impact may
A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data corruption in the heap space. Confidentiality Integrity and Availablity impact may be considered Low as it's very complex to an attacker control the encoding and positioning of corrupted Huffman entries to achieve results such as arbitrary code execution and/or secure boot circumvention. This flaw affects grub2 versions prior grub-2.12.
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source librarie
Red Hat
grub2: Crafted PNG image may lead to out-of-bound write during huffman table handling
vendor_redhat·2022-06-07·CVSS 4.5
CVE-2021-3696 [MEDIUM] CWE-787 grub2: Crafted PNG image may lead to out-of-bound write during huffman table handling
grub2: Crafted PNG image may lead to out-of-bound write during huffman table handling
A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data corruption in the heap space. Confidentiality, Integrity and Availablity impact may be considered Low as it's very complex to an attacker control the encoding and positioning of corrupted Huffman entries to achieve results such as arbitrary code execution and/or secure boot circumvention. This flaw affects grub2 versions prior grub-2.12.
A flaw was found in grub2 when handling a PNG image header. When decoding the data contained in the Huffman table at the PNG file header, an out-of-bounds write may happen on grub's heap.
Statement: This vulnerability's impact on confidentiality, data in
Debian
CVE-2021-3696: grub2 - A heap out-of-bounds write may heppen during the handling of Huffman tables in t...
vendor_debian·2021·CVSS 4.5
CVE-2021-3696 [MEDIUM] CVE-2021-3696: grub2 - A heap out-of-bounds write may heppen during the handling of Huffman tables in t...
A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data corruption in the heap space. Confidentiality, Integrity and Availablity impact may be considered Low as it's very complex to an attacker control the encoding and positioning of corrupted Huffman entries to achieve results such as arbitrary code execution and/or secure boot circumvention. This flaw affects grub2 versions prior grub-2.12.
Scope: local
bookworm: resolved (fixed in 2.06-3)
bullseye: resolved (fixed in 2.06-3~deb11u1)
forky: resolved (fixed in 2.06-3)
sid: resolved (fixed in 2.06-3)
trixie: resolved (fixed in 2.06-3)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-07-06
Published