CVE:CVE-2021-3696
CNNVD:CNNVD-202206-757
grub2是GNU社区的一款Linux系统引导程序。
grub2 存在缓冲区错误漏洞，攻击者通过精心制作的PNG图像利用该漏洞导致哈夫曼表处理时的越界写入。
solution:Upgrade gnu grub to a higher version than 2.12,and avoid the version [2.0,2.12); Upgrade redhat developer_tools to a higher version than 1.0,and avoid the version 1.0; Upgrade redhat openshift to a higher version than 3.0,and avoid the version 3.0; Upgrade redhat enterprise_linux to a higher version than 8.0,8.1,8.4,9.0,and avoid the version 8.0,8.1,8.4,9.0; Upgrade redhat enterprise_linux_eus to a higher version than 8.2,8.4,8.6,9.0,and avoid the version 8.2,8.4,8.6,9.0; Upgrade redhat enterprise_linux_for_power_little_endian to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade redhat enterprise_linux_for_power_little_endian_eus to a higher version than 8.2,8.4,8.6,9.0,and avoid the version 8.2,8.4,8.6,9.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 8.2,8.4,8.6,and avoid the version 8.2,8.4,8.6; Upgrade redhat enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions to a higher version than 8.1,8.2,8.4,8.6,9.0,and avoid the version 8.1,8.2,8.4,8.6,9.0; Upgrade redhat enterprise_linux_server_tus to a higher version than 8.2,8.4,8.6,and avoid the version 8.2,8.4,8.6; Upgrade redhat openshift_container_platform to a higher version than 4.6,4.9,4.10,and avoid the version 4.6,4.9,4.10; Upgrade redhat codeready_linux_builder to a higher version than -; Upgrade netapp ontap_select_deploy_administration_utility to a higher version than -