Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-56738

GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp and thus allows side-channel attacks.

Published

2024-12-29T07:15:06.183

Last Modified

2025-06-24T00:29:03.183

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 5.3 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-208
  • Type: Primary
    CWE-203
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application gnu grub2 ≤ 2.12 Yes
References