CVE-2021-46705

MEDIUM 4.4CVE-2021-46705 · Published 16/03/2022 · updated 17/06/2026

In short

CVE-2021-46705 is a MEDIUM (CVSS 4.4) vulnerability affecting grub2 (gnu).
Chance of exploitation in the next 30 days (EPSS): 0.24%, higher than 15.1% of all vulnerabilities.
Fix: update to 2.06-150400.7.1, 2.06-18.1 or later.

Package	Affected versions	Patched versions
grub2 gnu	`< 2.06-150400.7.1< 2.06-18.1`	`2.06-150400.7.12.06-18.1`

Description

A Insecure Temporary File vulnerability in grub-once of grub2 in SUSE Linux Enterprise Server 15 SP4, openSUSE Factory allows local attackers to truncate arbitrary files. This issue affects: SUSE Linux Enterprise Server 15 SP4 grub2 versions prior to 2.06-150400.7.1. SUSE openSUSE Factory grub2 versions prior to 2.06-18.1.

References

bugzilla.suse.com/show_bug.cgi · Exploit

More vulnerabilities in grub2

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

grub2

gnu

< 2.06-150400.7.1< 2.06-18.1

2.06-150400.7.12.06-18.1

Description

More vulnerabilities in grub2

See all →