[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f0nno8pIXUrRJJsvFRdxv1z6p0O0SpMWcp2-gmyKFdtA":3,"g5a-risk:CVE-2015-8370":265},{"success":4,"data":5,"meta":263},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":44,"epssPercentile":25,"epssTimeSeries":45,"severity":46,"affectedProducts":47,"affectedProductsCount":70,"references":71,"referencesCount":202,"weaknesses":203,"weaknessesCount":212,"isActivelyExploited":42,"cisaInfo":25,"otxData":25,"relatedBlogPosts":213,"seoMetadata":214,"configurations":239,"relatedVendorCves":261,"notableEvents":262},"CVE-2015-8370","What is CVE-2015-8370?","Multiple integer underflows in Grub2 1.98 through 2.02 allow physically proximate attackers to bypass authentication, obtain sensitive information, or cause a denial of service (disk corruption) via backspace characters in the (1) grub_username_get function in grub-core\u002Fnormal\u002Fauth.c or the (2) grub_password_get function in lib\u002Fcrypto.c, which trigger an \"Off-by-two\" or \"Out of bounds overwrite\" memory error.","Multiple integer underflows in Grub2 1.98 through 2.02 allow physically proximate attackers to bypass authentication, obtain sensitive information, or cause ...","2015-12-16T21:59:04.063","2026-06-17T00:34:24.01",7.4,"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":28,"CVSSMetricV2":29,"CVSSMetricV40":43},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":26,"ImpactScore":27},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","LOCAL","HIGH","NONE","UNCHANGED",null,1.4,5.9,[],[30],{"Source":31,"Type":32,"CVSSData":33,"BaseSeverity":36,"ExploitabilityScore":40,"ImpactScore":41,"ACInsufInfo":42,"ObtainAllPrivilege":42,"ObtainUserPrivilege":42,"ObtainOtherPrivilege":42,"UserInteractionRequired":42},"nvd@nist.gov","Primary",{"Version":34,"VectorString":35,"AccessVector":21,"AccessComplexity":36,"Authentication":23,"ConfidentialityImpact":37,"IntegrityImpact":37,"AvailabilityImpact":37,"BaseScore":38,"BaseSeverity":39,"Exploitability":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"CollateralDamagePotential":25,"TargetDistribution":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"EnvironmentalScore":25},"2.0","AV:L\u002FAC:M\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","MEDIUM","COMPLETE",6.9,"",3.4,10,false,[],0.01104,[44,44,44,44,44,44,44],"High",[48,53,56,59,62,65],{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"gnu","grub2","1.98","cpe:2.3:a:gnu:grub2:1.98:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":54,"criteria":55,"vulnerable":4},"1.99","cpe:2.3:a:gnu:grub2:1.99:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":57,"criteria":58,"vulnerable":4},"2.00","cpe:2.3:a:gnu:grub2:2.00:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":60,"criteria":61,"vulnerable":4},"2.01","cpe:2.3:a:gnu:grub2:2.01:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":63,"criteria":64,"vulnerable":4},"2.02","cpe:2.3:a:gnu:grub2:2.02:*:*:*:*:*:*:*",{"vendor":66,"product":67,"version":68,"criteria":69,"vulnerable":4},"fedoraproject","fedora","23","cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*",6,[72,77,81,84,88,91,94,97,100,103,106,110,114,118,122,126,129,134,137,141,144,148,152,156,158,160,162,164,166,168,170,172,174,176,178,180,182,184,186,188,190,192,194,196,198,200],{"url":73,"source":74,"tags":75},"http:\u002F\u002Fhmarco.org\u002Fbugs\u002FCVE-2015-8370-Grub2-authentication-bypass.html","Hmarco",[76],"Exploit",{"url":78,"source":79,"tags":80},"http:\u002F\u002Flists.fedoraproject.org\u002Fpipermail\u002Fpackage-announce\u002F2015-December\u002F173703.html","Fedoraproject",[],{"url":82,"source":79,"tags":83},"http:\u002F\u002Flists.fedoraproject.org\u002Fpipermail\u002Fpackage-announce\u002F2015-December\u002F174049.html",[],{"url":85,"source":86,"tags":87},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2015-12\u002Fmsg00037.html","Opensuse",[],{"url":89,"source":86,"tags":90},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2015-12\u002Fmsg00039.html",[],{"url":92,"source":86,"tags":93},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2015-12\u002Fmsg00040.html",[],{"url":95,"source":86,"tags":96},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2015-12\u002Fmsg00041.html",[],{"url":98,"source":86,"tags":99},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2015-12\u002Fmsg00043.html",[],{"url":101,"source":86,"tags":102},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2015-12\u002Fmsg00044.html",[],{"url":104,"source":86,"tags":105},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-01\u002Fmsg00003.html",[],{"url":107,"source":108,"tags":109},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F134831\u002FGrub2-Authentication-Bypass.html","Packetstormsecurity",[],{"url":111,"source":112,"tags":113},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2015-2623.html","Red Hat",[],{"url":115,"source":116,"tags":117},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2015\u002FDec\u002F69","Seclists",[],{"url":119,"source":120,"tags":121},"http:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2015\u002Fdsa-3421","Debian",[],{"url":123,"source":124,"tags":125},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2015\u002F12\u002F15\u002F6","Openwall",[],{"url":127,"source":124,"tags":128},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2024\u002F01\u002F15\u002F3",[],{"url":130,"source":131,"tags":132},"http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Ftopics\u002Fsecurity\u002Fcpujan2016-2367955.html","Oracle",[133],"Patch",{"url":135,"source":131,"tags":136},"http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Ftopics\u002Fsecurity\u002Flinuxbulletinoct2015-2719645.html",[],{"url":138,"source":139,"tags":140},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F537115\u002F100\u002F0\u002Fthreaded","Securityfocus",[],{"url":142,"source":139,"tags":143},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F79358",[],{"url":145,"source":146,"tags":147},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1034422","Securitytracker",[],{"url":149,"source":150,"tags":151},"http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-2836-1","Ubuntu",[],{"url":153,"source":154,"tags":155},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F201512-03","Gentoo",[],{"url":73,"source":74,"tags":157},[76],{"url":78,"source":79,"tags":159},[],{"url":82,"source":79,"tags":161},[],{"url":85,"source":86,"tags":163},[],{"url":89,"source":86,"tags":165},[],{"url":92,"source":86,"tags":167},[],{"url":95,"source":86,"tags":169},[],{"url":98,"source":86,"tags":171},[],{"url":101,"source":86,"tags":173},[],{"url":104,"source":86,"tags":175},[],{"url":107,"source":108,"tags":177},[],{"url":111,"source":112,"tags":179},[],{"url":115,"source":116,"tags":181},[],{"url":119,"source":120,"tags":183},[],{"url":123,"source":124,"tags":185},[],{"url":127,"source":124,"tags":187},[],{"url":130,"source":131,"tags":189},[133],{"url":135,"source":131,"tags":191},[],{"url":138,"source":139,"tags":193},[],{"url":142,"source":139,"tags":195},[],{"url":145,"source":146,"tags":197},[],{"url":149,"source":150,"tags":199},[],{"url":153,"source":154,"tags":201},[],46,[204],{"id":205,"name":206,"description":207,"extendedDescription":208,"status":209,"abstraction":210,"structure":211},"CWE-191","Integer Underflow (Wrap or Wraparound)","The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.","This can happen in signed and unsigned cases.","Draft","Base","Simple",1,[],{"title":215,"metaDescription":216,"keywords":217,"canonicalUrl":218,"structuredData":219},"What is CVE-2015-8370? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2015-8370, a high severity cyber security vulnerability from 2015. Multiple integer underflows in Grub2 1.98 through 2.02 allow...","CVE-2015-8370, CVE-2015-8370 vulnerability, CVE-2015-8370 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2015, CVSS score, exploit, patch, remediation, gnu security, fedoraproject security, grub2 vulnerability, fedora vulnerability","\u002Fwhat-is\u002Fcve-2015-8370",{"@context":220,"@type":221,"headline":215,"description":216,"datePublished":10,"dateModified":11,"author":222,"publisher":226,"about":230,"mainEntityOfPage":234,"articleSection":237,"keywords":238},"https:\u002F\u002Fschema.org","TechArticle",{"@type":223,"name":224,"url":225},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":223,"name":224,"url":225,"logo":227},{"@type":228,"url":229},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":231,"name":6,"description":232,"additionalType":233},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":235,"@id":236},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2015-8370","Cybersecurity","CVE-2015-8370, CVE-2015-8370 vulnerability, CVE-2015-8370 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[240,255],{"Operator":25,"Negate":25,"Nodes":241},[242],{"Operator":243,"Negate":42,"CPEMatch":244},"OR",[245,247,249,251,253],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":246,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"936B2F89-3A97-46A8-B776-CF605C192CA2",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":248,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"6FB62F6A-8B42-4186-99AF-2A07050EB19E",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":250,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"D3AB3BF3-95F2-43C6-8445-4B749135BE8E",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":252,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"F3C7F246-9B64-49C4-B358-C5A62C3A2458",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":254,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"7AEB4A3C-A448-4C7D-8F08-57940E13BB6D",{"Operator":25,"Negate":25,"Nodes":256},[257],{"Operator":243,"Negate":42,"CPEMatch":258},[259],{"Vulnerable":4,"Criteria":69,"MatchCriteriaID":260,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"E79AB8DD-C907-4038-A931-1A5A4CFB6A5B",[],[],{"lastModified":11,"cacheTime":264,"version":34},1793206177721,{"score":266,"band":267,"action":268,"scoredAt":269},45,"Medium","Plan remediation","2026-07-01T10:19:40.764586+00:00"]