Vulnerability · Published Nov 3, 2022 · Assigned by fedora
CVE-2022-3675
Low 2.6
In plain English
A low-severity improper input validation in CoreOS from Fedora Project. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 8% of all known vulnerabilities).
Official description
Fedora CoreOS supports setting a GRUB bootloader password using a Butane config. When this feature is enabled, GRUB requires a password to access the GRUB command-line, modify kernel command-line arguments, or boot non-default OSTree deployments. Recent Fedora CoreOS releases have a misconfiguration which allows booting non-default OSTree deployments without entering a password. This allows someone with access to the GRUB menu to boot into an older version of Fedora CoreOS, reverting any security fixes that have recently been applied to the machine. A password is still required to modify kernel command-line arguments and to access the GRUB command line.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Fedora Project | CoreOS | testing 36.20220906.2.0 and later – before testing 36.20221030.2.0 next 36.20220906.1.0 and later – before next 37.20221031.1.0stable 36.20220820.3.0 and later – before stable 36.20221014.3.0 |
Weakness: CWE-20 · Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N