{
  "threat_severity" : "Moderate",
  "public_date" : "2022-06-07T00:00:00Z",
  "bugzilla" : {
    "description" : "grub2: Crafted PNG image may lead to out-of-bound write during huffman table handling",
    "id" : "1991686",
    "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1991686"
  },
  "cvss3" : {
    "cvss3_base_score" : "5.0",
    "cvss3_scoring_vector" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L",
    "status" : "verified"
  },
  "cwe" : "CWE-787",
  "details" : [ "A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data corruption in the heap space. Confidentiality, Integrity and Availablity impact may be considered Low as it's very complex to an attacker control the encoding and positioning of corrupted Huffman entries to achieve results such as arbitrary code execution and/or secure boot circumvention. This flaw affects grub2 versions prior grub-2.12.", "A flaw was found in grub2 when handling a PNG image header. When decoding the data contained in the Huffman table at the PNG file header, an out-of-bounds write may happen on grub's heap." ],
  "statement" : "This vulnerability's impact on confidentiality, data integrity, and availability are considered low as a successful attack using this flaw is very complex.",
  "affected_release" : [ {
    "product_name" : "Red Hat Enterprise Linux 8",
    "release_date" : "2022-06-16T00:00:00Z",
    "advisory" : "RHSA-2022:5095",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8",
    "package" : "grub2-1:2.02-123.el8_6.8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions",
    "release_date" : "2022-06-16T00:00:00Z",
    "advisory" : "RHSA-2022:5098",
    "cpe" : "cpe:/o:redhat:rhel_e4s:8.1",
    "package" : "grub2-1:2.02-87.el8_1.10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.2 Extended Update Support",
    "release_date" : "2022-06-16T00:00:00Z",
    "advisory" : "RHSA-2022:5100",
    "cpe" : "cpe:/o:redhat:rhel_eus:8.2",
    "package" : "grub2-1:2.02-87.el8_2.10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.4 Extended Update Support",
    "release_date" : "2022-06-16T00:00:00Z",
    "advisory" : "RHSA-2022:5096",
    "cpe" : "cpe:/o:redhat:rhel_eus:8.4",
    "package" : "grub2-1:2.02-99.el8_4.9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "release_date" : "2022-06-16T00:00:00Z",
    "advisory" : "RHSA-2022:5099",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9",
    "package" : "grub2-1:2.06-27.el9_0.7"
  } ],
  "package_state" : [ {
    "product_name" : "Red Hat Enterprise Linux 7",
    "fix_state" : "Out of support scope",
    "package_name" : "grub2",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7"
  } ],
  "references" : [ "https://www.cve.org/CVERecord?id=CVE-2021-3696\nhttps://nvd.nist.gov/vuln/detail/CVE-2021-3696" ],
  "name" : "CVE-2021-3696",
  "csaw" : false
}