Grub 1.98 through 2.02 has vulnerability allowing user to bypass password

[paddymac]

The vulnerability only comes into play when someone has physical access to the computer, but pressing the backspace key 28 times causes a buffer underflow which allows someone to bypass the Grub bootloader password if enabled.

 

http://www.csoonline.com/article/3016100/security/vulnerability-in-popular-bootloader-puts-locked-down-linux-computers-at-risk.html