DeutschShown in its original language — a full translation is planned for a future version.
Grub2: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen
view advisory published 2020-07-29
Ein lokaler Angreifer mit Administratorrechten oder physischem Zugriff auf das Gerät, kann mehrere Schwachstellen in Grub2 ausnutzen, um Sicherheitsvorkehrungen zu umgehen.
01
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-14311US | medium6.0 | — | ||
There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A filesystem containing a symbolic link with an inode size of UINT32_MAX causes an arith… | ||||
| CVE-2020-14310US | medium6.0 | — | ||
There is an issue on grub2 before version 2.06 at function read_section_as_string(). It expects a font name to be at max UINT32_MAX - 1 length in bytes but it doesn't verify it bef… | ||||
| CVE-2020-14309US | medium6.7 | — | ||
There's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems containing a symbolic link with name length of UINT32 bytes in size. The name size leads… | ||||
| CVE-2020-10713US | high8.2 | Exploit | ||
A flaw was found in grub2, prior to version 2.06. An attacker may use the GRUB 2 flaw to hijack and tamper the GRUB verification process. This flaw also allows the bypass of Secure… | ||||
| CVE-2020-14308US | medium6.4 | — | ||
In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic overflows on the requested allocation size. This leads the function to return invalid… | ||||
| CVE-2020-15707US | medium6.4 | — | ||
Integer overflows were discovered in the functions grub_cmd_initrd and grub_initrd_init in the efilinux component of GRUB2, as shipped in Debian, Red Hat, and Ubuntu (the functiona… | ||||
| CVE-2020-15706US | medium6.4 | — | ||
GRUB2 contains a race condition in grub_script_function_create() leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function… | ||||
| CVE-2020-15705US | medium6.4 | — | ||
GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed. This only affects systems where the kernel signing certificate has… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2022-9595 vom 2022-07-14external
- Oracle Linux Security Advisory ELSA-2023-0049 vom 2023-01-25external
- SUSE Security Update SUSE-SU-2020:2304-1 vom 2020-08-25external
- SUSE Security Update SUSE-SU-2020:2308-1 vom 2020-08-25external
- SUSE Security Update SUSE-SU-2020:2307-1 vom 2020-08-25external
- SUSE Security Update SUSE-SU-2020:2303-1 vom 2020-08-25external
- SUSE Security Update SUSE-SU-2020:2306-1 vom 2020-08-25external
- SUSE Security Update SUSE-SU-2020:14461-1 vom 2020-08-25external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan