Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-15705

GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed. This only affects systems where the kernel signing certificate has been imported directly into the secure boot database and the GRUB image is booted directly without the use of shim. This issue affects GRUB2 version 2.04 and prior versions.

Published

2020-07-29T18:15:14.187

Last Modified

2024-11-21T05:06:03.570

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.4 (MEDIUM)

CVSSv2 Vector

AV:L/AC:M/Au:N/C:P/I:P/A:P

Access Vector: LOCAL
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

3.4

Impact Score

6.4

Weaknesses

Type: Secondary
CWE-347
Type: Primary
CWE-347

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	gnu	grub2	≤ 2.04	Yes
Application	redhat	enterprise_linux_atomic_host	-	Yes
Application	redhat	openshift_container_platform	4.0	Yes
Operating System	canonical	ubuntu_linux	14.04	Yes
Operating System	canonical	ubuntu_linux	16.04	Yes
Operating System	canonical	ubuntu_linux	18.04	Yes
Operating System	canonical	ubuntu_linux	20.04	Yes
Operating System	debian	debian_linux	10.0	Yes
Operating System	opensuse	leap	15.1	Yes
Operating System	opensuse	leap	15.2	Yes
Operating System	redhat	enterprise_linux	7.0	Yes
Operating System	redhat	enterprise_linux	8.0	Yes
Operating System	suse	suse_linux_enterprise_server	11	Yes
Operating System	suse	suse_linux_enterprise_server	12	Yes
Operating System	suse	suse_linux_enterprise_server	15	Yes
Operating System	microsoft	windows_10	-	Yes
Operating System	microsoft	windows_10	1607	Yes
Operating System	microsoft	windows_10	1709	Yes
Operating System	microsoft	windows_10	1803	Yes
Operating System	microsoft	windows_10	1809	Yes
Operating System	microsoft	windows_10	1903	Yes
Operating System	microsoft	windows_10	1909	Yes
Operating System	microsoft	windows_10	2004	Yes
Operating System	microsoft	windows_8.1	-	Yes
Operating System	microsoft	windows_rt_8.1	-	Yes
Operating System	microsoft	windows_server_2012	-	Yes
Operating System	microsoft	windows_server_2012	r2	Yes
Operating System	microsoft	windows_server_2016	-	Yes
Operating System	microsoft	windows_server_2016	1903	Yes
Operating System	microsoft	windows_server_2016	1909	Yes
Operating System	microsoft	windows_server_2016	2004	Yes
Operating System	microsoft	windows_server_2019	-	Yes

References

http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00067.html Mailing List, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00069.html Mailing List, Third Party Advisory ([email protected])
http://ubuntu.com/security/notices/USN-4432-1 Third Party Advisory ([email protected])
http://www.openwall.com/lists/oss-security/2020/07/29/3 Mailing List, Third Party Advisory ([email protected])
http://www.openwall.com/lists/oss-security/2021/03/02/3 Mailing List, Third Party Advisory ([email protected])
http://www.openwall.com/lists/oss-security/2021/09/17/2 Mailing List, Third Party Advisory ([email protected])
http://www.openwall.com/lists/oss-security/2021/09/17/4 Mailing List, Third Party Advisory ([email protected])
http://www.openwall.com/lists/oss-security/2021/09/21/1 Mailing List, Third Party Advisory ([email protected])
https://access.redhat.com/security/vulnerabilities/grub2bootloader Third Party Advisory ([email protected])
https://lists.gnu.org/archive/html/grub-devel/2020-07/msg00034.html Issue Tracking, Vendor Advisory ([email protected])
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV200011 Patch, Third Party Advisory, Vendor Advisory ([email protected])
https://security.gentoo.org/glsa/202104-05 Third Party Advisory ([email protected])
https://security.netapp.com/advisory/ntap-20200731-0008/ Third Party Advisory ([email protected])
https://usn.ubuntu.com/4432-1/ Third Party Advisory ([email protected])
https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/GRUB2SecureBootBypass Third Party Advisory ([email protected])
https://www.debian.org/security/2020-GRUB-UEFI-SecureBoot Third Party Advisory ([email protected])
https://www.eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/ Third Party Advisory ([email protected])
https://www.openwall.com/lists/oss-security/2020/07/29/3 Mailing List, Third Party Advisory ([email protected])
https://www.suse.com/c/suse-addresses-grub2-secure-boot-issue/ Third Party Advisory ([email protected])
https://www.suse.com/support/kb/doc/?id=000019673 Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00067.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00069.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://ubuntu.com/security/notices/USN-4432-1 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2020/07/29/3 Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2021/03/02/3 Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2021/09/17/2 Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2021/09/17/4 Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2021/09/21/1 Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/security/vulnerabilities/grub2bootloader Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://lists.gnu.org/archive/html/grub-devel/2020-07/msg00034.html Issue Tracking, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV200011 Patch, Third Party Advisory, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://security.gentoo.org/glsa/202104-05 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://security.netapp.com/advisory/ntap-20200731-0008/ Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://usn.ubuntu.com/4432-1/ Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/GRUB2SecureBootBypass Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.debian.org/security/2020-GRUB-UEFI-SecureBoot Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/ Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.openwall.com/lists/oss-security/2020/07/29/3 Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.suse.com/c/suse-addresses-grub2-secure-boot-issue/ Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.suse.com/support/kb/doc/?id=000019673 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)