CVEvulnerability
CVE-2020-15705
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2020-07-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.4 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 6.4 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.4 MEDIUM — AV:L/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-347
Description
GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed. This only affects systems where the kernel signing certificate has been imported directly into the secure boot database and the GRUB image is booted directly without the use of shim. This issue affects GRUB2 version 2.04 and prior versions.
Affected configurations
• gnu grub2 (<= 2.04)
• redhat enterprise linux atomic host
• redhat openshift container platform 4.0
• canonical ubuntu linux 14.04
• canonical ubuntu linux 16.04
• canonical ubuntu linux 18.04
• canonical ubuntu linux 20.04
• debian debian linux 10.0
• opensuse leap 15.1
• opensuse leap 15.2
• redhat enterprise linux 7.0
• redhat enterprise linux 8.0
• suse suse linux enterprise server 11
• suse suse linux enterprise server 12
• suse suse linux enterprise server 15
• microsoft windows 10
• microsoft windows 10 1607
• microsoft windows 10 1709
• microsoft windows 10 1803
• microsoft windows 10 1809
• microsoft windows 10 1903
• microsoft windows 10 1909
• microsoft windows 10 2004
• microsoft windows 8.1
• microsoft windows rt 8.1
• microsoft windows server 2012
• microsoft windows server 2012 r2
• microsoft windows server 2016
• microsoft windows server 2016 1903
• microsoft windows server 2016 1909
• microsoft windows server 2016 2004
• microsoft windows server 2019
Related
Weakness · CWE (1)
- CWE-347 Improper Verification of Cryptographic Signature weakness
References
- http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00067.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00069.html Mailing List, Third Party Advisory
- http://ubuntu.com/security/notices/USN-4432-1 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2020/07/29/3 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/03/02/3 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/09/17/2 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/09/17/4 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/09/21/1 Mailing List, Third Party Advisory
- https://access.redhat.com/security/vulnerabilities/grub2bootloader Third Party Advisory
- https://lists.gnu.org/archive/html/grub-devel/2020-07/msg00034.html Issue Tracking, Vendor Advisory
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV200011 Patch, Third Party Advisory, Vendor Advisory
- https://security.gentoo.org/glsa/202104-05 Third Party Advisory
- https://security.netapp.com/advisory/ntap-20200731-0008/ Third Party Advisory
- https://usn.ubuntu.com/4432-1/ Third Party Advisory
- https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/GRUB2SecureBootBypass Third Party Advisory
- https://www.debian.org/security/2020-GRUB-UEFI-SecureBoot Third Party Advisory
- https://www.eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/ Third Party Advisory
- https://www.openwall.com/lists/oss-security/2020/07/29/3 Mailing List, Third Party Advisory
- https://www.suse.com/c/suse-addresses-grub2-secure-boot-issue/ Third Party Advisory
- https://www.suse.com/support/kb/doc/?id=000019673 Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00067.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00069.html Mailing List, Third Party Advisory
- http://ubuntu.com/security/notices/USN-4432-1 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2020/07/29/3 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/03/02/3 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/09/17/2 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/09/17/4 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/09/21/1 Mailing List, Third Party Advisory
- https://access.redhat.com/security/vulnerabilities/grub2bootloader Third Party Advisory
- https://lists.gnu.org/archive/html/grub-devel/2020-07/msg00034.html Issue Tracking, Vendor Advisory
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV200011 Patch, Third Party Advisory, Vendor Advisory
- https://security.gentoo.org/glsa/202104-05 Third Party Advisory
- https://security.netapp.com/advisory/ntap-20200731-0008/ Third Party Advisory
- https://usn.ubuntu.com/4432-1/ Third Party Advisory
- https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/GRUB2SecureBootBypass Third Party Advisory
- https://www.debian.org/security/2020-GRUB-UEFI-SecureBoot Third Party Advisory
- https://www.eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/ Third Party Advisory
- https://www.openwall.com/lists/oss-security/2020/07/29/3 Mailing List, Third Party Advisory
- https://www.suse.com/c/suse-addresses-grub2-secure-boot-issue/ Third Party Advisory
- https://www.suse.com/support/kb/doc/?id=000019673 Third Party Advisory