CVEvulnerability
CVE-2020-15707
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2020-07-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.7 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H
- CVSS 3.1 ([email protected])
- 6.4 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.4 MEDIUM — AV:L/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-190, CWE-362
Description
Integer overflows were discovered in the functions grub_cmd_initrd and grub_initrd_init in the efilinux component of GRUB2, as shipped in Debian, Red Hat, and Ubuntu (the functionality is not included in GRUB2 upstream), leading to a heap-based buffer overflow. These could be triggered by an extremely large number of arguments to the initrd command on 32-bit architectures, or a crafted filesystem with very large files on any architecture. An attacker could use this to execute arbitrary code and bypass UEFI Secure Boot restrictions. This issue affects GRUB2 version 2.04 and prior versions.
Affected configurations
• gnu grub2 (<= 2.04)
• redhat enterprise linux atomic host
• redhat openshift container platform 4.0
• redhat enterprise linux 7.0
• redhat enterprise linux 8.0
• microsoft windows 10
• microsoft windows 10 1607
• microsoft windows 10 1709
• microsoft windows 10 1803
• microsoft windows 10 1809
• microsoft windows 10 1903
• microsoft windows 10 1909
• microsoft windows 10 2004
• microsoft windows 8.1
• microsoft windows rt 8.1
• microsoft windows server 2012
• microsoft windows server 2012 r2
• microsoft windows server 2016
• microsoft windows server 2016 1903
• microsoft windows server 2016 1909
• microsoft windows server 2016 2004
• microsoft windows server 2019
• canonical ubuntu linux 14.04
• canonical ubuntu linux 16.04
• canonical ubuntu linux 18.04
• canonical ubuntu linux 20.04
• debian debian linux 10.0
• opensuse leap 15.1
• opensuse leap 15.2
• suse suse linux enterprise server 11
• suse suse linux enterprise server 12
• suse suse linux enterprise server 15
• netapp active iq unified manager (>= 9.5)
Related
References
- http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00016.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00017.html Mailing List, Third Party Advisory
- http://ubuntu.com/security/notices/USN-4432-1 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2020/07/29/3 Mailing List, Third Party Advisory
- https://access.redhat.com/security/vulnerabilities/grub2bootloader Third Party Advisory
- https://lists.gnu.org/archive/html/grub-devel/2020-07/msg00034.html Issue Tracking, Vendor Advisory
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV200011 Patch, Third Party Advisory, Vendor Advisory
- https://security.gentoo.org/glsa/202104-05 Third Party Advisory
- https://security.netapp.com/advisory/ntap-20200731-0008/ Third Party Advisory
- https://usn.ubuntu.com/4432-1/ Third Party Advisory
- https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/GRUB2SecureBootBypass Third Party Advisory
- https://www.debian.org/security/2020-GRUB-UEFI-SecureBoot Third Party Advisory
- https://www.debian.org/security/2020/dsa-4735 Third Party Advisory
- https://www.eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/ Exploit, Third Party Advisory
- https://www.openwall.com/lists/oss-security/2020/07/29/3 Mailing List, Third Party Advisory
- https://www.suse.com/c/suse-addresses-grub2-secure-boot-issue/ Third Party Advisory
- https://www.suse.com/support/kb/doc/?id=000019673 Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00016.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00017.html Mailing List, Third Party Advisory
- http://ubuntu.com/security/notices/USN-4432-1 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2020/07/29/3 Mailing List, Third Party Advisory
- https://access.redhat.com/security/vulnerabilities/grub2bootloader Third Party Advisory
- https://lists.gnu.org/archive/html/grub-devel/2020-07/msg00034.html Issue Tracking, Vendor Advisory
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV200011 Patch, Third Party Advisory, Vendor Advisory
- https://security.gentoo.org/glsa/202104-05 Third Party Advisory
- https://security.netapp.com/advisory/ntap-20200731-0008/ Third Party Advisory
- https://usn.ubuntu.com/4432-1/ Third Party Advisory
- https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/GRUB2SecureBootBypass Third Party Advisory
- https://www.debian.org/security/2020-GRUB-UEFI-SecureBoot Third Party Advisory
- https://www.debian.org/security/2020/dsa-4735 Third Party Advisory
- https://www.eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/ Exploit, Third Party Advisory
- https://www.openwall.com/lists/oss-security/2020/07/29/3 Mailing List, Third Party Advisory
- https://www.suse.com/c/suse-addresses-grub2-secure-boot-issue/ Third Party Advisory
- https://www.suse.com/support/kb/doc/?id=000019673 Third Party Advisory