Skip to content
OpenAdvisories
High RHSA-2015:2623 1 CVE

Red Hat Security Advisory: grub2 security and bug fix update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 20

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::client grub2 1:2.02-0.33.el7_2
Red Hat · RHEL 7 enterprise_linux:7::client grub2-debuginfo 1:2.02-0.33.el7_2
Red Hat · RHEL 7 enterprise_linux:7::client grub2-efi 1:2.02-0.33.el7_2
Red Hat · RHEL 7 enterprise_linux:7::client grub2-efi-modules 1:2.02-0.33.el7_2
Red Hat · RHEL 7 enterprise_linux:7::client grub2-tools 1:2.02-0.33.el7_2
Red Hat · RHEL 7 enterprise_linux:7::computenode grub2 1:2.02-0.33.el7_2
Red Hat · RHEL 7 enterprise_linux:7::computenode grub2-debuginfo 1:2.02-0.33.el7_2
Red Hat · RHEL 7 enterprise_linux:7::computenode grub2-efi 1:2.02-0.33.el7_2
Red Hat · RHEL 7 enterprise_linux:7::computenode grub2-efi-modules 1:2.02-0.33.el7_2
Red Hat · RHEL 7 enterprise_linux:7::computenode grub2-tools 1:2.02-0.33.el7_2
Red Hat · RHEL 7 enterprise_linux:7::server grub2 1:2.02-0.33.el7_2
Red Hat · RHEL 7 enterprise_linux:7::server grub2-debuginfo 1:2.02-0.33.el7_2
Red Hat · RHEL 7 enterprise_linux:7::server grub2-efi 1:2.02-0.33.el7_2
Red Hat · RHEL 7 enterprise_linux:7::server grub2-efi-modules 1:2.02-0.33.el7_2
Red Hat · RHEL 7 enterprise_linux:7::server grub2-tools 1:2.02-0.33.el7_2
Red Hat · RHEL 7 enterprise_linux:7::workstation grub2 1:2.02-0.33.el7_2
Red Hat · RHEL 7 enterprise_linux:7::workstation grub2-debuginfo 1:2.02-0.33.el7_2
Red Hat · RHEL 7 enterprise_linux:7::workstation grub2-efi 1:2.02-0.33.el7_2
Red Hat · RHEL 7 enterprise_linux:7::workstation grub2-efi-modules 1:2.02-0.33.el7_2
Red Hat · RHEL 7 enterprise_linux:7::workstation grub2-tools 1:2.02-0.33.el7_2

Vulnerabilities 1

  • High 7.4
    CVE-2015-8370

    Multiple integer underflows in Grub2 1.98 through 2.02 allow physically proximate attackers to bypass authentication, o…

    grub2 grub2 Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/System_Administrators_Guide/sec-Reinstalling_GRUB_2.html#sec-grub2-reinstall_on_BIOS-Based_Machines
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1286966
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1290089
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2623.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-8370
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-8370
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-8370
  • article
    http://hmarco.org/bugs/CVE-2015-8370-Grub2-authentication-bypass.html