Grub2: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen

Summary

Product

Vulnerabilities 8

• Medium 6.4
  CVE-2020-15705

  GRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shim

  GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed. This only affects systems where the kernel signing certificate has been imported directly into the secure boot database and the GRUB image is boot…

  Ubuntu grub2 in Ubuntu grub2-signed grub2-unsigned Ubuntu Alpine
  Jul 29, 2020
• Medium 6.4
  CVE-2020-15706

  GRUB2 contains a race condition leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing.

  GRUB2 contains a race condition in grub_script_function_create() leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing, leading to arbitrary code execution and secure boot restr…

  Ubuntu grub2 in Ubuntu grub2 grub2-signed Debian Ubuntu Alpine
  Jul 29, 2020
• Medium 5.7
  CVE-2020-14310

  There is an issue on grub2 before version 2.06 at function read_section_as_string(). It expects a font name to be at ma…

  The Grub2 Project grub2 grub2 grub2-signed Debian Ubuntu Azure Linux Alpine
  Jul 31, 2020
• Medium 5.7
  CVE-2020-14311

  There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A filesystem containing a s…

  The Grub2 Project grub2 grub2 grub2-signed Debian Ubuntu Azure Linux Alpine
  Jul 31, 2020
• Medium 5.7
  CVE-2020-15707

  GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow.

  Integer overflows were discovered in the functions grub_cmd_initrd and grub_initrd_init in the efilinux component of GRUB2, as shipped in Debian, Red Hat, and Ubuntu (the functionality is not included in GRUB2 upstream), leading to a heap-based buffer overflo…

  Ubuntu grub2 in Ubuntu grub2 grub2-signed Debian Ubuntu Alpine
  Jul 29, 2020
• Unscored —
  CVE-2020-10713 Public exploit

  A flaw was found in grub2, prior to version 2.06. An attacker may use the GRUB 2 flaw to hijack and tamper the GRUB ver…

  grub2 grub2-signed grub2-unsigned grub2 Debian Ubuntu Azure Linux Alpine
  Jul 30, 2020
• Unscored —
  CVE-2020-14308

  In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic overflows on the requeste…

  grub2 grub2-signed grub2-unsigned grub2 Debian Ubuntu Azure Linux Alpine
  Jul 29, 2020
• Unscored —
  CVE-2020-14309

  There's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems containing a symbolic link w…

  grub2 grub2-signed grub2-unsigned grub2 Debian Ubuntu Azure Linux Alpine
  Jul 30, 2020

Revision history

1. 2026-03-17 #24

   Neue Updates von Oracle Linux aufgenommen

2. 2025-04-09 #23

   Neue Updates von Oracle Linux aufgenommen

3. 2024-05-28 #22

   Neue Updates von Oracle Linux aufgenommen

4. 2023-12-04 #21

   Neue Updates von IBM aufgenommen

5. 2023-01-25 #20

   Neue Updates von Oracle Linux aufgenommen

6. 2022-07-14 #19

   Neue Updates von Oracle Linux aufgenommen

7. 2022-07-04 #18

   Neue Updates von Oracle Linux aufgenommen

8. 2021-05-02 #17

   Neue Updates von Gentoo aufgenommen

9. 2021-04-20 #16

   Referenz "BootHole" aufgenommen

10. 2020-12-08 #15

    Neue Updates von Aruba aufgenommen

11. 2020-10-05 #14

    Neue Updates von Red Hat aufgenommen

12. 2020-09-29 #13

    Neue Updates von Red Hat aufgenommen

13. 2020-09-20 #12

    Neue Updates von HP aufgenommen

14. 2020-09-15 #11

    Neue Updates von SUSE aufgenommen

15. 2020-09-14 #10

    Neue Updates von SUSE aufgenommen

16. 2020-08-25 #9

    Neue Updates von SUSE aufgenommen

17. 2020-08-13 #8

    Neue Updates von AVAYA aufgenommen

18. 2020-08-12 #7

    Neue Updates von Palo Alto Networks aufgenommen

19. 2020-08-05 #6

    Produktversion angepasst

20. 2020-08-04 #5

    Neue Updates von Ubuntu aufgenommen

21. 2020-08-03 #4

    Neue Updates von Red Hat aufgenommen

22. 2020-08-02 #3

    Neue Updates von HP und Red Hat aufgenommen

23. 2020-07-30 #2

    Neue Updates von Huawei aufgenommen

24. 2020-07-29 #1

    Initiale Fassung

References

• Microsoft Security Advisory vom 2020-07-29
  https://portal.msrc.microsoft.com/de-DE/security-guidance/advisory/ADV200011
• RedHat Security Advisory
  https://access.redhat.com/errata/RHSA-2020:3216
• RedHat Security Advisory
  https://access.redhat.com/errata/RHSA-2020:3217
• RedHat Security Advisory
  https://access.redhat.com/errata/RHSA-2020:3227
• RedHat Security Advisory
  https://access.redhat.com/errata/RHSA-2020:3223
• SuSE Security Advisory
  http://lists.suse.com/pipermail/sle-security-updates/2020-July/007195.html
• SuSE Security Advisory
  http://lists.suse.com/pipermail/sle-security-updates/2020-July/007196.html
• SuSE Security Advisory
  http://lists.suse.com/pipermail/sle-security-updates/2020-July/007197.html
• SuSE Security Advisory
  http://lists.suse.com/pipermail/sle-security-updates/2020-July/007198.html
• SuSE Security Advisory
  http://lists.suse.com/pipermail/sle-security-updates/2020-July/007199.html
• SuSE Security Advisory
  http://lists.suse.com/pipermail/sle-security-updates/2020-July/007200.html
• SuSE Security Advisory
  http://lists.suse.com/pipermail/sle-security-updates/2020-July/007201.html
• Ubuntu Security Advisory
  https://usn.ubuntu.com/4432-1/
• Debian Security Advisory
  https://www.debian.org/security/2020/dsa-4735
• Huawei Security Advisory HUAWEI-SA-20200716-01-DNS vom 2020-07-30
  https://www.huawei.com/en/psirt/security-notices/huawei-sn-20200730-01-grub2-en
• HPE Security Bulletin
  https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-hpesbhf04019en_us
• Red Hat Security Advisory RHSA-2020:3273 vom 2020-08-03
  https://access.redhat.com/errata/RHSA-2020:3273
• Red Hat Security Advisory RHSA-2020:3275 vom 2020-08-03
  https://access.redhat.com/errata/RHSA-2020:3275
• Red Hat Security Advisory RHSA-2020:3276 vom 2020-08-03
  https://access.redhat.com/errata/RHSA-2020:3276
• Red Hat Security Advisory RHSA-2020:3274 vom 2020-08-03
  https://access.redhat.com/errata/RHSA-2020:3274
• Red Hat Security Advisory RHSA-2020:3271 vom 2020-08-03
  https://access.redhat.com/errata/RHSA-2020:3271
• Ubuntu Security Notice USN-4432-2 vom 2020-08-05
  https://ubuntu.com/security/notices/USN-4432-2
• Cisco Security Advisory CISCO-SA-GRUB2-CODE-EXEC-XLEPCAPY vom 2020-08-04
  https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-grub2-code-exec-xLePCAPY
• Palo Alto Networks Security Advisory PAN-SA-2020-0008 vom 2020-08-12
  https://security.paloaltonetworks.com/PAN-SA-2020-0008
• AVAYA Security Advisory ASA-2020-102 vom 2020-08-14
  https://downloads.avaya.com/css/P8/documents/101070227
• SUSE Security Update SUSE-SU-2020:14461-1 vom 2020-08-25
  http://lists.suse.com/pipermail/sle-security-updates/2020-August/007297.html
• SUSE Security Update SUSE-SU-2020:2304-1 vom 2020-08-25
  http://lists.suse.com/pipermail/sle-security-updates/2020-August/007290.html
• SUSE Security Update SUSE-SU-2020:2308-1 vom 2020-08-25
  http://lists.suse.com/pipermail/sle-security-updates/2020-August/007292.html
• SUSE Security Update SUSE-SU-2020:2307-1 vom 2020-08-25
  http://lists.suse.com/pipermail/sle-security-updates/2020-August/007293.html
• SUSE Security Update SUSE-SU-2020:2303-1 vom 2020-08-25
  http://lists.suse.com/pipermail/sle-security-updates/2020-August/007294.html
• SUSE Security Update SUSE-SU-2020:2306-1 vom 2020-08-25
  http://lists.suse.com/pipermail/sle-security-updates/2020-August/007295.html
• SUSE Security Update SUSE-SU-2020:2305-1 vom 2020-08-25
  http://lists.suse.com/pipermail/sle-security-updates/2020-August/007298.html
• SUSE Security Update SUSE-SU-2020:2629-1 vom 2020-09-14
  http://lists.suse.com/pipermail/sle-security-updates/2020-September/007421.html
• SUSE Security Update SUSE-SU-2020:2626-1 vom 2020-09-14
  http://lists.suse.com/pipermail/sle-security-updates/2020-September/007423.html
• SUSE Security Update SUSE-SU-2020:2627-1 vom 2020-09-14
  http://lists.suse.com/pipermail/sle-security-updates/2020-September/007424.html
• SUSE Security Update SUSE-SU-2020:2628-1 vom 2020-09-14
  http://lists.suse.com/pipermail/sle-security-updates/2020-September/007422.html
• SUSE Security Update SUSE-SU-2020:14490-1 vom 2020-09-15
  http://lists.suse.com/pipermail/sle-security-updates/2020-September/007428.html
• HP CUSTOMER BULLETIN
  https://support.hpe.com/hpesc/public/docDisplay?cc=de&docId=emr_na-a00105191de_de&lang=de
• Red Hat Security Advisory RHSA-2020:4115 vom 2020-09-30
  https://access.redhat.com/errata/RHSA-2020:4115
• Red Hat Security Advisory RHSA-2020:4172 vom 2020-10-05
  https://access.redhat.com/errata/RHSA-2020:4172
• Aruba Product Security Advisory
  https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-012.txt
• Gentoo Linux Security Advisory GLSA-202104-05 vom 2021-05-01
  https://security.gentoo.org/glsa/202104-05
• Oracle Linux Security Advisory ELSA-2022-5095 vom 2022-07-04
  https://linux.oracle.com/errata/ELSA-2022-5095.html
• Oracle Linux Security Advisory ELSA-2022-9595 vom 2022-07-14
  http://linux.oracle.com/errata/ELSA-2022-9595.html
• Oracle Linux Security Advisory ELSA-2023-0049 vom 2023-01-25
  http://linux.oracle.com/errata/ELSA-2023-0049.html
• IBM Security Bulletin 7087688 vom 2023-12-04
  https://www.ibm.com/support/pages/node/7087688
• Oracle Linux Security Advisory ELSA-2024-3184 vom 2024-05-28
  https://linux.oracle.com/errata/ELSA-2024-3184.html
• Oracle Linux Security Advisory ELSA-2025-3367 vom 2025-04-10
  https://linux.oracle.com/errata/ELSA-2025-3367.html
• Oracle Linux Security Advisory ELSA-2026-4648 vom 2026-03-18
  https://linux.oracle.com/errata/ELSA-2026-4648.html