TI-2020-08612 CVE-2020-10713 · GHSA-m2fm-gm84-v5jq
Buffer overflow in Grub
Priority LOW 39
A flaw was found in grub2, prior to version 2.06.
ADV200011
Microsoft Guidance for Addressing Security Feature Bypass in GRUB
Released 2020-07-29 · View on Microsoft →
Related records (16)
TI-2020-15650 CVE-2020-25632 · GHSA-r6r2-gvcm-979j
Use after free in grub2
Priority LOW 38
A flaw was found in grub2 in versions prior to 2.06.
TI-2021-03528 CVE-2021-20233 · GHSA-257g-8w4g-3cc3
Out-of-bounds write in grub2
Priority LOW 37
A flaw was found in grub2 in versions prior to 2.06.
TI-2020-11240 CVE-2020-14372 · GHSA-xh73-rjw5-phcw
A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the…
Priority LOW 36
A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of the ACPI command when Secure Boot is enabled.
TI-2020-15664 CVE-2020-25647 · GHSA-q9cp-m9vw-25xh
Out-of-bounds write in grub2
Priority LOW 35
A flaw was found in grub2 in versions prior to 2.06.
TI-2020-16864 CVE-2020-27779 · GHSA-7p29-8vr2-rmvx
Improper authorization in grub2
Priority LOW 33
A flaw was found in grub2 in versions prior to 2.06.
TI-2021-03520 CVE-2021-20225 · GHSA-hmmc-9q6p-vgg6
Out-of-bounds write in grub2
Priority LOW 32
A flaw was found in grub2 in versions prior to 2.06.
TI-2020-12379 CVE-2020-15707 · GHSA-mf72-cf87-p3p2
GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow.
Priority LOW 32
Integer overflows were discovered in the functions grub_cmd_initrd and grub_initrd_init in the efilinux component of GRUB2, as shipped in Debian, Red Hat, and Ubuntu (the functionality is not included in GRUB2 upstream),…
TI-2020-12377 CVE-2020-15705 · GHSA-w739-fjv8-98pq
GRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shim
Priority LOW 31
GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed.
TI-2020-16834 CVE-2020-27749 · GHSA-258p-xh3c-g68w
Stack-based buffer overflow in grub2
Priority LOW 30
A flaw was found in grub2 in versions prior to 2.06.
TI-2020-12378 CVE-2020-15706 · GHSA-gmqm-wgp3-r69q
Race condition in Ubuntu grub2 in Ubuntu
Priority LOW 30
GRUB2 contains a race condition in grub_script_function_create() leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing, leading to arbitra…
TI-2020-11180 CVE-2020-14309 · GHSA-8whj-mpcj-4jv6
Integer overflow in Grub
Priority LOW 30
There's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems containing a symbolic link with name length of UINT32 bytes in size.
TI-2021-02383 CVE-2021-3418 · GHSA-j6wm-c7q8-jcx7
If certificates that signed grub are installed into db, grub can be booted directly.
Priority LOW 29
If certificates that signed grub are installed into db, grub can be booted directly.
TI-2020-11179 CVE-2020-14308 · GHSA-6f8f-rchr-mhp3
Integer overflow in Grub
Priority LOW 29
In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic overflows on the requested allocation size.
TI-2020-11182 CVE-2020-14311 · GHSA-2jpf-4r7j-42qr
Heap-based buffer overflow in grub2
Priority LOW 27
There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems.
TI-2020-11181 CVE-2020-14310 · GHSA-849w-6cw8-9p7m
Heap-based buffer overflow in grub2
Priority LOW 27
There is an issue on grub2 before version 2.06 at function read_section_as_string().