Red Hat Security Advisory

RHSA-2020:3227

grub2 security update

Released 2020-07-29 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS E4S (v. 8.0) fwupd-1.1.4-2.el8_0, grub2-1:2.02-87.el8_0, grub2-common-1:2.02-87.el8_0 +18

Fixes 8 records

TI-2020-08612 CVE-2020-10713 · GHSA-m2fm-gm84-v5jq

Buffer overflow in Grub

LOW 39

A flaw was found in grub2, prior to version 2.06.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.01711 Published 2020-07-30 Partial fix CWE-120

TI-2020-12379 CVE-2020-15707 · GHSA-mf72-cf87-p3p2

GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow.

LOW 32

Integer overflows were discovered in the functions grub_cmd_initrd and grub_initrd_init in the efilinux component of GRUB2, as shipped in Debian, Red Hat, and Ubuntu (the functionality is not included in GRUB2 upstream),…

CVSS 3.1MEDIUM 6.4 Local High privileges No interaction EPSS 0.01588 Published 2020-07-29 Fixed in 2.04-1ubuntu26.1, 2.02-2ubuntu8.16 +2 CWE-362

TI-2020-12377 CVE-2020-15705 · GHSA-w739-fjv8-98pq

GRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shim

LOW 31

GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed.

CVSS 3.1MEDIUM 6.4 Local High privileges No interaction EPSS 0.01392 Published 2020-07-29 Fixed in 2.04-1ubuntu26.1, 2.02-2ubuntu8.16 +2 CWE-347

TI-2020-12378 CVE-2020-15706 · GHSA-gmqm-wgp3-r69q

Race condition in Ubuntu grub2 in Ubuntu

LOW 30

GRUB2 contains a race condition in grub_script_function_create() leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing, leading to arbitra…

CVSS 3.1MEDIUM 6.4 Local High privileges No interaction EPSS 0.00977 Published 2020-07-29 Fixed in 2.04-1ubuntu26.1, 2.02-2ubuntu8.16 +2 CWE-362

TI-2020-11180 CVE-2020-14309 · GHSA-8whj-mpcj-4jv6

Integer overflow in Grub

LOW 30

There's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems containing a symbolic link with name length of UINT32 bytes in size.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00482 Published 2020-07-30 Fixed CWE-190

TI-2020-11179 CVE-2020-14308 · GHSA-6f8f-rchr-mhp3

Integer overflow in Grub

LOW 29

In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic overflows on the requested allocation size.

CVSS 3.1MEDIUM 6.4 Local High privileges No interaction EPSS 0.00432 Published 2020-07-29 Fixed CWE-190

TI-2020-11182 CVE-2020-14311 · GHSA-2jpf-4r7j-42qr

Heap-based buffer overflow in grub2

LOW 27

There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00465 Published 2020-07-31 Fixed CWE-122

TI-2020-11181 CVE-2020-14310 · GHSA-849w-6cw8-9p7m

Heap-based buffer overflow in grub2

LOW 27

There is an issue on grub2 before version 2.06 at function read_section_as_string().

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.0046 Published 2020-07-31 Fixed CWE-122