Read the docs
TI-2020-12377 Aliases CVE-2020-15705GHSA-w739-fjv8-98pq

GRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shim

Priority LOW 31CWE-347Published · Updated

Key facts

Attack vector
Local
Privileges required
High
User interaction
None
Attack complexity
High
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA, Red Hat and Microsoft. Impact type from CWE-347.

Summary

GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed. This only affects systems where the kernel signing certificate has been imported directly into the secure boot database and the GRUB image is booted directly without the use of shim. This issue affects GRUB2 version 2.04 and prior versions.

Why it matters now

EPSS 0.01392 72nd percentileScored 2026-11-07
Fix Fixed grub2 in Ubuntu (Ubuntu): 2.04-1ubuntu26.1, 2.02-2ubuntu8.16, 2.02~beta2-36ubuntu3.26 +1Red Hat: 9 advisoriesMicrosoft: 1 update

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
Ubuntugrub2 in Ubuntu20.04 LTS to before 2.04-1ubuntu26.1; 18.04 LTS to before 2.02-2ubuntu8.16; 16.04 LTS to before 2.02~beta2-36ubuntu3.26; 14.04 ESM to before 2.02~beta2-9ubuntu1.202.04-1ubuntu26.1, 2.02-2ubuntu8.16, 2.02~beta2-36ubuntu3.26, 2.02~beta2-9ubuntu1.20Patch availableCNA
  • grub2 in Ubuntu VendorUbuntu Affected 20.04 LTS to before 2.04-1ubuntu26.1; 18.04 LTS to before 2.02-2ubuntu8.16; 16.04 LTS to before 2.02~beta2-36ubuntu3.26; 14.04 ESM to before 2.02~beta2-9ubuntu1.20 Fixed in 2.04-1ubuntu26.1, 2.02-2ubuntu8.16, 2.02~beta2-36ubuntu3.26, 2.02~beta2-9ubuntu1.20 Patch available CNA

CPE configurations NVD · 32

CPEVersionsRoleVendor
cpe:2.3:a:gnu:grub2:*:*:*:*:*:*:*:*up to 2.04VulnerableGNU
cpe:2.3:a:redhat:enterprise_linux_atomic_host:-:*:*:*:*:*:*:*not specified by NVDVulnerableRed Hat
cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*4.0VulnerableRed Hat
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*14.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*16.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*18.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*20.04VulnerableCanonical
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*10.0VulnerableDebian
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*15.1VulnerableopenSUSE
cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*15.2VulnerableopenSUSE
  • cpe:2.3:a:gnu:grub2:*:*:*:*:*:*:*:* Versions up to 2.04 Vulnerable ·GNU
  • cpe:2.3:a:redhat:enterprise_linux_atomic_host:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Red Hat
  • cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:* Versions 14.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* Versions 16.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* Versions 18.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:* Versions 20.04 Vulnerable ·Canonical
  • cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Debian
  • cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* Versions 15.1 Vulnerable ·openSUSE
  • cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:* Versions 15.2 Vulnerable ·openSUSE
Show 22 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*8.0VulnerableRed Hat
cpe:2.3:o:suse:suse_linux_enterprise_server:11:*:*:*:*:*:*:*11VulnerableSUSE
cpe:2.3:o:suse:suse_linux_enterprise_server:12:*:*:*:*:*:*:*12VulnerableSUSE
cpe:2.3:o:suse:suse_linux_enterprise_server:15:*:*:*:*:*:*:*15VulnerableSUSE
cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*not specified by NVDVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*1607VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*1709VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*1803VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*1809VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*1903VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*1909VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*2004VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*not specified by NVDVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*not specified by NVDVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*not specified by NVDVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*r2VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*not specified by NVDVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*1903VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*1909VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*2004VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*not specified by NVDVulnerableMicrosoft
  • cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Red Hat
  • cpe:2.3:o:suse:suse_linux_enterprise_server:11:*:*:*:*:*:*:* Versions 11 Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux_enterprise_server:12:*:*:*:*:*:*:* Versions 12 Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux_enterprise_server:15:*:*:*:*:*:*:* Versions 15 Vulnerable ·SUSE
  • cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:* Versions 1607 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:* Versions 1709 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:* Versions 1803 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:* Versions 1809 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:* Versions 1903 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:* Versions 1909 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:* Versions 2004 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:* Versions r2 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:* Versions 1903 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:* Versions 1909 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:* Versions 2004 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft

Remediation

  • Fix · CNA grub2 in Ubuntu (Ubuntu) Fixed in 2.04-1ubuntu26.1, 2.02-2ubuntu8.16, 2.02~beta2-36ubuntu3.26, 2.02~beta2-9ubuntu1.20

Red Hat 9 advisories

  • RHSA-2020:3274 Released 2020-08-03 · Red Hat rating Moderate
    grub2 security and bug fix update
    • Red Hat Enterprise Linux ComputeNode EUS (v. 7.7) fwupdate-12-6.el7_7, fwupdate-efi-12-6.el7_7, fwupdate-libs-12-6.el7_7 +18
    • Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7) fwupdate-devel-12-6.el7_7, grub2-efi-aa64-modules-1:2.02-0.86.el7_7, grub2-efi-ia32-cdboot-1:2.02-0.86.el7_7 +4
    • Red Hat Enterprise Linux Server EUS (v. 7.7) fwupdate-12-6.el7_7, fwupdate-efi-12-6.el7_7, fwupdate-libs-12-6.el7_7 +22
    • Red Hat Enterprise Linux Server Optional EUS (v. 7.7) fwupdate-devel-12-6.el7_7, grub2-efi-aa64-modules-1:2.02-0.86.el7_7, grub2-efi-ia32-cdboot-1:2.02-0.86.el7_7 +7
  • RHSA-2020:3276 Released 2020-08-03 · Red Hat rating Moderate
    grub2 security and bug fix update
    • Red Hat Enterprise Linux Server AUS (v. 7.3) grub2-1:2.02-0.86.el7, grub2-common-1:2.02-0.86.el7, grub2-efi-ia32-1:2.02-0.86.el7 +17
    • Red Hat Enterprise Linux Server E4S (v. 7.3) grub2-1:2.02-0.86.el7, grub2-common-1:2.02-0.86.el7, grub2-efi-aa64-modules-1:2.02-0.86.el7 +21
    • Red Hat Enterprise Linux Server Optional AUS (v. 7.3) grub2-1:2.02-0.86.el7, grub2-common-1:2.02-0.86.el7, grub2-efi-aa64-modules-1:2.02-0.86.el7 +17
    • Red Hat Enterprise Linux Server Optional E4S (v. 7.3) grub2-1:2.02-0.86.el7, grub2-common-1:2.02-0.86.el7, grub2-efi-aa64-modules-1:2.02-0.86.el7 +18
    • Red Hat Enterprise Linux Server Optional TUS (v. 7.3) grub2-1:2.02-0.86.el7, grub2-common-1:2.02-0.86.el7, grub2-efi-aa64-modules-1:2.02-0.86.el7 +17
    • Red Hat Enterprise Linux Server TUS (v. 7.3) grub2-1:2.02-0.86.el7, grub2-common-1:2.02-0.86.el7, grub2-efi-aa64-modules-1:2.02-0.86.el7 +20
  • RHSA-2020:3271 Released 2020-08-03 · Red Hat rating Moderate
    grub2 security and bug fix update
    • Red Hat Enterprise Linux ComputeNode EUS (v. 7.6) fwupdate-12-6.el7_6, fwupdate-efi-12-6.el7_6, fwupdate-libs-12-6.el7_6 +18
    • Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6) fwupdate-devel-12-6.el7_6, grub2-efi-aa64-modules-1:2.02-0.86.el7_6, grub2-efi-ia32-cdboot-1:2.02-0.86.el7_6 +4
    • Red Hat Enterprise Linux Server EUS (v. 7.6) fwupdate-12-6.el7_6, fwupdate-efi-12-6.el7_6, fwupdate-libs-12-6.el7_6 +22
    • Red Hat Enterprise Linux Server Optional EUS (v. 7.6) fwupdate-devel-12-6.el7_6, grub2-efi-aa64-modules-1:2.02-0.86.el7_6, grub2-efi-ia32-cdboot-1:2.02-0.86.el7_6 +7
    • Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) grub2-1:2.02-0.86.el7_6, grub2-common-1:2.02-0.86.el7_6, grub2-ppc64le-1:2.02-0.86.el7_6 +4
    • Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) grub2-efi-aa64-modules-1:2.02-0.86.el7_6, grub2-efi-ia32-modules-1:2.02-0.86.el7_6, grub2-efi-x64-modules-1:2.02-0.86.el7_6 +3
Show 6 more Red Hat advisories
  • RHSA-2020:3275 Released 2020-08-03 · Red Hat rating Moderate
    grub2 security and bug fix update
    • Red Hat Enterprise Linux Server AUS (v. 7.4) fwupdate-9-10.el7_4, fwupdate-efi-9-10.el7_4, fwupdate-libs-9-10.el7_4 +18
    • Red Hat Enterprise Linux Server E4S (v. 7.4) fwupdate-9-10.el7_4, fwupdate-efi-9-10.el7_4, fwupdate-libs-9-10.el7_4 +20
    • Red Hat Enterprise Linux Server Optional AUS (v. 7.4) fwupdate-9-10.el7_4, fwupdate-devel-9-10.el7_4, grub2-efi-aa64-modules-1:2.02-0.86.el7_4 +5
    • Red Hat Enterprise Linux Server Optional E4S (v. 7.4) fwupdate-9-10.el7_4, fwupdate-devel-9-10.el7_4, grub2-efi-aa64-modules-1:2.02-0.86.el7_4 +8
    • Red Hat Enterprise Linux Server Optional TUS (v. 7.4) fwupdate-9-10.el7_4, fwupdate-devel-9-10.el7_4, grub2-efi-aa64-modules-1:2.02-0.86.el7_4 +5
    • Red Hat Enterprise Linux Server TUS (v. 7.4) fwupdate-9-10.el7_4, fwupdate-efi-9-10.el7_4, fwupdate-libs-9-10.el7_4 +18
  • RHSA-2020:3273 Released 2020-08-03 · Red Hat rating Moderate
    grub2 security and bug fix update
    • Red Hat Enterprise Linux Server AUS (v. 7.2) grub2-1:2.02-0.86.el7_2, grub2-common-1:2.02-0.86.el7_2, grub2-efi-ia32-1:2.02-0.86.el7_2 +14
    • Red Hat Enterprise Linux Server Optional AUS (v. 7.2) grub2-1:2.02-0.86.el7_2, grub2-efi-aa64-modules-1:2.02-0.86.el7_2, grub2-efi-ia32-cdboot-1:2.02-0.86.el7_2 +10
  • RHSA-2020:3227 Released 2020-07-29 · Red Hat rating Moderate
    grub2 security update
    • Red Hat Enterprise Linux BaseOS E4S (v. 8.0) fwupd-1.1.4-2.el8_0, grub2-1:2.02-87.el8_0, grub2-common-1:2.02-87.el8_0 +18
  • RHSA-2020:3217 Released 2020-07-29 · Red Hat rating Moderate
    grub2 security and bug fix update
    • Red Hat Enterprise Linux Client (v. 7) fwupdate-12-6.el7_8, fwupdate-efi-12-6.el7_8, fwupdate-libs-12-6.el7_8 +18
    • Red Hat Enterprise Linux Client Optional (v. 7) fwupdate-devel-12-6.el7_8, grub2-efi-aa64-modules-1:2.02-0.86.el7_8, grub2-efi-ia32-cdboot-1:2.02-0.86.el7_8 +4
    • Red Hat Enterprise Linux ComputeNode (v. 7) fwupdate-12-6.el7_8, fwupdate-efi-12-6.el7_8, fwupdate-libs-12-6.el7_8 +18
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) fwupdate-devel-12-6.el7_8, grub2-efi-aa64-modules-1:2.02-0.86.el7_8, grub2-efi-ia32-cdboot-1:2.02-0.86.el7_8 +4
    • Red Hat Enterprise Linux Server (v. 7) fwupdate-12-6.el7_8, fwupdate-efi-12-6.el7_8, fwupdate-libs-12-6.el7_8 +22
    • Red Hat Enterprise Linux Server Optional (v. 7) fwupdate-devel-12-6.el7_8, grub2-efi-aa64-modules-1:2.02-0.86.el7_8, grub2-efi-ia32-cdboot-1:2.02-0.86.el7_8 +7
    • Red Hat Enterprise Linux Workstation (v. 7) fwupdate-12-6.el7_8, fwupdate-efi-12-6.el7_8, fwupdate-libs-12-6.el7_8 +18
    • Red Hat Enterprise Linux Workstation Optional (v. 7) fwupdate-devel-12-6.el7_8, grub2-efi-aa64-modules-1:2.02-0.86.el7_8, grub2-efi-ia32-cdboot-1:2.02-0.86.el7_8 +4
  • RHSA-2020:3223 Released 2020-07-29 · Red Hat rating Moderate
    grub2 security update
    • Red Hat CodeReady Linux Builder EUS (v. 8.1) shim-unsigned-x64-15-7.el8
    • Red Hat Enterprise Linux BaseOS EUS (v. 8.1) fwupd-1.1.4-2.el8_1, grub2-1:2.02-87.el8_1, grub2-common-1:2.02-87.el8_1 +21
  • RHSA-2020:3216 Released 2020-07-29 · Red Hat rating Moderate
    grub2 security update
    • Red Hat CodeReady Linux Builder (v. 8) shim-unsigned-x64-15-7.el8
    • Red Hat Enterprise Linux BaseOS (v. 8) fwupd-1.1.4-7.el8_2, grub2-1:2.02-87.el8_2, grub2-common-1:2.02-87.el8_2 +21

Microsoft 1 update

  • ADV200011 Released 2020-07-29
    Microsoft Guidance for Addressing Security Feature Bypass in GRUB

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    Ubuntu grub2 in Ubuntu — ubuntu.com/security/notices/USN-4432-1

    3 records Highest priority Priority LOW 3 LOW

    Other records, highest priority first

    • TI-2020-12379 GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow.Priority LOW 32
    • TI-2020-12378 Race condition in Ubuntu grub2 in UbuntuPriority LOW 30
    Show all 3 records → Advisory →
  • Advisory ·

    Ubuntu grub2 in Ubuntu — access.redhat.com/security/vulnerabilities/grub2bootloader

    3 records Highest priority Priority LOW 3 LOW

    Other records, highest priority first

    • TI-2020-12379 GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow.Priority LOW 32
    • TI-2020-12378 Race condition in Ubuntu grub2 in UbuntuPriority LOW 30
    Show all 3 records → Advisory →
Show 5 more groups
  • Advisory ·

    Ubuntu grub2 in Ubuntu — USN-4432-1

    3 records Highest priority Priority LOW 3 LOW

    Other records, highest priority first

    • TI-2020-12379 GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow.Priority LOW 32
    • TI-2020-12378 Race condition in Ubuntu grub2 in UbuntuPriority LOW 30
    Show all 3 records → Advisory →
  • Advisory ·

    Ubuntu grub2 in Ubuntu — wiki.ubuntu.com/SecurityTeam/KnowledgeBase/GRUB2SecureBootB…

    3 records Highest priority Priority LOW 3 LOW

    Other records, highest priority first

    • TI-2020-12379 GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow.Priority LOW 32
    • TI-2020-12378 Race condition in Ubuntu grub2 in UbuntuPriority LOW 30
    Show all 3 records → Advisory →
  • Advisory ·

    Ubuntu grub2 in Ubuntu — debian.org/security/2020-GRUB-UEFI-SecureBoot

    3 records Highest priority Priority LOW 3 LOW

    Other records, highest priority first

    • TI-2020-12379 GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow.Priority LOW 32
    • TI-2020-12378 Race condition in Ubuntu grub2 in UbuntuPriority LOW 30
    Show all 3 records → Advisory →
  • Advisory ·

    Ubuntu grub2 in Ubuntu — suse.com/c/suse-addresses-grub2-secure-boot-issue

    3 records Highest priority Priority LOW 3 LOW

    Other records, highest priority first

    • TI-2020-12379 GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow.Priority LOW 32
    • TI-2020-12378 Race condition in Ubuntu grub2 in UbuntuPriority LOW 30
    Show all 3 records → Advisory →
  • Advisory ·

    Ubuntu grub2 in Ubuntu — suse.com/support/kb/doc/?id=000019673

    3 records Highest priority Priority LOW 3 LOW

    Other records, highest priority first

    • TI-2020-12379 GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow.Priority LOW 32
    • TI-2020-12378 Race condition in Ubuntu grub2 in UbuntuPriority LOW 30
    Show all 3 records → Advisory →

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat CodeReady Linux Builder (v. 8)Fixed RHSA-2020:3216
Red Hat CodeReady Linux Builder EUS (v. 8.1)Fixed RHSA-2020:3223
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2020:3216
Red Hat Enterprise Linux BaseOS E4S (v. 8.0)Fixed RHSA-2020:3227
Red Hat Enterprise Linux BaseOS EUS (v. 8.1)Fixed RHSA-2020:3223
Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2020:3217
Red Hat Enterprise Linux Client Optional (v. 7)Fixed RHSA-2020:3217
Red Hat Enterprise Linux ComputeNode (v. 7)Fixed RHSA-2020:3217
Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)Fixed RHSA-2020:3271
Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)Fixed RHSA-2020:3274
Red Hat Enterprise Linux ComputeNode Optional (v. 7)Fixed RHSA-2020:3217
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)Fixed RHSA-2020:3271
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)Fixed RHSA-2020:3274
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2020:3217
Red Hat Enterprise Linux Server AUS (v. 7.2)Fixed RHSA-2020:3273
Red Hat Enterprise Linux Server AUS (v. 7.3)Fixed RHSA-2020:3276
Red Hat Enterprise Linux Server AUS (v. 7.4)Fixed RHSA-2020:3275
Red Hat Enterprise Linux Server E4S (v. 7.3)Fixed RHSA-2020:3276
Red Hat Enterprise Linux Server E4S (v. 7.4)Fixed RHSA-2020:3275
Red Hat Enterprise Linux Server EUS (v. 7.6)Fixed RHSA-2020:3271
Red Hat Enterprise Linux Server EUS (v. 7.7)Fixed RHSA-2020:3274
Red Hat Enterprise Linux Server Optional (v. 7)Fixed RHSA-2020:3217
Red Hat Enterprise Linux Server Optional AUS (v. 7.2)Fixed RHSA-2020:3273
Red Hat Enterprise Linux Server Optional AUS (v. 7.3)Fixed RHSA-2020:3276
Red Hat Enterprise Linux Server Optional AUS (v. 7.4)Fixed RHSA-2020:3275
Red Hat Enterprise Linux Server Optional E4S (v. 7.3)Fixed RHSA-2020:3276
Red Hat Enterprise Linux Server Optional E4S (v. 7.4)Fixed RHSA-2020:3275
Red Hat Enterprise Linux Server Optional EUS (v. 7.6)Fixed RHSA-2020:3271
Red Hat Enterprise Linux Server Optional EUS (v. 7.7)Fixed RHSA-2020:3274
Red Hat Enterprise Linux Server Optional TUS (v. 7.3)Fixed RHSA-2020:3276
Red Hat Enterprise Linux Server Optional TUS (v. 7.4)Fixed RHSA-2020:3275
Red Hat Enterprise Linux Server TUS (v. 7.3)Fixed RHSA-2020:3276
Red Hat Enterprise Linux Server TUS (v. 7.4)Fixed RHSA-2020:3275
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2020:3217
Red Hat Enterprise Linux Workstation Optional (v. 7)Fixed RHSA-2020:3217
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)Fixed RHSA-2020:3271
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)Fixed RHSA-2020:3271

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-15705
  2. 2026-10-03 Alias added: GHSA-w739-fjv8-98pq

References

Patch 1

Advisory 19

  • TI-2021-02452 Incorrect authorization in Ubuntu linux kernel KEVCVSS 3.1HIGH 8.8
  • TI-2007-05153 Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD… CVSS 2.0HIGH 7.2
  • TI-2004-01032 Multiple vulnerabilities in the IGMP functionality for Linux kernel 2.4.22 to 2.4.28, and… CVSS 2.0HIGH 10.0
  • TI-2004-00896 Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other… CVSS 2.0HIGH 10.0
  • TI-2004-00800 Buffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x through 3.0.7 may… CVSS 2.0HIGH 10.0
  • TI-2004-00962 Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to… CVSS 2.0HIGH 10.0
See all 129 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences