Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: Ubuntu grub2 in Ubuntu — suse.com/c/suse-addresses-grub2-secure-boot-issue Clear all filters
TI-2020-12379 CVE-2020-15707 · GHSA-mf72-cf87-p3p2

GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow.

Priority LOW 32

Integer overflows were discovered in the functions grub_cmd_initrd and grub_initrd_init in the efilinux component of GRUB2, as shipped in Debian, Red Hat, and Ubuntu (the functionality is not included in GRUB2 upstream),…

CVSS 3.1MEDIUM 6.4 Local High privileges No interaction EPSS 0.01575 Published 2020-07-29 Fixed in 2.04-1ubuntu26.1, 2.02-2ubuntu8.16 +2 CWE-362
TI-2020-12378 CVE-2020-15706 · GHSA-gmqm-wgp3-r69q

Race condition in Ubuntu grub2 in Ubuntu

Priority LOW 30

GRUB2 contains a race condition in grub_script_function_create() leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing, leading to arbitra…

CVSS 3.1MEDIUM 6.4 Local High privileges No interaction EPSS 0.00969 Published 2020-07-29 Fixed in 2.04-1ubuntu26.1, 2.02-2ubuntu8.16 +2 CWE-362