CVE-2020-15705

MÉDIO 6.4CVE-2020-15705 · Published 29/07/2020 · updated 17/06/2026

Em resumo

CVE-2020-15705 é uma vulnerabilidade MÉDIO (CVSS 6.4) que afeta grub2 (gnu), openshift container platform (redhat).
Chance de exploração nos próximos 30 dias (EPSS): 1.4%, maior que 72.4% das vulnerabilidades.
Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.

Package	Affected versions	Patched versions
grub2 gnu	`≤ 2.04`	No fix yet
openshift container platform redhat	`= 4.0`	No fix yet

Description

GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed. This only affects systems where the kernel signing certificate has been imported directly into the secure boot database and the GRUB image is booted directly without the use of shim. This issue affects GRUB2 version 2.04 and prior versions.

References

lists.opensuse.org/opensuse-security-announce/2020-08/msg00067.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2020-08/msg00069.html · Mailing List
ubuntu.com/security/notices/USN-4432-1 · Third Party Advisory
openwall.com/lists/oss-security/2020/07/29/3 · Mailing List
openwall.com/lists/oss-security/2021/03/02/3 · Mailing List
openwall.com/lists/oss-security/2021/09/17/2 · Mailing List
openwall.com/lists/oss-security/2021/09/17/4 · Mailing List
openwall.com/lists/oss-security/2021/09/21/1 · Mailing List
access.redhat.com/security/vulnerabilities/grub2bootloader · Third Party Advisory
lists.gnu.org/archive/html/grub-devel/2020-07/msg00034.html · Issue Tracking
portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV200011

Mais vulnerabilidades de grub2

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

grub2

gnu

≤ 2.04

No fix yet

openshift container platform

redhat

= 4.0

No fix yet

Description

Mais vulnerabilidades de grub2

Ver tudo →