CVE-2020-15707

Katalog CVE

CVSS 6.4 · Medium EPSS 1,6%

Kerentanan Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') pada gnu grub2, redhat enterprise linux atomic host +13 lainnya. Skor CVSS 3.1 6.4 (Medium) menurut NVD.

Deskripsi (NVD)

Integer overflows were discovered in the functions grub_cmd_initrd and grub_initrd_init in the efilinux component of GRUB2, as shipped in Debian, Red Hat, and Ubuntu (the functionality is not included in GRUB2 upstream), leading to a heap-based buffer overflow. These could be triggered by an extremely large number of arguments to the initrd command on 32-bit architectures, or a crafted filesystem with very large files on any architecture. An attacker could use this to execute arbitrary code and bypass UEFI Secure Boot restrictions. This issue affects GRUB2 version 2.04 and prior versions.

Rincian

Terbit di NVD

29 Juli 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.4 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CWE-190: Integer Overflow or Wraparound

EPSS (30 hari)

1,6% peluang dieksploitasi; lebih tinggi dari 74,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://lists.gnu.org/archive/html/grub-devel/2020-07/msg00034.html issue tracking · advisory vendor
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV200011 patch · advisory pihak ketiga · advisory vendor
• http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00016.html mailing list · advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00017.html mailing list · advisory pihak ketiga
• http://ubuntu.com/security/notices/USN-4432-1 advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2020/07/29/3 mailing list · advisory pihak ketiga
• https://access.redhat.com/security/vulnerabilities/grub2bootloader advisory pihak ketiga
• https://security.gentoo.org/glsa/202104-05 advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20200731-0008/ advisory pihak ketiga
• https://usn.ubuntu.com/4432-1/ advisory pihak ketiga
• https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/GRUB2SecureBootBypass advisory pihak ketiga
• https://www.debian.org/security/2020-GRUB-UEFI-SecureBoot advisory pihak ketiga
• https://www.debian.org/security/2020/dsa-4735 advisory pihak ketiga
• https://www.eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/ exploit · advisory pihak ketiga
• https://www.openwall.com/lists/oss-security/2020/07/29/3 mailing list · advisory pihak ketiga
• https://www.suse.com/c/suse-addresses-grub2-secure-boot-issue/ advisory pihak ketiga
• https://www.suse.com/support/kb/doc/?id=000019673 advisory pihak ketiga