rpm package
suse/grub2&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2
pkg:rpm/suse/grub2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2
Vulnerabilities (15)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2021-20233 | — | < 2.02-115.59.1 | 2.02-115.59.1 | Mar 3, 2021 | A flaw was found in grub2 in versions prior to 2.06. Setparam_prefix() in the menu rendering code performs a length calculation on the assumption that expressing a quoted single quote will require 3 characters, while it actually requires 4 characters which allows an attacker to c | ||
| CVE-2021-20225 | — | < 2.02-115.59.1 | 2.02-115.59.1 | Mar 3, 2021 | A flaw was found in grub2 in versions prior to 2.06. The option parser allows an attacker to write past the end of a heap-allocated buffer by calling certain commands with a large number of specific short forms of options. The highest threat from this vulnerability is to data con | ||
| CVE-2020-25632 | — | < 2.02-115.59.1 | 2.02-115.59.1 | Mar 3, 2021 | A flaw was found in grub2 in versions prior to 2.06. The rmmod implementation allows the unloading of a module used as a dependency without checking if any other dependent module is still loaded leading to a use-after-free scenario. This could allow arbitrary code to be executed | ||
| CVE-2020-25647 | — | < 2.02-115.59.1 | 2.02-115.59.1 | Mar 3, 2021 | A flaw was found in grub2 in versions prior to 2.06. During USB device initialization, descriptors are read with very little bounds checking and assumes the USB device is providing sane values. If properly exploited, an attacker could trigger memory corruption leading to arbitrar | ||
| CVE-2020-14372 | — | < 2.02-115.59.1 | 2.02-115.59.1 | Mar 3, 2021 | A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of the ACPI command when Secure Boot is enabled. This flaw allows an attacker with privileged access to craft a Secondary System Description Table (SSDT) containing code to overwrite the L | ||
| CVE-2020-27749 | — | < 2.02-115.59.1 | 2.02-115.59.1 | Mar 3, 2021 | A flaw was found in grub2 in versions prior to 2.06. Variable names present are expanded in the supplied command line into their corresponding variable contents, using a 1kB stack buffer for temporary storage, without sufficient bounds checking. If the function is called with a c | ||
| CVE-2020-27779 | — | < 2.02-115.59.1 | 2.02-115.59.1 | Mar 3, 2021 | A flaw was found in grub2 in versions prior to 2.06. The cutmem command does not honor secure boot locking allowing an privileged attacker to remove address ranges from memory creating an opportunity to circumvent SecureBoot protections after proper triage about grub's memory lay | ||
| CVE-2020-14311 | — | < 2.02~beta2-115.49.1 | 2.02~beta2-115.49.1 | Jul 31, 2020 | There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A filesystem containing a symbolic link with an inode size of UINT32_MAX causes an arithmetic overflow leading to a zero-sized memory allocation with subsequent heap-based buffer overflow. | ||
| CVE-2020-14310 | — | < 2.02~beta2-115.49.1 | 2.02~beta2-115.49.1 | Jul 31, 2020 | There is an issue on grub2 before version 2.06 at function read_section_as_string(). It expects a font name to be at max UINT32_MAX - 1 length in bytes but it doesn't verify it before proceed with buffer allocation to read the value from the font value. An attacker may leverage t | ||
| CVE-2020-10713 | — | < 2.02~beta2-115.49.1 | 2.02~beta2-115.49.1 | Jul 30, 2020 | A flaw was found in grub2, prior to version 2.06. An attacker may use the GRUB 2 flaw to hijack and tamper the GRUB verification process. This flaw also allows the bypass of Secure Boot protections. In order to load an untrusted or modified kernel, an attacker would first need to | ||
| CVE-2020-14309 | — | < 2.02~beta2-115.49.1 | 2.02~beta2-115.49.1 | Jul 30, 2020 | There's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems containing a symbolic link with name length of UINT32 bytes in size. The name size leads to an arithmetic overflow leading to a zero-size allocation further causing a heap-based buffer over | ||
| CVE-2020-14308 | — | < 2.02~beta2-115.49.1 | 2.02~beta2-115.49.1 | Jul 29, 2020 | In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic overflows on the requested allocation size. This leads the function to return invalid memory allocations which can be further used to cause possible integrity, confidentiality and availa | ||
| CVE-2020-15707 | — | < 2.02~beta2-115.49.1 | 2.02~beta2-115.49.1 | Jul 29, 2020 | Integer overflows were discovered in the functions grub_cmd_initrd and grub_initrd_init in the efilinux component of GRUB2, as shipped in Debian, Red Hat, and Ubuntu (the functionality is not included in GRUB2 upstream), leading to a heap-based buffer overflow. These could be tri | ||
| CVE-2020-15706 | — | < 2.02~beta2-115.49.1 | 2.02~beta2-115.49.1 | Jul 29, 2020 | GRUB2 contains a race condition in grub_script_function_create() leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing, leading to arbitrary code execution and secure boot restriction bypass. This i | ||
| CVE-2020-15705 | — | < 2.02~beta2-115.56.1 | 2.02~beta2-115.56.1 | Jul 29, 2020 | GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed. This only affects systems where the kernel signing certificate has been imported directly into the secure boot database and the GRUB image is booted directly without t |
- CVE-2021-20233Mar 3, 2021affected < 2.02-115.59.1fixed 2.02-115.59.1
A flaw was found in grub2 in versions prior to 2.06. Setparam_prefix() in the menu rendering code performs a length calculation on the assumption that expressing a quoted single quote will require 3 characters, while it actually requires 4 characters which allows an attacker to c
- CVE-2021-20225Mar 3, 2021affected < 2.02-115.59.1fixed 2.02-115.59.1
A flaw was found in grub2 in versions prior to 2.06. The option parser allows an attacker to write past the end of a heap-allocated buffer by calling certain commands with a large number of specific short forms of options. The highest threat from this vulnerability is to data con
- CVE-2020-25632Mar 3, 2021affected < 2.02-115.59.1fixed 2.02-115.59.1
A flaw was found in grub2 in versions prior to 2.06. The rmmod implementation allows the unloading of a module used as a dependency without checking if any other dependent module is still loaded leading to a use-after-free scenario. This could allow arbitrary code to be executed
- CVE-2020-25647Mar 3, 2021affected < 2.02-115.59.1fixed 2.02-115.59.1
A flaw was found in grub2 in versions prior to 2.06. During USB device initialization, descriptors are read with very little bounds checking and assumes the USB device is providing sane values. If properly exploited, an attacker could trigger memory corruption leading to arbitrar
- CVE-2020-14372Mar 3, 2021affected < 2.02-115.59.1fixed 2.02-115.59.1
A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of the ACPI command when Secure Boot is enabled. This flaw allows an attacker with privileged access to craft a Secondary System Description Table (SSDT) containing code to overwrite the L
- CVE-2020-27749Mar 3, 2021affected < 2.02-115.59.1fixed 2.02-115.59.1
A flaw was found in grub2 in versions prior to 2.06. Variable names present are expanded in the supplied command line into their corresponding variable contents, using a 1kB stack buffer for temporary storage, without sufficient bounds checking. If the function is called with a c
- CVE-2020-27779Mar 3, 2021affected < 2.02-115.59.1fixed 2.02-115.59.1
A flaw was found in grub2 in versions prior to 2.06. The cutmem command does not honor secure boot locking allowing an privileged attacker to remove address ranges from memory creating an opportunity to circumvent SecureBoot protections after proper triage about grub's memory lay
- CVE-2020-14311Jul 31, 2020affected < 2.02~beta2-115.49.1fixed 2.02~beta2-115.49.1
There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A filesystem containing a symbolic link with an inode size of UINT32_MAX causes an arithmetic overflow leading to a zero-sized memory allocation with subsequent heap-based buffer overflow.
- CVE-2020-14310Jul 31, 2020affected < 2.02~beta2-115.49.1fixed 2.02~beta2-115.49.1
There is an issue on grub2 before version 2.06 at function read_section_as_string(). It expects a font name to be at max UINT32_MAX - 1 length in bytes but it doesn't verify it before proceed with buffer allocation to read the value from the font value. An attacker may leverage t
- CVE-2020-10713Jul 30, 2020affected < 2.02~beta2-115.49.1fixed 2.02~beta2-115.49.1
A flaw was found in grub2, prior to version 2.06. An attacker may use the GRUB 2 flaw to hijack and tamper the GRUB verification process. This flaw also allows the bypass of Secure Boot protections. In order to load an untrusted or modified kernel, an attacker would first need to
- CVE-2020-14309Jul 30, 2020affected < 2.02~beta2-115.49.1fixed 2.02~beta2-115.49.1
There's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems containing a symbolic link with name length of UINT32 bytes in size. The name size leads to an arithmetic overflow leading to a zero-size allocation further causing a heap-based buffer over
- CVE-2020-14308Jul 29, 2020affected < 2.02~beta2-115.49.1fixed 2.02~beta2-115.49.1
In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic overflows on the requested allocation size. This leads the function to return invalid memory allocations which can be further used to cause possible integrity, confidentiality and availa
- CVE-2020-15707Jul 29, 2020affected < 2.02~beta2-115.49.1fixed 2.02~beta2-115.49.1
Integer overflows were discovered in the functions grub_cmd_initrd and grub_initrd_init in the efilinux component of GRUB2, as shipped in Debian, Red Hat, and Ubuntu (the functionality is not included in GRUB2 upstream), leading to a heap-based buffer overflow. These could be tri
- CVE-2020-15706Jul 29, 2020affected < 2.02~beta2-115.49.1fixed 2.02~beta2-115.49.1
GRUB2 contains a race condition in grub_script_function_create() leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing, leading to arbitrary code execution and secure boot restriction bypass. This i
- CVE-2020-15705Jul 29, 2020affected < 2.02~beta2-115.56.1fixed 2.02~beta2-115.56.1
GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed. This only affects systems where the kernel signing certificate has been imported directly into the secure boot database and the GRUB image is booted directly without t