ByteOS Network

Vulnerability Details :

CVE-2020-15705

Assigner Org ID-cc1ad9ee-3454-478d-9317-d3e869d708bc

Published At-29 Jul, 2020 | 17:45

Updated At-17 Sep, 2024 | 00:06

GRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shim

GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed. This only affects systems where the kernel signing certificate has been imported directly into the secure boot database and the GRUB image is booted directly without the use of shim. This issue affects GRUB2 version 2.04 and prior versions.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:canonical

Assigner Org ID:cc1ad9ee-3454-478d-9317-d3e869d708bc

Published At:29 Jul, 2020 | 17:45

Updated At:17 Sep, 2024 | 00:06

▼CVE Numbering Authority (CNA)

GRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shim

Affected Products

Vendor

Ubuntu

Product

grub2 in Ubuntu

Versions

Affected

From 20.04 LTS before 2.04-1ubuntu26.1 (custom)
From 18.04 LTS before 2.02-2ubuntu8.16 (custom)
From 16.04 LTS before 2.02~beta2-36ubuntu3.26 (custom)
From 14.04 ESM before 2.02~beta2-9ubuntu1.20 (custom)

Problem Types

Type	CWE ID	Description
CWE	CWE-347	CWE-347 Improper Verification of Cryptographic Signature

Type: CWE

CWE ID: CWE-347

Description: CWE-347 Improper Verification of Cryptographic Signature

Metrics

Version	Base score	Base severity	Vector
3.1	6.4	MEDIUM	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Version: 3.1

Base score: 6.4

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Credits

Mathieu Trudel-Lapierre

References

Hyperlink	Resource
https://www.eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/	x_refsource_CONFIRM
https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/GRUB2SecureBootBypass	vendor-advisory x_refsource_UBUNTU
http://ubuntu.com/security/notices/USN-4432-1	vendor-advisory x_refsource_UBUNTU
https://www.debian.org/security/2020-GRUB-UEFI-SecureBoot	vendor-advisory x_refsource_DEBIAN
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV200011	x_refsource_CONFIRM
https://access.redhat.com/security/vulnerabilities/grub2bootloader	vendor-advisory x_refsource_REDHAT
https://www.suse.com/c/suse-addresses-grub2-secure-boot-issue/	vendor-advisory x_refsource_SUSE
https://www.suse.com/support/kb/doc/?id=000019673	vendor-advisory x_refsource_SUSE
https://www.openwall.com/lists/oss-security/2020/07/29/3	x_refsource_CONFIRM
https://lists.gnu.org/archive/html/grub-devel/2020-07/msg00034.html	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2020/07/29/3	mailing-list x_refsource_MLIST
https://security.netapp.com/advisory/ntap-20200731-0008/	x_refsource_CONFIRM
https://usn.ubuntu.com/4432-1/	vendor-advisory x_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00067.html	vendor-advisory x_refsource_SUSE
http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00069.html	vendor-advisory x_refsource_SUSE
http://www.openwall.com/lists/oss-security/2021/03/02/3	mailing-list x_refsource_MLIST
https://security.gentoo.org/glsa/202104-05	vendor-advisory x_refsource_GENTOO
http://www.openwall.com/lists/oss-security/2021/09/17/2	mailing-list x_refsource_MLIST
http://www.openwall.com/lists/oss-security/2021/09/17/4	mailing-list x_refsource_MLIST
http://www.openwall.com/lists/oss-security/2021/09/21/1	mailing-list x_refsource_MLIST

Hyperlink: https://www.eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/

Resource:

x_refsource_CONFIRM

Hyperlink: https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/GRUB2SecureBootBypass

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://ubuntu.com/security/notices/USN-4432-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: https://www.debian.org/security/2020-GRUB-UEFI-SecureBoot

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV200011

Resource:

x_refsource_CONFIRM

Hyperlink: https://access.redhat.com/security/vulnerabilities/grub2bootloader

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://www.suse.com/c/suse-addresses-grub2-secure-boot-issue/

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: https://www.suse.com/support/kb/doc/?id=000019673

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: https://www.openwall.com/lists/oss-security/2020/07/29/3

Resource:

x_refsource_CONFIRM

Hyperlink: https://lists.gnu.org/archive/html/grub-devel/2020-07/msg00034.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.openwall.com/lists/oss-security/2020/07/29/3

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://security.netapp.com/advisory/ntap-20200731-0008/

Resource:

x_refsource_CONFIRM

Hyperlink: https://usn.ubuntu.com/4432-1/

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00067.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00069.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://www.openwall.com/lists/oss-security/2021/03/02/3

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://security.gentoo.org/glsa/202104-05

Resource:

vendor-advisory

x_refsource_GENTOO

Hyperlink: http://www.openwall.com/lists/oss-security/2021/09/17/2

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://www.openwall.com/lists/oss-security/2021/09/17/4

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://www.openwall.com/lists/oss-security/2021/09/21/1

Resource:

mailing-list

x_refsource_MLIST

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/	x_refsource_CONFIRM x_transferred
https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/GRUB2SecureBootBypass	vendor-advisory x_refsource_UBUNTU x_transferred
http://ubuntu.com/security/notices/USN-4432-1	vendor-advisory x_refsource_UBUNTU x_transferred
https://www.debian.org/security/2020-GRUB-UEFI-SecureBoot	vendor-advisory x_refsource_DEBIAN x_transferred
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV200011	x_refsource_CONFIRM x_transferred
https://access.redhat.com/security/vulnerabilities/grub2bootloader	vendor-advisory x_refsource_REDHAT x_transferred
https://www.suse.com/c/suse-addresses-grub2-secure-boot-issue/	vendor-advisory x_refsource_SUSE x_transferred
https://www.suse.com/support/kb/doc/?id=000019673	vendor-advisory x_refsource_SUSE x_transferred
https://www.openwall.com/lists/oss-security/2020/07/29/3	x_refsource_CONFIRM x_transferred
https://lists.gnu.org/archive/html/grub-devel/2020-07/msg00034.html	x_refsource_CONFIRM x_transferred
http://www.openwall.com/lists/oss-security/2020/07/29/3	mailing-list x_refsource_MLIST x_transferred
https://security.netapp.com/advisory/ntap-20200731-0008/	x_refsource_CONFIRM x_transferred
https://usn.ubuntu.com/4432-1/	vendor-advisory x_refsource_UBUNTU x_transferred
http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00067.html	vendor-advisory x_refsource_SUSE x_transferred
http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00069.html	vendor-advisory x_refsource_SUSE x_transferred
http://www.openwall.com/lists/oss-security/2021/03/02/3	mailing-list x_refsource_MLIST x_transferred
https://security.gentoo.org/glsa/202104-05	vendor-advisory x_refsource_GENTOO x_transferred
http://www.openwall.com/lists/oss-security/2021/09/17/2	mailing-list x_refsource_MLIST x_transferred
http://www.openwall.com/lists/oss-security/2021/09/17/4	mailing-list x_refsource_MLIST x_transferred
http://www.openwall.com/lists/oss-security/2021/09/21/1	mailing-list x_refsource_MLIST x_transferred

Hyperlink: https://www.eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/GRUB2SecureBootBypass

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Hyperlink: http://ubuntu.com/security/notices/USN-4432-1

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Hyperlink: https://www.debian.org/security/2020-GRUB-UEFI-SecureBoot

Resource:

vendor-advisory

x_refsource_DEBIAN

x_transferred

Hyperlink: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV200011

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://access.redhat.com/security/vulnerabilities/grub2bootloader

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: https://www.suse.com/c/suse-addresses-grub2-secure-boot-issue/

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: https://www.suse.com/support/kb/doc/?id=000019673

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: https://www.openwall.com/lists/oss-security/2020/07/29/3

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://lists.gnu.org/archive/html/grub-devel/2020-07/msg00034.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.openwall.com/lists/oss-security/2020/07/29/3

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: https://security.netapp.com/advisory/ntap-20200731-0008/

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://usn.ubuntu.com/4432-1/

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00067.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00069.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: http://www.openwall.com/lists/oss-security/2021/03/02/3

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: https://security.gentoo.org/glsa/202104-05

Resource:

vendor-advisory

x_refsource_GENTOO

x_transferred

Hyperlink: http://www.openwall.com/lists/oss-security/2021/09/17/2

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: http://www.openwall.com/lists/oss-security/2021/09/17/4

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: http://www.openwall.com/lists/oss-security/2021/09/21/1

Resource:

mailing-list

x_refsource_MLIST

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:security@ubuntu.com

Published At:29 Jul, 2020 | 18:15

Updated At:18 Apr, 2022 | 15:22

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	6.4	MEDIUM	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Secondary	3.1	6.4	MEDIUM	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	4.4	MEDIUM	AV:L/AC:M/Au:N/C:P/I:P/A:P

Type: Primary

Version: 3.1

Base score: 6.4

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 6.4

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 4.4

Base severity: MEDIUM

Vector:

AV:L/AC:M/Au:N/C:P/I:P/A:P

CPE Matches

GNU

>>grub2>>Versions up to 2.04(inclusive)

cpe:2.3:a:gnu:grub2:*:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_atomic_host>>-

cpe:2.3:a:redhat:enterprise_linux_atomic_host:-:*:*:*:*:*:*:*

Red Hat, Inc.

>>openshift_container_platform>>4.0

cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*

Canonical Ltd.

>>ubuntu_linux>>14.04

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*

Canonical Ltd.

>>ubuntu_linux>>16.04

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

Canonical Ltd.

>>ubuntu_linux>>18.04

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

Canonical Ltd.

>>ubuntu_linux>>20.04

cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*

Debian GNU/Linux

>>debian_linux>>10.0

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

openSUSE

>>leap>>15.1

cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*

openSUSE

>>leap>>15.2

cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux>>7.0

cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux>>8.0

cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*

SUSE

>>suse_linux_enterprise_server>>11

cpe:2.3:o:suse:suse_linux_enterprise_server:11:*:*:*:*:*:*:*

SUSE

>>suse_linux_enterprise_server>>12

cpe:2.3:o:suse:suse_linux_enterprise_server:12:*:*:*:*:*:*:*

SUSE

>>suse_linux_enterprise_server>>15

cpe:2.3:o:suse:suse_linux_enterprise_server:15:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_10>>-

cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_10>>1607

cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_10>>1709

cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_10>>1803

cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_10>>1809

cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_10>>1903

cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_10>>1909

cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_10>>2004

cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_8.1>>-

cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_rt_8.1>>-

cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_server_2012>>-

cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_server_2012>>r2

cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_server_2016>>-

cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_server_2016>>1903

cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_server_2016>>1909

cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_server_2016>>2004

cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_server_2019>>-

cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-347	Primary	nvd@nist.gov
CWE-347	Secondary	security@ubuntu.com

CWE ID: CWE-347

Type: Primary

Source: nvd@nist.gov

CWE ID: CWE-347

Type: Secondary