Vulnerability Description
GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed. This only affects systems where the kernel signing certificate has been imported directly into the secure boot database and the GRUB image is booted directly without the use of shim. This issue affects GRUB2 version 2.04 and prior versions.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Gnu | Grub2 | <= 2.04 |
| Redhat | Enterprise Linux Atomic Host | - |
| Redhat | Openshift Container Platform | 4.0 |
| Canonical | Ubuntu Linux | 14.04 |
| Debian | Debian Linux | 10.0 |
| Opensuse | Leap | 15.1 |
| Redhat | Enterprise Linux | 7.0 |
| Suse | Suse Linux Enterprise Server | 11 |
| Microsoft | Windows 10 | - |
| Microsoft | Windows 8.1 | - |
| Microsoft | Windows Rt 8.1 | - |
| Microsoft | Windows Server 2012 | - |
| Microsoft | Windows Server 2016 | - |
| Microsoft | Windows Server 2019 | - |
Related Weaknesses (CWE)
References
- http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00067.htmlMailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00069.htmlMailing ListThird Party Advisory
- http://ubuntu.com/security/notices/USN-4432-1Third Party Advisory
- http://www.openwall.com/lists/oss-security/2020/07/29/3Mailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2021/03/02/3Mailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2021/09/17/2Mailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2021/09/17/4Mailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2021/09/21/1Mailing ListThird Party Advisory
- https://access.redhat.com/security/vulnerabilities/grub2bootloaderThird Party Advisory
- https://lists.gnu.org/archive/html/grub-devel/2020-07/msg00034.htmlIssue TrackingVendor Advisory
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV200011PatchThird Party AdvisoryVendor Advisory
- https://security.gentoo.org/glsa/202104-05Third Party Advisory
- https://security.netapp.com/advisory/ntap-20200731-0008/Third Party Advisory
- https://usn.ubuntu.com/4432-1/Third Party Advisory
- https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/GRUB2SecureBootBypassThird Party Advisory
FAQ
What is CVE-2020-15705?
CVE-2020-15705 is a vulnerability with a CVSS score of 6.4 (MEDIUM). GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed. This only affects systems where the kernel signing certificate has been imported direct...
How severe is CVE-2020-15705?
CVE-2020-15705 has been rated MEDIUM with a CVSS base score of 6.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-15705?
Check the references section above for vendor advisories and patch information. Affected products include: Gnu Grub2, Redhat Enterprise Linux Atomic Host, Redhat Openshift Container Platform, Canonical Ubuntu Linux, Debian Debian Linux.