Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusUbuntu Security Notice (C) 2020-2023 Canonical, Inc. / NASL script (C) 2020-2023 and is owned by Tenable, Inc. or an Affiliate thereof.UBUNTU_USN-4432-1.NASL
HistoryJul 30, 2020 - 12:00 a.m.

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : GRUB 2 vulnerabilities (USN-4432-1)

2020-07-3000:00:00
Ubuntu Security Notice (C) 2020-2023 Canonical, Inc. / NASL script (C) 2020-2023 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
13
JSON

Jesse Michael and Mickey Shkatov discovered that the configuration parser in GRUB2 did not properly exit when errors were discovered, resulting in heap-based buffer overflows. A local attacker could use this to execute arbitrary code and bypass UEFI Secure Boot restrictions. (CVE-2020-10713) Chris Coulson discovered that the GRUB2 function handling code did not properly handle a function being redefined, leading to a use-after-free vulnerability. A local attacker could use this to execute arbitrary code and bypass UEFI Secure Boot restrictions. (CVE-2020-15706) Chris Coulson discovered that multiple integer overflows existed in GRUB2 when handling certain filesystems or font files, leading to heap-based buffer overflows. A local attacker could use these to execute arbitrary code and bypass UEFI Secure Boot restrictions. (CVE-2020-14309, CVE-2020-14310, CVE-2020-14311) It was discovered that the memory allocator for GRUB2 did not validate allocation size, resulting in multiple integer overflows and heap-based buffer overflows when handling certain filesystems, PNG images or disk metadata. A local attacker could use this to execute arbitrary code and bypass UEFI Secure Boot restrictions. (CVE-2020-14308) Mathieu Trudel-Lapierre discovered that in certain situations, GRUB2 failed to validate kernel signatures. A local attacker could use this to bypass Secure Boot restrictions.
(CVE-2020-15705) Colin Watson and Chris Coulson discovered that an integer overflow existed in GRUB2 when handling the initrd command, leading to a heap-based buffer overflow. A local attacker could use this to execute arbitrary code and bypass UEFI Secure Boot restrictions. (CVE-2020-15707).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Ubuntu Security Notice USN-4432-1. The text 
# itself is copyright (C) Canonical, Inc. See 
# <http://www.ubuntu.com/usn/>. Ubuntu(R) is a registered 
# trademark of Canonical, Inc.
#

include('compat.inc');

if (description)
{
  script_id(139179);
  script_version("1.12");
  script_set_attribute(attribute:"plugin_modification_date", value:"2023/10/21");

  script_cve_id(
    "CVE-2020-10713",
    "CVE-2020-14308",
    "CVE-2020-14309",
    "CVE-2020-14310",
    "CVE-2020-14311",
    "CVE-2020-15705",
    "CVE-2020-15706",
    "CVE-2020-15707"
  );
  script_xref(name:"USN", value:"4432-1");
  script_xref(name:"IAVA", value:"2020-A-0349");
  script_xref(name:"CEA-ID", value:"CEA-2020-0061");

  script_name(english:"Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : GRUB 2 vulnerabilities (USN-4432-1)");

  script_set_attribute(attribute:"synopsis", value:
"The remote Ubuntu host is missing one or more security updates.");
  script_set_attribute(attribute:"description", value:
"Jesse Michael and Mickey Shkatov discovered that the configuration
parser in GRUB2 did not properly exit when errors were discovered,
resulting in heap-based buffer overflows. A local attacker could use
this to execute arbitrary code and bypass UEFI Secure Boot
restrictions. (CVE-2020-10713) Chris Coulson discovered that the GRUB2
function handling code did not properly handle a function being
redefined, leading to a use-after-free vulnerability. A local attacker
could use this to execute arbitrary code and bypass UEFI Secure Boot
restrictions. (CVE-2020-15706) Chris Coulson discovered that multiple
integer overflows existed in GRUB2 when handling certain filesystems
or font files, leading to heap-based buffer overflows. A local
attacker could use these to execute arbitrary code and bypass UEFI
Secure Boot restrictions. (CVE-2020-14309, CVE-2020-14310,
CVE-2020-14311) It was discovered that the memory allocator for GRUB2
did not validate allocation size, resulting in multiple integer
overflows and heap-based buffer overflows when handling certain
filesystems, PNG images or disk metadata. A local attacker could use
this to execute arbitrary code and bypass UEFI Secure Boot
restrictions. (CVE-2020-14308) Mathieu Trudel-Lapierre discovered that
in certain situations, GRUB2 failed to validate kernel signatures. A
local attacker could use this to bypass Secure Boot restrictions.
(CVE-2020-15705) Colin Watson and Chris Coulson discovered that an
integer overflow existed in GRUB2 when handling the initrd command,
leading to a heap-based buffer overflow. A local attacker could use
this to execute arbitrary code and bypass UEFI Secure Boot
restrictions. (CVE-2020-15707).

Note that Tenable Network Security has extracted the preceding
description block directly from the Ubuntu security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues.");
  script_set_attribute(attribute:"see_also", value:"https://ubuntu.com/security/notices/USN-4432-1");
  script_set_attribute(attribute:"solution", value:
"Update the affected packages.");
  script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2020-14309");
  script_set_attribute(attribute:"cvss3_score_source", value:"CVE-2020-10713");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2020/07/29");
  script_set_attribute(attribute:"patch_publication_date", value:"2020/07/29");
  script_set_attribute(attribute:"plugin_publication_date", value:"2020/07/30");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-efi-amd64-bin");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-efi-amd64-signed");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-efi-amd64-signed-template");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-efi-arm");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-efi-arm-bin");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-efi-arm64");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-efi-arm64-bin");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-efi-arm64-signed");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-efi-arm64-signed-template");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-efi-ia32");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-efi-ia32-bin");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-emu");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-firmware-qemu");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-ieee1275");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-ieee1275-bin");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-linuxbios");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-mount-udeb");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-pc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-pc-bin");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-rescue-pc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-theme-starfield");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-uboot");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-uboot-bin");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-xen");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-xen-bin");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-xen-host");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub2-common");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:16.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:18.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:20.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-common");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-coreboot");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-coreboot-bin");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-efi");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-efi-amd64");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_set_attribute(attribute:"stig_severity", value:"II");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Ubuntu Local Security Checks");

  script_copyright(english:"Ubuntu Security Notice (C) 2020-2023 Canonical, Inc. / NASL script (C) 2020-2023 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/cpu", "Host/Ubuntu", "Host/Ubuntu/release", "Host/Debian/dpkg-l");

  exit(0);
}

include('debian_package.inc');

if ( ! get_kb_item('Host/local_checks_enabled') ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
var os_release = get_kb_item('Host/Ubuntu/release');
if ( isnull(os_release) ) audit(AUDIT_OS_NOT, 'Ubuntu');
os_release = chomp(os_release);
if (! ('16.04' >< os_release || '18.04' >< os_release || '20.04' >< os_release)) audit(AUDIT_OS_NOT, 'Ubuntu 16.04 / 18.04 / 20.04', 'Ubuntu ' + os_release);
if ( ! get_kb_item('Host/Debian/dpkg-l') ) audit(AUDIT_PACKAGE_LIST_MISSING);

var cpu = get_kb_item('Host/cpu');
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ('x86_64' >!< cpu && cpu !~ "^i[3-6]86$" && 's390' >!< cpu && 'aarch64' >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'Ubuntu', cpu);

var pkgs = [
    {'osver': '16.04', 'pkgname': 'grub-common', 'pkgver': '2.02~beta2-36ubuntu3.26'},
    {'osver': '16.04', 'pkgname': 'grub-coreboot', 'pkgver': '2.02~beta2-36ubuntu3.26'},
    {'osver': '16.04', 'pkgname': 'grub-coreboot-bin', 'pkgver': '2.02~beta2-36ubuntu3.26'},
    {'osver': '16.04', 'pkgname': 'grub-efi', 'pkgver': '2.02~beta2-36ubuntu3.26'},
    {'osver': '16.04', 'pkgname': 'grub-efi-amd64', 'pkgver': '2.02~beta2-36ubuntu3.26'},
    {'osver': '16.04', 'pkgname': 'grub-efi-amd64-bin', 'pkgver': '2.02~beta2-36ubuntu3.26'},
    {'osver': '16.04', 'pkgname': 'grub-efi-amd64-signed', 'pkgver': '1.66.26+2.02~beta2-36ubuntu3.26'},
    {'osver': '16.04', 'pkgname': 'grub-efi-arm', 'pkgver': '2.02~beta2-36ubuntu3.26'},
    {'osver': '16.04', 'pkgname': 'grub-efi-arm-bin', 'pkgver': '2.02~beta2-36ubuntu3.26'},
    {'osver': '16.04', 'pkgname': 'grub-efi-arm64', 'pkgver': '2.02~beta2-36ubuntu3.26'},
    {'osver': '16.04', 'pkgname': 'grub-efi-arm64-bin', 'pkgver': '2.02~beta2-36ubuntu3.26'},
    {'osver': '16.04', 'pkgname': 'grub-efi-arm64-signed', 'pkgver': '1.66.26+2.02~beta2-36ubuntu3.26'},
    {'osver': '16.04', 'pkgname': 'grub-efi-ia32', 'pkgver': '2.02~beta2-36ubuntu3.26'},
    {'osver': '16.04', 'pkgname': 'grub-efi-ia32-bin', 'pkgver': '2.02~beta2-36ubuntu3.26'},
    {'osver': '16.04', 'pkgname': 'grub-emu', 'pkgver': '2.02~beta2-36ubuntu3.26'},
    {'osver': '16.04', 'pkgname': 'grub-firmware-qemu', 'pkgver': '2.02~beta2-36ubuntu3.26'},
    {'osver': '16.04', 'pkgname': 'grub-ieee1275', 'pkgver': '2.02~beta2-36ubuntu3.26'},
    {'osver': '16.04', 'pkgname': 'grub-ieee1275-bin', 'pkgver': '2.02~beta2-36ubuntu3.26'},
    {'osver': '16.04', 'pkgname': 'grub-linuxbios', 'pkgver': '2.02~beta2-36ubuntu3.26'},
    {'osver': '16.04', 'pkgname': 'grub-mount-udeb', 'pkgver': '2.02~beta2-36ubuntu3.26'},
    {'osver': '16.04', 'pkgname': 'grub-pc', 'pkgver': '2.02~beta2-36ubuntu3.26'},
    {'osver': '16.04', 'pkgname': 'grub-pc-bin', 'pkgver': '2.02~beta2-36ubuntu3.26'},
    {'osver': '16.04', 'pkgname': 'grub-rescue-pc', 'pkgver': '2.02~beta2-36ubuntu3.26'},
    {'osver': '16.04', 'pkgname': 'grub-theme-starfield', 'pkgver': '2.02~beta2-36ubuntu3.26'},
    {'osver': '16.04', 'pkgname': 'grub-uboot', 'pkgver': '2.02~beta2-36ubuntu3.26'},
    {'osver': '16.04', 'pkgname': 'grub-uboot-bin', 'pkgver': '2.02~beta2-36ubuntu3.26'},
    {'osver': '16.04', 'pkgname': 'grub-xen', 'pkgver': '2.02~beta2-36ubuntu3.26'},
    {'osver': '16.04', 'pkgname': 'grub-xen-bin', 'pkgver': '2.02~beta2-36ubuntu3.26'},
    {'osver': '16.04', 'pkgname': 'grub-xen-host', 'pkgver': '2.02~beta2-36ubuntu3.26'},
    {'osver': '16.04', 'pkgname': 'grub2', 'pkgver': '2.02~beta2-36ubuntu3.26'},
    {'osver': '16.04', 'pkgname': 'grub2-common', 'pkgver': '2.02~beta2-36ubuntu3.26'},
    {'osver': '18.04', 'pkgname': 'grub-common', 'pkgver': '2.02-2ubuntu8.16'},
    {'osver': '18.04', 'pkgname': 'grub-coreboot', 'pkgver': '2.02-2ubuntu8.16'},
    {'osver': '18.04', 'pkgname': 'grub-coreboot-bin', 'pkgver': '2.02-2ubuntu8.16'},
    {'osver': '18.04', 'pkgname': 'grub-efi', 'pkgver': '2.02-2ubuntu8.16'},
    {'osver': '18.04', 'pkgname': 'grub-efi-amd64', 'pkgver': '2.02-2ubuntu8.16'},
    {'osver': '18.04', 'pkgname': 'grub-efi-amd64-bin', 'pkgver': '2.02-2ubuntu8.16'},
    {'osver': '18.04', 'pkgname': 'grub-efi-amd64-signed', 'pkgver': '1.93.18+2.02-2ubuntu8.16'},
    {'osver': '18.04', 'pkgname': 'grub-efi-arm', 'pkgver': '2.02-2ubuntu8.16'},
    {'osver': '18.04', 'pkgname': 'grub-efi-arm-bin', 'pkgver': '2.02-2ubuntu8.16'},
    {'osver': '18.04', 'pkgname': 'grub-efi-arm64', 'pkgver': '2.02-2ubuntu8.16'},
    {'osver': '18.04', 'pkgname': 'grub-efi-arm64-bin', 'pkgver': '2.02-2ubuntu8.16'},
    {'osver': '18.04', 'pkgname': 'grub-efi-arm64-signed', 'pkgver': '1.93.18+2.02-2ubuntu8.16'},
    {'osver': '18.04', 'pkgname': 'grub-efi-ia32', 'pkgver': '2.02-2ubuntu8.16'},
    {'osver': '18.04', 'pkgname': 'grub-efi-ia32-bin', 'pkgver': '2.02-2ubuntu8.16'},
    {'osver': '18.04', 'pkgname': 'grub-emu', 'pkgver': '2.02-2ubuntu8.16'},
    {'osver': '18.04', 'pkgname': 'grub-firmware-qemu', 'pkgver': '2.02-2ubuntu8.16'},
    {'osver': '18.04', 'pkgname': 'grub-ieee1275', 'pkgver': '2.02-2ubuntu8.16'},
    {'osver': '18.04', 'pkgname': 'grub-ieee1275-bin', 'pkgver': '2.02-2ubuntu8.16'},
    {'osver': '18.04', 'pkgname': 'grub-linuxbios', 'pkgver': '2.02-2ubuntu8.16'},
    {'osver': '18.04', 'pkgname': 'grub-mount-udeb', 'pkgver': '2.02-2ubuntu8.16'},
    {'osver': '18.04', 'pkgname': 'grub-pc', 'pkgver': '2.02-2ubuntu8.16'},
    {'osver': '18.04', 'pkgname': 'grub-pc-bin', 'pkgver': '2.02-2ubuntu8.16'},
    {'osver': '18.04', 'pkgname': 'grub-rescue-pc', 'pkgver': '2.02-2ubuntu8.16'},
    {'osver': '18.04', 'pkgname': 'grub-theme-starfield', 'pkgver': '2.02-2ubuntu8.16'},
    {'osver': '18.04', 'pkgname': 'grub-uboot', 'pkgver': '2.02-2ubuntu8.16'},
    {'osver': '18.04', 'pkgname': 'grub-uboot-bin', 'pkgver': '2.02-2ubuntu8.16'},
    {'osver': '18.04', 'pkgname': 'grub-xen', 'pkgver': '2.02-2ubuntu8.16'},
    {'osver': '18.04', 'pkgname': 'grub-xen-bin', 'pkgver': '2.02-2ubuntu8.16'},
    {'osver': '18.04', 'pkgname': 'grub-xen-host', 'pkgver': '2.02-2ubuntu8.16'},
    {'osver': '18.04', 'pkgname': 'grub2', 'pkgver': '2.02-2ubuntu8.16'},
    {'osver': '18.04', 'pkgname': 'grub2-common', 'pkgver': '2.02-2ubuntu8.16'},
    {'osver': '20.04', 'pkgname': 'grub-common', 'pkgver': '2.04-1ubuntu26.1'},
    {'osver': '20.04', 'pkgname': 'grub-coreboot', 'pkgver': '2.04-1ubuntu26.1'},
    {'osver': '20.04', 'pkgname': 'grub-coreboot-bin', 'pkgver': '2.04-1ubuntu26.1'},
    {'osver': '20.04', 'pkgname': 'grub-efi', 'pkgver': '2.04-1ubuntu26.1'},
    {'osver': '20.04', 'pkgname': 'grub-efi-amd64', 'pkgver': '2.04-1ubuntu26.1'},
    {'osver': '20.04', 'pkgname': 'grub-efi-amd64-bin', 'pkgver': '2.04-1ubuntu26.1'},
    {'osver': '20.04', 'pkgname': 'grub-efi-amd64-signed', 'pkgver': '1.142.3+2.04-1ubuntu26.1'},
    {'osver': '20.04', 'pkgname': 'grub-efi-amd64-signed-template', 'pkgver': '2.04-1ubuntu26.1'},
    {'osver': '20.04', 'pkgname': 'grub-efi-arm', 'pkgver': '2.04-1ubuntu26.1'},
    {'osver': '20.04', 'pkgname': 'grub-efi-arm-bin', 'pkgver': '2.04-1ubuntu26.1'},
    {'osver': '20.04', 'pkgname': 'grub-efi-arm64', 'pkgver': '2.04-1ubuntu26.1'},
    {'osver': '20.04', 'pkgname': 'grub-efi-arm64-bin', 'pkgver': '2.04-1ubuntu26.1'},
    {'osver': '20.04', 'pkgname': 'grub-efi-arm64-signed', 'pkgver': '1.142.3+2.04-1ubuntu26.1'},
    {'osver': '20.04', 'pkgname': 'grub-efi-arm64-signed-template', 'pkgver': '2.04-1ubuntu26.1'},
    {'osver': '20.04', 'pkgname': 'grub-efi-ia32', 'pkgver': '2.04-1ubuntu26.1'},
    {'osver': '20.04', 'pkgname': 'grub-efi-ia32-bin', 'pkgver': '2.04-1ubuntu26.1'},
    {'osver': '20.04', 'pkgname': 'grub-emu', 'pkgver': '2.04-1ubuntu26.1'},
    {'osver': '20.04', 'pkgname': 'grub-firmware-qemu', 'pkgver': '2.04-1ubuntu26.1'},
    {'osver': '20.04', 'pkgname': 'grub-ieee1275', 'pkgver': '2.04-1ubuntu26.1'},
    {'osver': '20.04', 'pkgname': 'grub-ieee1275-bin', 'pkgver': '2.04-1ubuntu26.1'},
    {'osver': '20.04', 'pkgname': 'grub-linuxbios', 'pkgver': '2.04-1ubuntu26.1'},
    {'osver': '20.04', 'pkgname': 'grub-mount-udeb', 'pkgver': '2.04-1ubuntu26.1'},
    {'osver': '20.04', 'pkgname': 'grub-pc', 'pkgver': '2.04-1ubuntu26.1'},
    {'osver': '20.04', 'pkgname': 'grub-pc-bin', 'pkgver': '2.04-1ubuntu26.1'},
    {'osver': '20.04', 'pkgname': 'grub-rescue-pc', 'pkgver': '2.04-1ubuntu26.1'},
    {'osver': '20.04', 'pkgname': 'grub-theme-starfield', 'pkgver': '2.04-1ubuntu26.1'},
    {'osver': '20.04', 'pkgname': 'grub-uboot', 'pkgver': '2.04-1ubuntu26.1'},
    {'osver': '20.04', 'pkgname': 'grub-uboot-bin', 'pkgver': '2.04-1ubuntu26.1'},
    {'osver': '20.04', 'pkgname': 'grub-xen', 'pkgver': '2.04-1ubuntu26.1'},
    {'osver': '20.04', 'pkgname': 'grub-xen-bin', 'pkgver': '2.04-1ubuntu26.1'},
    {'osver': '20.04', 'pkgname': 'grub-xen-host', 'pkgver': '2.04-1ubuntu26.1'},
    {'osver': '20.04', 'pkgname': 'grub2', 'pkgver': '2.04-1ubuntu26.1'},
    {'osver': '20.04', 'pkgname': 'grub2-common', 'pkgver': '2.04-1ubuntu26.1'}
];

var flag = 0;
foreach package_array ( pkgs ) {
  var osver = NULL;
  var pkgname = NULL;
  var pkgver = NULL;
  if (!empty_or_null(package_array['osver'])) osver = package_array['osver'];
  if (!empty_or_null(package_array['pkgname'])) pkgname = package_array['pkgname'];
  if (!empty_or_null(package_array['pkgver'])) pkgver = package_array['pkgver'];
  if (osver && pkgname && pkgver) {
    if (ubuntu_check(osver:osver, pkgname:pkgname, pkgver:pkgver)) flag++;
  }
}

if (flag)
{
  security_report_v4(
    port       : 0,
    severity   : SECURITY_WARNING,
    extra      : ubuntu_report_get()
  );
  exit(0);
}
else
{
  var tested = ubuntu_pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'grub-common / grub-coreboot / grub-coreboot-bin / grub-efi / etc');
}
VendorProductVersionCPE
canonicalubuntu_linuxgrub-efi-amd64-binp-cpe:/a:canonical:ubuntu_linux:grub-efi-amd64-bin
canonicalubuntu_linuxgrub-efi-amd64-signedp-cpe:/a:canonical:ubuntu_linux:grub-efi-amd64-signed
canonicalubuntu_linuxgrub-efi-amd64-signed-templatep-cpe:/a:canonical:ubuntu_linux:grub-efi-amd64-signed-template
canonicalubuntu_linuxgrub-efi-armp-cpe:/a:canonical:ubuntu_linux:grub-efi-arm
canonicalubuntu_linuxgrub-efi-arm-binp-cpe:/a:canonical:ubuntu_linux:grub-efi-arm-bin
canonicalubuntu_linuxgrub-efi-arm64p-cpe:/a:canonical:ubuntu_linux:grub-efi-arm64
canonicalubuntu_linuxgrub-efi-arm64-binp-cpe:/a:canonical:ubuntu_linux:grub-efi-arm64-bin
canonicalubuntu_linuxgrub-efi-arm64-signedp-cpe:/a:canonical:ubuntu_linux:grub-efi-arm64-signed
canonicalubuntu_linuxgrub-efi-arm64-signed-templatep-cpe:/a:canonical:ubuntu_linux:grub-efi-arm64-signed-template
canonicalubuntu_linuxgrub-efi-ia32p-cpe:/a:canonical:ubuntu_linux:grub-efi-ia32
Rows per page:
1-10 of 361

Related

nessus 51
qualysblog 1
redhat 9
centos 1
openvas 35
photon 5
fedora 2
oraclelinux 3
ubuntu 2
debian 1
f5 2
suse 4
osv 9
mageia 1
gentoo 1
ibm 2
mscve 1
hp 1
redos 1
ics 1
redhatcve 7
alpinelinux 8
cbl_mariner 11
prion 7
cve 8
debiancve 7
ubuntucve 6
veracode 7
lenovo 2
cisa 1
checkpoint_security 1
cert 1
nessus
nessus
RHEL 7 : grub2 (RHSA-2020:3217)
2020-07-30 00:00:00
CentOS 7 : grub2 (CESA-2020:3217)
2020-07-31 00:00:00
Photon OS 2.0: Grub2 PHSA-2020-2.0-0267
2020-08-01 00:00:00
qualysblog
qualysblog
GRUB2 Boothole Buffer Overflow Vulnerability (CVE-2020-10713) – Automatically Discover, Prioritize and Remediate Using Qualys VMDR®
2020-08-03 21:35:38
redhat
redhat
(RHSA-2020:3271) Moderate: grub2 security and bug fix update
2020-08-03 10:36:06
(RHSA-2020:3275) Moderate: grub2 security and bug fix update
2020-08-03 10:37:39
(RHSA-2020:3274) Moderate: grub2 security and bug fix update
2020-08-03 10:37:05
centos
centos
grub2, mokutil, shim security update
2020-07-30 00:08:50
openvas
openvas
CentOS: Security Advisory for shim-unsigned-ia32 (CESA-2020:3217)
2020-07-30 00:00:00
Fedora: Security Advisory for grub2 (FEDORA-2020-e19b87f4f5)
2020-09-27 00:00:00
CentOS: Security Advisory for mokutil (CESA-2020:3217)
2020-07-30 00:00:00
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0267
2020-07-30 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-1.0-0311
2020-07-30 00:00:00
Important Photon OS Security Update - PHSA-2020-0311
2020-07-30 00:00:00
fedora
fedora
[SECURITY] Fedora 31 Update: grub2-2.02-110.fc31
2020-09-27 01:05:37
[SECURITY] Fedora 32 Update: grub2-2.04-22.fc32
2020-09-14 13:26:52
oraclelinux
oraclelinux
grub2 security update
2020-07-29 00:00:00
grub2 security update
2020-07-29 00:00:00
grub2 security update
2020-07-29 00:00:00
ubuntu
ubuntu
GRUB2 regression
2020-08-04 00:00:00
GRUB 2 vulnerabilities
2020-07-29 00:00:00
debian
debian
[SECURITY] [DSA 4735-1] grub2 security update
2020-07-29 16:59:52
f5
f5
K48187630 : Multiple grub2 vulnerabilities
2021-03-18 00:00:00
K42232641 : GRUB2 vulnerability CVE-2020-10713
2020-08-07 00:00:00
suse
suse
Security update for grub2 (important)
2020-08-08 00:00:00
Security update for grub2 (important)
2020-08-08 00:00:00
Security update for grub2 (important)
2020-08-29 00:00:00
osv
osv
grub2 - security update
2020-07-29 00:00:00
CVE-2020-14311
2020-07-31 22:15:11
CVE-2020-14310
2020-07-31 22:15:11
mageia
mageia
Updated grub2 packages fix security vulnerabilities
2021-07-09 01:43:19
gentoo
gentoo
GRUB: Multiple vulnerabilities
2021-04-30 00:00:00
ibm
ibm
Security Bulletin: IBM QRadar Network Packet Capture is vulnerable to Using Components with Known Vulnerabilities
2020-10-30 16:18:45
Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities
2023-12-19 17:14:04
mscve
mscve
Microsoft Guidance for Addressing Security Feature Bypass in GRUB
2020-07-29 07:00:00
hp
hp
HPSBHF03678 rev. 2 - GRUB2 Bootloader Arbitrary Code Execution
2020-07-25 00:00:00
redos
redos
ROS-20220920-01
2022-09-20 00:00:00
ics
ics
Hitachi Energy APM Edge (Update A)
2022-10-18 12:00:00
redhatcve
redhatcve
CVE-2020-14309
2020-07-29 17:06:12
CVE-2020-15707
2020-07-29 17:06:20
CVE-2020-14310
2020-07-29 17:06:12
alpinelinux
alpinelinux
CVE-2020-14309
2020-07-30 13:15:00
CVE-2020-15707
2020-07-29 18:15:00
CVE-2020-14310
2020-07-31 22:15:00
cbl_mariner
cbl_mariner
CVE-2020-14308 affecting package grub2 2.06~rc1-10
2021-05-06 23:56:52
CVE-2020-14310 affecting package grub2 2.06~rc1-7
2022-04-26 20:17:11
CVE-2020-14308 affecting package grub2 2.06~rc1-7
2022-04-26 20:17:11
prion
prion
Heap overflow
2020-07-31 22:15:00
Buffer overflow
2020-07-29 20:15:00
Integer overflow
2020-07-29 18:15:00
cve
cve
CVE-2020-14311
2020-07-31 22:15:00
CVE-2020-14310
2020-07-31 22:15:00
CVE-2020-15707
2020-07-29 18:15:00
debiancve
debiancve
CVE-2020-14311
2020-07-31 22:15:00
CVE-2020-14310
2020-07-31 22:15:00
CVE-2020-14309
2020-07-30 13:15:00
ubuntucve
ubuntucve
CVE-2020-15707
2020-07-29 00:00:00
CVE-2020-14310
2020-07-29 00:00:00
CVE-2020-14311
2020-07-29 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-07-30 02:02:34
Denial Of Service (DoS)
2020-07-30 02:02:33
Denial Of Service (DoS)
2020-07-30 02:02:32
lenovo
lenovo
GRUB2 Vulnerability – AKA
2020-07-30 15:15:08
GRUB2 Vulnerability – AKA
2020-07-30 15:15:08
cisa
cisa
GNU GRUB2 Vulnerability
2020-07-30 00:00:00
checkpoint_security
checkpoint_security
Check Point response to CVE-2020-10713 (GRUB2 bootloader is vulnerable to buffer overflow)
2020-08-02 22:52:23
cert
cert
GRUB2 bootloader is vulnerable to buffer overflow
2020-07-29 00:00:00
JSON
Related for UBUNTU_USN-4432-1.NASL
nessus51qualysblog1redhat9centos1openvas35photon5fedora2oraclelinux3ubuntu2debian1f52suse4osv9mageia1gentoo1ibm2mscve1hp1redos1ics1redhatcve7alpinelinux8cbl_mariner11prion7cve8debiancve7ubuntucve6veracode7lenovo2cisa1checkpoint_security1cert1