Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusUbuntu Security Notice (C) 2020-2023 Canonical, Inc. / NASL script (C) 2020-2023 and is owned by Tenable, Inc. or an Affiliate thereof.UBUNTU_USN-4432-2.NASL
HistoryAug 06, 2020 - 12:00 a.m.

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : GRUB2 regression (USN-4432-2)

2020-08-0600:00:00
Ubuntu Security Notice (C) 2020-2023 Canonical, Inc. / NASL script (C) 2020-2023 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
26
JSON

USN-4432-1 fixed vulnerabilities in GRUB2 affecting Secure Boot environments. Unfortunately, the update introduced regressions for some BIOS systems (either pre-UEFI or UEFI configured in Legacy mode), preventing them from successfully booting. This update addresses the issue. Users with BIOS systems that installed GRUB2 versions from USN-4432-1 should verify that their GRUB2 installation has a correct understanding of their boot device location and installed the boot loader correctly. We apologize for the inconvenience.

Jesse Michael and Mickey Shkatov discovered that the configuration parser in GRUB2 did not properly exit when errors were discovered, resulting in heap-based buffer overflows. A local attacker could use this to execute arbitrary code and bypass UEFI Secure Boot restrictions. (CVE-2020-10713) Chris Coulson discovered that the GRUB2 function handling code did not properly handle a function being redefined, leading to a use-after-free vulnerability. A local attacker could use this to execute arbitrary code and bypass UEFI Secure Boot restrictions. (CVE-2020-15706) Chris Coulson discovered that multiple integer overflows existed in GRUB2 when handling certain filesystems or font files, leading to heap-based buffer overflows. A local attacker could use these to execute arbitrary code and bypass UEFI Secure Boot restrictions. (CVE-2020-14309, CVE-2020-14310, CVE-2020-14311) It was discovered that the memory allocator for GRUB2 did not validate allocation size, resulting in multiple integer overflows and heap-based buffer overflows when handling certain filesystems, PNG images or disk metadata. A local attacker could use this to execute arbitrary code and bypass UEFI Secure Boot restrictions. (CVE-2020-14308) Mathieu Trudel-Lapierre discovered that in certain situations, GRUB2 failed to validate kernel signatures. A local attacker could use this to bypass Secure Boot restrictions.
(CVE-2020-15705) Colin Watson and Chris Coulson discovered that an integer overflow existed in GRUB2 when handling the initrd command, leading to a heap-based buffer overflow. A local attacker could use this to execute arbitrary code and bypass UEFI Secure Boot restrictions. (CVE-2020-15707).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Ubuntu Security Notice USN-4432-2. The text 
# itself is copyright (C) Canonical, Inc. See 
# <http://www.ubuntu.com/usn/>. Ubuntu(R) is a registered 
# trademark of Canonical, Inc.
#

include('compat.inc');

if (description)
{
  script_id(139365);
  script_version("1.11");
  script_set_attribute(attribute:"plugin_modification_date", value:"2023/10/21");

  script_cve_id(
    "CVE-2020-10713",
    "CVE-2020-14308",
    "CVE-2020-14309",
    "CVE-2020-14310",
    "CVE-2020-14311",
    "CVE-2020-15705",
    "CVE-2020-15706",
    "CVE-2020-15707"
  );
  script_xref(name:"USN", value:"4432-2");
  script_xref(name:"IAVA", value:"2020-A-0349");
  script_xref(name:"CEA-ID", value:"CEA-2020-0061");

  script_name(english:"Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : GRUB2 regression (USN-4432-2)");

  script_set_attribute(attribute:"synopsis", value:
"The remote Ubuntu host is missing a security update.");
  script_set_attribute(attribute:"description", value:
"USN-4432-1 fixed vulnerabilities in GRUB2 affecting Secure Boot
environments. Unfortunately, the update introduced regressions for
some BIOS systems (either pre-UEFI or UEFI configured in Legacy mode),
preventing them from successfully booting. This update addresses the
issue. Users with BIOS systems that installed GRUB2 versions from
USN-4432-1 should verify that their GRUB2 installation has a correct
understanding of their boot device location and installed the boot
loader correctly. We apologize for the inconvenience.

Jesse Michael and Mickey Shkatov discovered that the configuration
parser in GRUB2 did not properly exit when errors were discovered,
resulting in heap-based buffer overflows. A local attacker could use
this to execute arbitrary code and bypass UEFI Secure Boot
restrictions. (CVE-2020-10713) Chris Coulson discovered that the GRUB2
function handling code did not properly handle a function being
redefined, leading to a use-after-free vulnerability. A local attacker
could use this to execute arbitrary code and bypass UEFI Secure Boot
restrictions. (CVE-2020-15706) Chris Coulson discovered that multiple
integer overflows existed in GRUB2 when handling certain filesystems
or font files, leading to heap-based buffer overflows. A local
attacker could use these to execute arbitrary code and bypass UEFI
Secure Boot restrictions. (CVE-2020-14309, CVE-2020-14310,
CVE-2020-14311) It was discovered that the memory allocator for GRUB2
did not validate allocation size, resulting in multiple integer
overflows and heap-based buffer overflows when handling certain
filesystems, PNG images or disk metadata. A local attacker could use
this to execute arbitrary code and bypass UEFI Secure Boot
restrictions. (CVE-2020-14308) Mathieu Trudel-Lapierre discovered that
in certain situations, GRUB2 failed to validate kernel signatures. A
local attacker could use this to bypass Secure Boot restrictions.
(CVE-2020-15705) Colin Watson and Chris Coulson discovered that an
integer overflow existed in GRUB2 when handling the initrd command,
leading to a heap-based buffer overflow. A local attacker could use
this to execute arbitrary code and bypass UEFI Secure Boot
restrictions. (CVE-2020-15707).

Note that Tenable Network Security has extracted the preceding
description block directly from the Ubuntu security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues.");
  script_set_attribute(attribute:"see_also", value:"https://ubuntu.com/security/notices/USN-4432-2");
  script_set_attribute(attribute:"solution", value:
"Update the affected packages.");
  script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2020-14309");
  script_set_attribute(attribute:"cvss3_score_source", value:"CVE-2020-10713");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2020/07/29");
  script_set_attribute(attribute:"patch_publication_date", value:"2020/08/04");
  script_set_attribute(attribute:"plugin_publication_date", value:"2020/08/06");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-efi-amd64-bin");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-efi-amd64-signed");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-efi-amd64-signed-template");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-efi-arm");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-efi-arm-bin");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-efi-arm64");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-efi-arm64-bin");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-efi-arm64-signed");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-efi-arm64-signed-template");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-efi-ia32");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-efi-ia32-bin");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-emu");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-firmware-qemu");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-ieee1275");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-ieee1275-bin");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-linuxbios");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-mount-udeb");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-pc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-pc-bin");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-rescue-pc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-theme-starfield");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-uboot");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-uboot-bin");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-xen");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-xen-bin");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-xen-host");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub2-common");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:16.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:18.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:20.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-common");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-coreboot");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-coreboot-bin");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-efi");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:grub-efi-amd64");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_set_attribute(attribute:"stig_severity", value:"II");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Ubuntu Local Security Checks");

  script_copyright(english:"Ubuntu Security Notice (C) 2020-2023 Canonical, Inc. / NASL script (C) 2020-2023 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/cpu", "Host/Ubuntu", "Host/Ubuntu/release", "Host/Debian/dpkg-l");

  exit(0);
}

include('debian_package.inc');

if ( ! get_kb_item('Host/local_checks_enabled') ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
var os_release = get_kb_item('Host/Ubuntu/release');
if ( isnull(os_release) ) audit(AUDIT_OS_NOT, 'Ubuntu');
os_release = chomp(os_release);
if (! ('16.04' >< os_release || '18.04' >< os_release || '20.04' >< os_release)) audit(AUDIT_OS_NOT, 'Ubuntu 16.04 / 18.04 / 20.04', 'Ubuntu ' + os_release);
if ( ! get_kb_item('Host/Debian/dpkg-l') ) audit(AUDIT_PACKAGE_LIST_MISSING);

var cpu = get_kb_item('Host/cpu');
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ('x86_64' >!< cpu && cpu !~ "^i[3-6]86$" && 's390' >!< cpu && 'aarch64' >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'Ubuntu', cpu);

var pkgs = [
    {'osver': '16.04', 'pkgname': 'grub-common', 'pkgver': '2.02~beta2-36ubuntu3.27'},
    {'osver': '16.04', 'pkgname': 'grub-coreboot', 'pkgver': '2.02~beta2-36ubuntu3.27'},
    {'osver': '16.04', 'pkgname': 'grub-coreboot-bin', 'pkgver': '2.02~beta2-36ubuntu3.27'},
    {'osver': '16.04', 'pkgname': 'grub-efi', 'pkgver': '2.02~beta2-36ubuntu3.27'},
    {'osver': '16.04', 'pkgname': 'grub-efi-amd64', 'pkgver': '2.02~beta2-36ubuntu3.27'},
    {'osver': '16.04', 'pkgname': 'grub-efi-amd64-bin', 'pkgver': '2.02~beta2-36ubuntu3.27'},
    {'osver': '16.04', 'pkgname': 'grub-efi-amd64-signed', 'pkgver': '1.66.27+2.02~beta2-36ubuntu3.27'},
    {'osver': '16.04', 'pkgname': 'grub-efi-arm', 'pkgver': '2.02~beta2-36ubuntu3.27'},
    {'osver': '16.04', 'pkgname': 'grub-efi-arm-bin', 'pkgver': '2.02~beta2-36ubuntu3.27'},
    {'osver': '16.04', 'pkgname': 'grub-efi-arm64', 'pkgver': '2.02~beta2-36ubuntu3.27'},
    {'osver': '16.04', 'pkgname': 'grub-efi-arm64-bin', 'pkgver': '2.02~beta2-36ubuntu3.27'},
    {'osver': '16.04', 'pkgname': 'grub-efi-arm64-signed', 'pkgver': '1.66.27+2.02~beta2-36ubuntu3.27'},
    {'osver': '16.04', 'pkgname': 'grub-efi-ia32', 'pkgver': '2.02~beta2-36ubuntu3.27'},
    {'osver': '16.04', 'pkgname': 'grub-efi-ia32-bin', 'pkgver': '2.02~beta2-36ubuntu3.27'},
    {'osver': '16.04', 'pkgname': 'grub-emu', 'pkgver': '2.02~beta2-36ubuntu3.27'},
    {'osver': '16.04', 'pkgname': 'grub-firmware-qemu', 'pkgver': '2.02~beta2-36ubuntu3.27'},
    {'osver': '16.04', 'pkgname': 'grub-ieee1275', 'pkgver': '2.02~beta2-36ubuntu3.27'},
    {'osver': '16.04', 'pkgname': 'grub-ieee1275-bin', 'pkgver': '2.02~beta2-36ubuntu3.27'},
    {'osver': '16.04', 'pkgname': 'grub-linuxbios', 'pkgver': '2.02~beta2-36ubuntu3.27'},
    {'osver': '16.04', 'pkgname': 'grub-mount-udeb', 'pkgver': '2.02~beta2-36ubuntu3.27'},
    {'osver': '16.04', 'pkgname': 'grub-pc', 'pkgver': '2.02~beta2-36ubuntu3.27'},
    {'osver': '16.04', 'pkgname': 'grub-pc-bin', 'pkgver': '2.02~beta2-36ubuntu3.27'},
    {'osver': '16.04', 'pkgname': 'grub-rescue-pc', 'pkgver': '2.02~beta2-36ubuntu3.27'},
    {'osver': '16.04', 'pkgname': 'grub-theme-starfield', 'pkgver': '2.02~beta2-36ubuntu3.27'},
    {'osver': '16.04', 'pkgname': 'grub-uboot', 'pkgver': '2.02~beta2-36ubuntu3.27'},
    {'osver': '16.04', 'pkgname': 'grub-uboot-bin', 'pkgver': '2.02~beta2-36ubuntu3.27'},
    {'osver': '16.04', 'pkgname': 'grub-xen', 'pkgver': '2.02~beta2-36ubuntu3.27'},
    {'osver': '16.04', 'pkgname': 'grub-xen-bin', 'pkgver': '2.02~beta2-36ubuntu3.27'},
    {'osver': '16.04', 'pkgname': 'grub-xen-host', 'pkgver': '2.02~beta2-36ubuntu3.27'},
    {'osver': '16.04', 'pkgname': 'grub2', 'pkgver': '2.02~beta2-36ubuntu3.27'},
    {'osver': '16.04', 'pkgname': 'grub2-common', 'pkgver': '2.02~beta2-36ubuntu3.27'},
    {'osver': '18.04', 'pkgname': 'grub-common', 'pkgver': '2.02-2ubuntu8.17'},
    {'osver': '18.04', 'pkgname': 'grub-coreboot', 'pkgver': '2.02-2ubuntu8.17'},
    {'osver': '18.04', 'pkgname': 'grub-coreboot-bin', 'pkgver': '2.02-2ubuntu8.17'},
    {'osver': '18.04', 'pkgname': 'grub-efi', 'pkgver': '2.02-2ubuntu8.17'},
    {'osver': '18.04', 'pkgname': 'grub-efi-amd64', 'pkgver': '2.02-2ubuntu8.17'},
    {'osver': '18.04', 'pkgname': 'grub-efi-amd64-bin', 'pkgver': '2.02-2ubuntu8.17'},
    {'osver': '18.04', 'pkgname': 'grub-efi-amd64-signed', 'pkgver': '1.93.19+2.02-2ubuntu8.17'},
    {'osver': '18.04', 'pkgname': 'grub-efi-arm', 'pkgver': '2.02-2ubuntu8.17'},
    {'osver': '18.04', 'pkgname': 'grub-efi-arm-bin', 'pkgver': '2.02-2ubuntu8.17'},
    {'osver': '18.04', 'pkgname': 'grub-efi-arm64', 'pkgver': '2.02-2ubuntu8.17'},
    {'osver': '18.04', 'pkgname': 'grub-efi-arm64-bin', 'pkgver': '2.02-2ubuntu8.17'},
    {'osver': '18.04', 'pkgname': 'grub-efi-arm64-signed', 'pkgver': '1.93.19+2.02-2ubuntu8.17'},
    {'osver': '18.04', 'pkgname': 'grub-efi-ia32', 'pkgver': '2.02-2ubuntu8.17'},
    {'osver': '18.04', 'pkgname': 'grub-efi-ia32-bin', 'pkgver': '2.02-2ubuntu8.17'},
    {'osver': '18.04', 'pkgname': 'grub-emu', 'pkgver': '2.02-2ubuntu8.17'},
    {'osver': '18.04', 'pkgname': 'grub-firmware-qemu', 'pkgver': '2.02-2ubuntu8.17'},
    {'osver': '18.04', 'pkgname': 'grub-ieee1275', 'pkgver': '2.02-2ubuntu8.17'},
    {'osver': '18.04', 'pkgname': 'grub-ieee1275-bin', 'pkgver': '2.02-2ubuntu8.17'},
    {'osver': '18.04', 'pkgname': 'grub-linuxbios', 'pkgver': '2.02-2ubuntu8.17'},
    {'osver': '18.04', 'pkgname': 'grub-mount-udeb', 'pkgver': '2.02-2ubuntu8.17'},
    {'osver': '18.04', 'pkgname': 'grub-pc', 'pkgver': '2.02-2ubuntu8.17'},
    {'osver': '18.04', 'pkgname': 'grub-pc-bin', 'pkgver': '2.02-2ubuntu8.17'},
    {'osver': '18.04', 'pkgname': 'grub-rescue-pc', 'pkgver': '2.02-2ubuntu8.17'},
    {'osver': '18.04', 'pkgname': 'grub-theme-starfield', 'pkgver': '2.02-2ubuntu8.17'},
    {'osver': '18.04', 'pkgname': 'grub-uboot', 'pkgver': '2.02-2ubuntu8.17'},
    {'osver': '18.04', 'pkgname': 'grub-uboot-bin', 'pkgver': '2.02-2ubuntu8.17'},
    {'osver': '18.04', 'pkgname': 'grub-xen', 'pkgver': '2.02-2ubuntu8.17'},
    {'osver': '18.04', 'pkgname': 'grub-xen-bin', 'pkgver': '2.02-2ubuntu8.17'},
    {'osver': '18.04', 'pkgname': 'grub-xen-host', 'pkgver': '2.02-2ubuntu8.17'},
    {'osver': '18.04', 'pkgname': 'grub2', 'pkgver': '2.02-2ubuntu8.17'},
    {'osver': '18.04', 'pkgname': 'grub2-common', 'pkgver': '2.02-2ubuntu8.17'},
    {'osver': '20.04', 'pkgname': 'grub-common', 'pkgver': '2.04-1ubuntu26.2'},
    {'osver': '20.04', 'pkgname': 'grub-coreboot', 'pkgver': '2.04-1ubuntu26.2'},
    {'osver': '20.04', 'pkgname': 'grub-coreboot-bin', 'pkgver': '2.04-1ubuntu26.2'},
    {'osver': '20.04', 'pkgname': 'grub-efi', 'pkgver': '2.04-1ubuntu26.2'},
    {'osver': '20.04', 'pkgname': 'grub-efi-amd64', 'pkgver': '2.04-1ubuntu26.2'},
    {'osver': '20.04', 'pkgname': 'grub-efi-amd64-bin', 'pkgver': '2.04-1ubuntu26.2'},
    {'osver': '20.04', 'pkgname': 'grub-efi-amd64-signed', 'pkgver': '1.142.4+2.04-1ubuntu26.2'},
    {'osver': '20.04', 'pkgname': 'grub-efi-amd64-signed-template', 'pkgver': '2.04-1ubuntu26.2'},
    {'osver': '20.04', 'pkgname': 'grub-efi-arm', 'pkgver': '2.04-1ubuntu26.2'},
    {'osver': '20.04', 'pkgname': 'grub-efi-arm-bin', 'pkgver': '2.04-1ubuntu26.2'},
    {'osver': '20.04', 'pkgname': 'grub-efi-arm64', 'pkgver': '2.04-1ubuntu26.2'},
    {'osver': '20.04', 'pkgname': 'grub-efi-arm64-bin', 'pkgver': '2.04-1ubuntu26.2'},
    {'osver': '20.04', 'pkgname': 'grub-efi-arm64-signed', 'pkgver': '1.142.4+2.04-1ubuntu26.2'},
    {'osver': '20.04', 'pkgname': 'grub-efi-arm64-signed-template', 'pkgver': '2.04-1ubuntu26.2'},
    {'osver': '20.04', 'pkgname': 'grub-efi-ia32', 'pkgver': '2.04-1ubuntu26.2'},
    {'osver': '20.04', 'pkgname': 'grub-efi-ia32-bin', 'pkgver': '2.04-1ubuntu26.2'},
    {'osver': '20.04', 'pkgname': 'grub-emu', 'pkgver': '2.04-1ubuntu26.2'},
    {'osver': '20.04', 'pkgname': 'grub-firmware-qemu', 'pkgver': '2.04-1ubuntu26.2'},
    {'osver': '20.04', 'pkgname': 'grub-ieee1275', 'pkgver': '2.04-1ubuntu26.2'},
    {'osver': '20.04', 'pkgname': 'grub-ieee1275-bin', 'pkgver': '2.04-1ubuntu26.2'},
    {'osver': '20.04', 'pkgname': 'grub-linuxbios', 'pkgver': '2.04-1ubuntu26.2'},
    {'osver': '20.04', 'pkgname': 'grub-mount-udeb', 'pkgver': '2.04-1ubuntu26.2'},
    {'osver': '20.04', 'pkgname': 'grub-pc', 'pkgver': '2.04-1ubuntu26.2'},
    {'osver': '20.04', 'pkgname': 'grub-pc-bin', 'pkgver': '2.04-1ubuntu26.2'},
    {'osver': '20.04', 'pkgname': 'grub-rescue-pc', 'pkgver': '2.04-1ubuntu26.2'},
    {'osver': '20.04', 'pkgname': 'grub-theme-starfield', 'pkgver': '2.04-1ubuntu26.2'},
    {'osver': '20.04', 'pkgname': 'grub-uboot', 'pkgver': '2.04-1ubuntu26.2'},
    {'osver': '20.04', 'pkgname': 'grub-uboot-bin', 'pkgver': '2.04-1ubuntu26.2'},
    {'osver': '20.04', 'pkgname': 'grub-xen', 'pkgver': '2.04-1ubuntu26.2'},
    {'osver': '20.04', 'pkgname': 'grub-xen-bin', 'pkgver': '2.04-1ubuntu26.2'},
    {'osver': '20.04', 'pkgname': 'grub-xen-host', 'pkgver': '2.04-1ubuntu26.2'},
    {'osver': '20.04', 'pkgname': 'grub2', 'pkgver': '2.04-1ubuntu26.2'},
    {'osver': '20.04', 'pkgname': 'grub2-common', 'pkgver': '2.04-1ubuntu26.2'}
];

var flag = 0;
foreach package_array ( pkgs ) {
  var osver = NULL;
  var pkgname = NULL;
  var pkgver = NULL;
  if (!empty_or_null(package_array['osver'])) osver = package_array['osver'];
  if (!empty_or_null(package_array['pkgname'])) pkgname = package_array['pkgname'];
  if (!empty_or_null(package_array['pkgver'])) pkgver = package_array['pkgver'];
  if (osver && pkgname && pkgver) {
    if (ubuntu_check(osver:osver, pkgname:pkgname, pkgver:pkgver)) flag++;
  }
}

if (flag)
{
  security_report_v4(
    port       : 0,
    severity   : SECURITY_WARNING,
    extra      : ubuntu_report_get()
  );
  exit(0);
}
else
{
  var tested = ubuntu_pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'grub-common / grub-coreboot / grub-coreboot-bin / grub-efi / etc');
}
VendorProductVersionCPE
canonicalubuntu_linuxgrub-efi-amd64-binp-cpe:/a:canonical:ubuntu_linux:grub-efi-amd64-bin
canonicalubuntu_linuxgrub-efi-amd64-signedp-cpe:/a:canonical:ubuntu_linux:grub-efi-amd64-signed
canonicalubuntu_linuxgrub-efi-amd64-signed-templatep-cpe:/a:canonical:ubuntu_linux:grub-efi-amd64-signed-template
canonicalubuntu_linuxgrub-efi-armp-cpe:/a:canonical:ubuntu_linux:grub-efi-arm
canonicalubuntu_linuxgrub-efi-arm-binp-cpe:/a:canonical:ubuntu_linux:grub-efi-arm-bin
canonicalubuntu_linuxgrub-efi-arm64p-cpe:/a:canonical:ubuntu_linux:grub-efi-arm64
canonicalubuntu_linuxgrub-efi-arm64-binp-cpe:/a:canonical:ubuntu_linux:grub-efi-arm64-bin
canonicalubuntu_linuxgrub-efi-arm64-signedp-cpe:/a:canonical:ubuntu_linux:grub-efi-arm64-signed
canonicalubuntu_linuxgrub-efi-arm64-signed-templatep-cpe:/a:canonical:ubuntu_linux:grub-efi-arm64-signed-template
canonicalubuntu_linuxgrub-efi-ia32p-cpe:/a:canonical:ubuntu_linux:grub-efi-ia32
Rows per page:
1-10 of 361

Related

nessus 50
fedora 2
oraclelinux 3
ubuntu 2
redhat 9
openvas 36
qualysblog 1
centos 1
photon 5
f5 2
debian 1
suse 4
osv 9
gentoo 1
mageia 1
hp 1
redos 1
ibm 2
mscve 1
ics 1
redhatcve 7
alpinelinux 7
prion 8
cve 7
debiancve 7
cbl_mariner 12
veracode 7
ubuntucve 7
checkpoint_security 1
lenovo 2
cert 1
nessus
nessus
Oracle Linux 7 : grub2 (ELSA-2020-5790)
2023-09-07 00:00:00
RHEL 7 : grub2 (RHSA-2020:3271)
2020-08-03 00:00:00
RHEL 7 : grub2 (RHSA-2020:3276)
2020-08-03 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: grub2-2.04-22.fc32
2020-09-14 13:26:52
[SECURITY] Fedora 31 Update: grub2-2.02-110.fc31
2020-09-27 01:05:37
oraclelinux
oraclelinux
grub2 security update
2020-07-29 00:00:00
grub2 security update
2020-07-29 00:00:00
grub2 security update
2020-07-29 00:00:00
ubuntu
ubuntu
GRUB2 regression
2020-08-04 00:00:00
GRUB 2 vulnerabilities
2020-07-29 00:00:00
redhat
redhat
(RHSA-2020:3276) Moderate: grub2 security and bug fix update
2020-08-03 11:17:09
(RHSA-2020:3217) Moderate: grub2 security and bug fix update
2020-07-29 18:43:19
(RHSA-2020:3216) Moderate: grub2 security update
2020-07-29 17:13:43
openvas
openvas
Ubuntu: Security Advisory (USN-4432-2)
2020-08-05 00:00:00
CentOS: Security Advisory for grub2 (CESA-2020:3217)
2020-07-30 00:00:00
CentOS: Security Advisory for shim-unsigned-ia32 (CESA-2020:3217)
2020-07-30 00:00:00
qualysblog
qualysblog
GRUB2 Boothole Buffer Overflow Vulnerability (CVE-2020-10713) – Automatically Discover, Prioritize and Remediate Using Qualys VMDR®
2020-08-03 21:35:38
centos
centos
grub2, mokutil, shim security update
2020-07-30 00:08:50
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-1.0-0311
2020-07-30 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0267
2020-07-30 00:00:00
Important Photon OS Security Update - PHSA-2020-0311
2020-07-30 00:00:00
f5
f5
K48187630 : Multiple grub2 vulnerabilities
2021-03-18 00:00:00
K42232641 : GRUB2 vulnerability CVE-2020-10713
2020-08-07 00:00:00
debian
debian
[SECURITY] [DSA 4735-1] grub2 security update
2020-07-29 16:59:52
suse
suse
Security update for grub2 (important)
2020-08-08 00:00:00
Security update for grub2 (important)
2020-08-08 00:00:00
Security update for grub2 (important)
2020-08-29 00:00:00
osv
osv
grub2 - security update
2020-07-29 00:00:00
CVE-2020-14311
2020-07-31 22:15:11
CVE-2020-14309
2020-07-30 13:15:10
gentoo
gentoo
GRUB: Multiple vulnerabilities
2021-04-30 00:00:00
mageia
mageia
Updated grub2 packages fix security vulnerabilities
2021-07-09 01:43:19
hp
hp
HPSBHF03678 rev. 2 - GRUB2 Bootloader Arbitrary Code Execution
2020-07-25 00:00:00
redos
redos
ROS-20220920-01
2022-09-20 00:00:00
ibm
ibm
Security Bulletin: IBM QRadar Network Packet Capture is vulnerable to Using Components with Known Vulnerabilities
2020-10-30 16:18:45
Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities
2023-12-19 17:14:04
mscve
mscve
Microsoft Guidance for Addressing Security Feature Bypass in GRUB
2020-07-29 07:00:00
ics
ics
Hitachi Energy APM Edge (Update A)
2022-10-18 12:00:00
redhatcve
redhatcve
CVE-2020-14309
2020-07-29 17:06:12
CVE-2020-14310
2020-07-29 17:06:12
CVE-2020-15707
2020-07-29 17:06:20
alpinelinux
alpinelinux
CVE-2020-14309
2020-07-30 13:15:00
CVE-2020-14310
2020-07-31 22:15:00
CVE-2020-15707
2020-07-29 18:15:00
prion
prion
Buffer overflow
2020-07-29 20:15:00
Heap overflow
2020-07-31 22:15:00
Heap overflow
2020-07-30 13:15:00
cve
cve
CVE-2020-14311
2020-07-31 22:15:00
CVE-2020-14310
2020-07-31 22:15:00
CVE-2020-15707
2020-07-29 18:15:00
debiancve
debiancve
CVE-2020-14311
2020-07-31 22:15:00
CVE-2020-14310
2020-07-31 22:15:00
CVE-2020-15707
2020-07-29 18:15:00
cbl_mariner
cbl_mariner
CVE-2020-14308 affecting package grub2 2.06~rc1-10
2021-05-06 23:56:52
CVE-2020-14311 affecting package grub2 2.06~rc1-7
2022-04-26 20:17:11
CVE-2020-14310 affecting package grub2 2.06~rc1-7
2022-04-26 20:17:11
veracode
veracode
Denial Of Service (DoS)
2020-07-30 02:02:34
Denial Of Service (DoS)
2020-07-30 02:02:32
Denial Of Service (DoS)
2020-07-30 02:02:35
ubuntucve
ubuntucve
CVE-2020-14310
2020-07-29 00:00:00
CVE-2020-15707
2020-07-29 00:00:00
CVE-2020-14311
2020-07-29 00:00:00
checkpoint_security
checkpoint_security
Check Point response to CVE-2020-10713 (GRUB2 bootloader is vulnerable to buffer overflow)
2020-08-02 22:52:23
lenovo
lenovo
GRUB2 Vulnerability – AKA
2020-07-30 15:15:08
GRUB2 Vulnerability – AKA
2020-07-30 15:15:08
cert
cert
GRUB2 bootloader is vulnerable to buffer overflow
2020-07-29 00:00:00
JSON
Related for UBUNTU_USN-4432-2.NASL
nessus50fedora2oraclelinux3ubuntu2redhat9openvas36qualysblog1centos1photon5f52debian1suse4osv9gentoo1mageia1hp1redos1ibm2mscve1ics1redhatcve7alpinelinux7prion8cve7debiancve7cbl_mariner12veracode7ubuntucve7checkpoint_security1lenovo2cert1