CVE-2020-15705

🗓️ 29 Jul 2020 17:06:17Reported by redhat.comType

redhatcve

redhatcve🔗 access.redhat.com👁 26 Views

GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed

Reporter	Title	Published	Views	Family All 164
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities	26 Mar 202504:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Packet Capture is vulnerable to Using Components with Known Vulnerabilities	30 Oct 202016:18	–	ibm
Tenable Nessus	Alibaba Cloud Linux 3 : 0026: grub2 (ALINUX3-SA-2021:0026)	14 May 202500:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0064: grub2 (ALINUX3-SA-2022:0064)	14 May 202500:00	–	nessus
Tenable Nessus	CentOS 8 : grub2 (CESA-2020:3216)	1 Feb 202100:00	–	nessus
Tenable Nessus	CentOS 7 : grub2 (RHSA-2020:3217)	31 Jul 202000:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.6.0 : grub2 (EulerOS-SA-2020-2000)	29 Sep 202000:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : grub2 (EulerOS-SA-2022-1008)	28 Jan 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : grub2 (EulerOS-SA-2022-1028)	28 Jan 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : grub2 (EulerOS-SA-2022-1194)	23 Feb 202200:00	–	nessus

Source	Link
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-15705
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

20 Apr 2024 00:08Current

4.2Medium risk

Vulners AI Score4.2

EPSS0.00024

grub2 kernel signature validation secure boot bypass