There is an issue on grub2 before version 2.06 at function read_section_as_string(). It expects a font name to be at max UINT32_MAX - 1 length in bytes but it doesn't verify it before proceed with buffer allocation to read the value from the font value. An attacker may leverage that by crafting a malicious font file which has a name with UINT32_MAX leading to read_section_as_string() to an arithmetic overflow zero-sized allocation and further heap-based buffer overflow.

...

Security Advisory - Buffer Overflow Vulnerability BootHole in GRUB2 Secure Boot

Eclypsium researchers have discovered a vulnerability named“BootHole”in the GRUB2 bootloader. There is a buffer overflow vulnerability that can be used to gain arbitrary code execution during the boot process, even when Secure Boot is enabled. Attackers exploiting this vulnerability can install...

Fedora 32 : 1:grub2 (2020-41e57d7649)

grub2 updates for boothole vulnerabilities in f31/f32. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

SUSE-SU-2020:2629-1 Security update for shim

This update for shim fixes the following issues: This update addresses the 'BootHole' security issue master CVE CVE-2020-10713, by disallowing binaries signed by the previous SUSE UEFI signing key from booting. This update should only be installed after updates of grub2, the Linux kernel and if...

SUSE-SU-2020:2627-1 Security update for shim

This update for shim fixes the following issues: - Update to the unified shim binary from SUSE Linux Enterprise 15-SP1 bsc1168994 This update addresses the 'BootHole' security issue master CVE CVE-2020-10713, by disallowing binaries signed by the previous SUSE UEFI signing key from booting. This...

CVE-2020-15707 affecting package grub2 2.02-26

CVE-2020-15707 affecting package grub2 2.02-26. A patched version of the package is available...

CVE-2015-8370 affecting package grub2 2.02-26

CVE-2015-8370 affecting package grub2 2.02-26. A patched version of the package is available...

CVE-2020-15706 affecting package grub2 2.02-26

CVE-2020-15706 affecting package grub2 2.02-26. A patched version of the package is available...

EulerOS Virtualization for ARM 64 3.0.2.0 : grub2 (EulerOS-SA-2020-1965)

According to the version of the grub2 packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - A flaw was found in grub2, prior to version 2.06. An attacker may use the GRUB 2 flaw to hijack and tamper the GRUB...

Huawei EulerOS: Security Advisory for grub2 (EulerOS-SA-2020-1965)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for grub2 (EulerOS-SA-2020-1946)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : grub2 (EulerOS-SA-2020-1946)

According to the version of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - grub2: Crafted grub.cfg file can lead to arbitrary code execution during boot process CVE-2020-10713 Note that Tenable Network Security has extracte...

openSUSE: Security Advisory for grub2 (openSUSE-SU-2020:1280-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE: Security Advisory for grub2 (openSUSE-SU-2020:1282-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Huawei EulerOS: Security Advisory for grub2 (EulerOS-SA-2020-1891)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for grub2 (EulerOS-SA-2020-1853)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : grub2 (openSUSE-2020-1282)

This update for grub2 fixes the following issue : - CVE-2020-15705: Fail kernel validation without shim protocol bsc1174421. - Add fibre channel device's ofpath support to grub-ofpathname and search hint to speed up root device discovery bsc1172745. This update was imported from the...

openSUSE Security Update : grub2 (openSUSE-2020-1280)

This update for grub2 fixes the following issues : - CVE-2020-15705: Fail kernel validation without shim protocol bsc1174421. - Add fibre channel device's ofpath support to grub-ofpathname and search hint to speed up root device discovery bsc1172745. This update was imported from the...

Security update for grub2 (important)

openSUSE Security Update: Security update for grub2 Announcement ID: openSUSE-SU-2020:1282-1 Rating: important References: 1172745 1174421 Cross-References: CVE-2020-15705 Affected Products: openSUSE Leap 15.2 An update that solves one vulnerability and has one errata is now available. Descriptio...

Security update for grub2 (important)

openSUSE Security Update: Security update for grub2 Announcement ID: openSUSE-SU-2020:1280-1 Rating: important References: 1172745 1174421 Cross-References: CVE-2020-15705 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has one errata is now available. Descriptio...