PT-2020-3621 · Gnu +7 · Grub2 +7

Name of the Vulnerable Software and Affected Versions: Grub2 versions prior to 2.06 Description: The issue is related to an integer overflow of the UINT32 value, which can allow an attacker to access confidential data, compromise its integrity, and cause a denial of service. Specifically, the...

GRUB2 bootloader is vulnerable to buffer overflow

Overview The GRUB2 boot loader is vulnerable to buffer overflow, which results in arbitrary code execution during the boot process, even when Secure Boot is enabled. Description GRUB2 is a multiboot boot loader that replaced GRUB Legacy in 2012. A boot loader is the first program that runs upon...

PT-2020-3312 · Gnu +8 · Grub2 +8

The vulnerable software is GRUB2, a widely used bootloader for Linux and other operating systems. The affected versions are prior to 2.06. The issue is caused by a buffer overflow in the GRUB2 configuration file, which can be exploited by attackers to gain arbitrary code execution during the boot...

BSA-2020-1053

Security Advisory ID : BSA-2020-1053 Component : GRUB2 Revision : 1.0: Initial Security Researchers from Eclypsium disclosed “BootHole.” 1, 2.“BootHole” vulnerability in the GRUB2 bootloader opens up Windows and Linux devices using Secure Boot to attack. All operating systems using GRUB2 with...

grub2 security update

2.02-81.0.4 - Fix CVE-2020-10713, CVE-2020-14308, CVE-2020-14309, CVE-2020-14310, CVE-2020-14311, CVE-2020-15705, CVE-2020-15706, CVE-2020-15707 Orabug: 31225072 - Update signing certificate for efi binaries 2.02-0.81.0.2 - Enable common subpackage build for aarch64 - Disable RHEL patch...

grub2 security update

2.02-81.0.3 - Fix CVE-2020-10713, CVE-2020-14308, CVE-2020-14309, CVE-2020-14310, CVE-2020-14311, CVE-2020-15705, CVE-2020-15706, CVE-2020-15707 Orabug: 31225072 - Update signing certificate for efi binaries...

HPESBHF04022 rev.1 - Superdome Flex Servers with Secure Boot enabled and GRUB2 vulnerability, Local Arbitrary Code Execution

Potential Security Impact: Local: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Superdome Flex Server Version 3.25.46 May 12 2020 or earlier CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2020-10713 |...

DSA-4735-1 grub2 - security update

Bulletin has no description...

HPSBHF03678 rev. 2 - GRUB2 Bootloader Arbitrary Code Execution

Potential Security Impact Arbitrary Code Execution Source: HP, HP Product Security Response Team PSRT Reported By: Eclypsium, Inc. VULNERABILITY SUMMARY HP has been informed of a potential security vulnerability in GRUB2 bootloaders commonly used by Linux. This vulnerability, known as “There’s a...

Important Photon OS Security Update - PHSA-2020-0120

Updates of 'grub2', 'linux' packages of Photon OS have been released...

FreeBSD bhyve buffer overflow vulnerability (CNVD-2020-17375)

FreeBSD is a Unix-like operating system from the FreeBSD Foundation. bhyve is a virtual machine hypervisor used in it. FreeBSD bhyve 525916 A buffer overflow vulnerability exists in the 'grub2-bhyve' port in versions prior to 2020-02-12. The vulnerability stems from a networked system or product...

FreeBSD bhyve code execution vulnerability

FreeBSD is a Unix-like operating system from the FreeBSD Foundation. bhyve is a virtual machine hypervisor used in it. A security vulnerability exists in the 'grub2-bhyve' port in versions of FreeBSD bhyve 525916 prior to 2020-02-12, which stems from the port failing to properly validate the...

CVE-2020-10566

grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12, mishandles font loading by a guest through a grub2.cfg file, leading to a buffer overflow...

CVE-2020-10566

grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12, mishandles font loading by a guest through a grub2.cfg file, leading to a buffer overflow...

CVE-2020-10565

grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12, does not validate the address provided as part of a memrw command read or write by a guest through a grub2.cfg file. This allows an untrusted guest to perform arbitrary read or write operations in the context of the grub-bhy...

Design/Logic Flaw

grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12, does not validate the address provided as part of a memrw command read or write by a guest through a grub2.cfg file. This allows an untrusted guest to perform arbitrary read or write operations in the context of the grub-bhy...

CVE-2020-10565

CVE-2020-10565 affects grub2-bhyve in FreeBSD bhyve prior to revision 525916. The root cause is that the guest-provided address in a memrw read_/write_ operation via grub2.cfg is not validated, enabling an untrusted guest to perform arbitrary reads/writes within the grub-bhyve process and potenti...

CVE-2020-10565

grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12, does not validate the address provided as part of a memrw command read or write by a guest through a grub2.cfg file. This allows an untrusted guest to perform arbitrary read or write operations in the context of the grub-bhy...

CVE-2020-10566

grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12, mishandles font loading by a guest through a grub2.cfg file, leading to a buffer overflow...

CVE-2020-10566

CVE-2020-10566 affects grub2-bhyve used in FreeBSD bhyve prior to revision 525916 (2020-02-12). Affected component is grub2-bhyve’s handling of font loading via a guest grub2.cfg, which leads to a buffer overflow. Multiple sources (NVD, Red Hat advisory, CNVD, CNVD mirrors) corroborate the vulner...