SUSE SLED15 / SLES15 Security Update : grub2 (SUSE-SU-2020:2307-1)

This update for grub2 fixes the following issues : CVE-2020-15705: Fail kernel validation without shim protocol bsc1174421. Add fibre channel device's ofpath support to grub-ofpathname and search hint to speed up root device discovery bsc1172745. Note that Tenable Network Security has extracted t...

SUSE SLES15 Security Update : grub2 (SUSE-SU-2020:2303-1)

This update for grub2 fixes the following issues : CVE-2020-15705: Fail kernel validation without shim protocol bsc1174421. Add fibre channel device's ofpath support to grub-ofpathname and search hint to speed up root device discovery bsc1172745. Note that Tenable Network Security has extracted t...

SUSE SLES12 Security Update : grub2 (SUSE-SU-2020:2308-1)

This update for grub2 fixes the following issues : CVE-2020-15705: Fail kernel validation without shim protocol bsc1174421. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

SUSE-SU-2020:14461-1 Security update for grub2

This update for grub2 fixes the following issues: - CVE-2020-15705: Fail kernel validation without shim protocol bsc1174421...

SUSE-SU-2020:2308-1 Security update for grub2

This update for grub2 fixes the following issues: - CVE-2020-15705: Fail kernel validation without shim protocol bsc1174421...

SUSE-SU-2020:2307-1 Security update for grub2

This update for grub2 fixes the following issues: - CVE-2020-15705: Fail kernel validation without shim protocol bsc1174421. - Add fibre channel device's ofpath support to grub-ofpathname and search hint to speed up root device discovery bsc1172745...

SUSE-SU-2020:2306-1 Security update for grub2

This update for grub2 fixes the following issue: - CVE-2020-15705: Fail kernel validation without shim protocol bsc1174421. - Add fibre channel device's ofpath support to grub-ofpathname and search hint to speed up root device discovery bsc1172745...

SUSE-SU-2020:2305-1 Security update for grub2

This update for grub2 fixes the following issues: - CVE-2020-15705: Fail kernel validation without shim protocol bsc1174421. - Add fibre channel device's ofpath support to grub-ofpathname and search hint to speed up root device discovery bsc1172745...

SUSE-SU-2020:2304-1 Security update for grub2

This update for grub2 fixes the following issues: - CVE-2020-15705: Fail kernel validation without shim protocol bsc1174421. - Add fibre channel device's ofpath support to grub-ofpathname and search hint to speed up root device discovery bsc1172745...

SUSE-SU-2020:2303-1 Security update for grub2

This update for grub2 fixes the following issues: - CVE-2020-15705: Fail kernel validation without shim protocol bsc1174421. - Add fibre channel device's ofpath support to grub-ofpathname and search hint to speed up root device discovery bsc1172745...

Huawei EulerOS: Security Advisory for grub2 (EulerOS-SA-2020-1832)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for grub2 (EulerOS-SA-2020-1833)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for grub2 (EulerOS-SA-2020-1834)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP3 : grub2 (EulerOS-SA-2020-1834)

According to the version of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - grub2: Crafted grub.cfg file can lead to arbitrary code execution during boot process CVE-2020-10713 Note that Tenable Network Security has extracte...

EulerOS 2.0 SP2 : grub2 (EulerOS-SA-2020-1833)

According to the version of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - grub2: Crafted grub.cfg file can lead to arbitrary code execution during boot process CVE-2020-10713 Note that Tenable Network Security has extracte...

EulerOS 2.0 SP8 : grub2 (EulerOS-SA-2020-1832)

According to the version of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - grub2: Crafted grub.cfg file can lead to arbitrary code execution during boot process CVE-2020-10713 Note that Tenable Network Security has extracte...

The vulnerability in the implementation of the grub_script_function_create() function of the Grub2 operating system allows a perpetrator to gain access to confidential data, affect the integrity of the data, and cause service failures.

The vulnerability of the grubscriptfunctioncreate function, which is part of the Grub2 operating system loader, stems from an error in function overriding. This function is already being executed. Exploiting this vulnerability could allow a perpetrator to access confidential data, compromise data...

The vulnerability of the implementations of grub_cmd_initrd and grub_initrd_init, the Grub2 operating system loaders, allows an attacker to access confidential data, compromise data integrity, and cause service failures.

The vulnerability of the implementations of grubcmdinitrd and grubinitrdinit, which are used by the Grub2 operating system loader, is related to the introduction of a large number of arguments into the initrd command in 32-bit architectures. Exploiting this vulnerability allows an attacker to gai...

Informational: BootHole Vulnerability Impact on Palo Alto Networks PAN-OS Software

Palo Alto Networks is aware of the vulnerability known as BootHole CVE-2020-10713 that affects the Grand Unified Bootloader GRUB used in Palo Alto Networks PAN-OS software. BootHole is a buffer overflow vulnerability that occurs in GRUB2 when parsing an attacker-controlled grub.cfg file. This...

openSUSE Security Update : grub2 (openSUSE-2020-1168)

This update for grub2 fixes the following issues : - CVE-2020-10713 bsc1168994 - CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311 bsc1173812 - CVE-2020-15706 bsc1174463 - CVE-2020-15707 bsc1174570 - Use overflow checking primitives where the arithmetic expression for buffer allocatio...