2190 matches found
Super-UEFIinSecureBoot-Disk
超级UEFI安全启动盘 Super UEFIinSecureBoot Disk 是一个概念验证（未积极维护或增强）的可启动映像，带有GRUB2引导加载程序，旨在用作恢复USB闪存盘的基础。 关键特性： 该磁盘在启用UEFI安全启动模式下完全可用。它可以启动任何操作系统或.efi文件，即使签名不受信任、无效或缺失。 特性： GRUB2 Bootloader 支持32位（ia32）/64位（x8664）UEFI（+安全启动） 支持BIOS / UEFI CSM 启动任何操作系统 从GRUB2启动任何.efi可执行文件 从另一个.efi应用程序启动任何.efi可执行文件 加载任何UEFI驱动程...
shim-review
このリポジトリは、shim への署名依頼をレビューするためのものです。レビューを依頼するには: このリポジトリをクローンしてください（できればフォークしてください） 以下のテンプレートを編集してください 署名対象の shim.efi を追加してください ビルドログを追加してください 必要となる可能性のある追加のバイナリ/証明書/SHA256 ハッシュを追加してください それらをすべてコミットしてください "myorg-shim-arch-YYYYMMDD" 形式のタグを付けてください GitHub にプッシュしてください...
CVE-2020-14372
CVE-2020-14372: 「簡単なトリック」で（それほどでもない）セキュアブートをバイパスする 脆弱性の詳細 ある日、GRUB2のコンソールで「help」と入力したところ、とても「面白い」コマンドを見つけました: readbyte ADDR: ADDRから8ビット値を読み取る writebyte ADDR VAL: ADDRに8ビット値VALを書き込む 私はすぐに、これは最も楽しいSecure Bootバイパスを見つけたと思いましたが、これらのコマンドはSecure Boot下で次のような出力をします: root@kitploit: error: Secure Boot forbi...
CVE-2025-0690
CVE-2025-0690: GRUB2 整数オーバーフロー脆弱性 🛡️ 概要 CVE-2025-0690 は、ブートローダ GRUB2 における重大な整数オーバーフロー 脆弱性であり、任意のコード実行 とSecure Boot の回避 を許します。この欠陥は GRUB2 に依存してセキュアブートを行うシステムに影響し、オペレーティングシステム起動前のシステムを危険にさらします。 🔍 技術的詳細 根本原因 脆弱なコマンド : read（キーボード入力の受信に使用） 問題 : 入力長が 32ビット整数 に格納される 悪用メカニズム : 極めて長いテキスト行を入力する 長さ変数でオーバーフロー...
slot2
slot2 slot2: a two-stage UEFI GRUB2 bootkit that persists a pre-OS networked implant on Amazon Linux 2023 on AWS EC2 UEFI x8664. by cenobyte [email protected] 2026 https://github.com/cenobyte-vincit/slot2 Summary slot2 is a bootkit for Amazon Linux 2023 on EC2. The AWS EC2 UEFI firmware load...
Astra Linux – Vulnerability in grub2
A flaw was discovered in grub2 in versions prior to 2.06. The rmmod implementation allows the unloading of a module that serves as a dependency without checking whether any other dependent modules are still loaded, leading to a “use-after-free” scenario. This could allow arbitrary code to be...
Astra Linux – Vulnerability in grub2
The GRUB2’s shimlock verifier allows non-kernel files to be loaded on shim-powered secure boot systems. Allowing such files to be loaded may lead to unverified code and modules being loaded in GRUB2, thereby breaking the secure boot trust-chain...
Astra Linux – Vulnerability in grub2
Integer underflow in grubnetrecvip4packets; A malicious IP packet can cause an integer underflow in the grubnetrecvip4packets function, affecting the rsm-totallen value. Under certain circumstances, the totallen value may wrap around to a small integer number, which will be used in memory...
Astra Linux – Vulnerability in grub2
A vulnerability related to operations after freeing memory has been discovered in GRUB’s gettext module. This flaw arises from a programming error where the gettext command remains registered in memory even after its associated module is unloaded. An attacker can exploit this condition by invokin...
Astra Linux – Vulnerability in grub2
A flaw was discovered in grub2 in versions prior to 2.06. The cutmem command does not honor secure boot locking, allowing a privileged attacker to remove address ranges from memory. This creates an opportunity to circumvent SecureBoot protections after proper analysis of grub’s memory layout. The...
Astra Linux – Vulnerability in grub2
A flaw was discovered in grub2. When attempting to mount an HFS+ partition, the hfsplus filesystem driver does not correctly set the ERRNO value. This issue may lead to a NULL pointer access...
Astra Linux – Vulnerability in grub2
A flaw was discovered in grub2, where the grubextcmddispatcher function calls grubarglistalloc to allocate memory for the grub’s argument list. However, it does not check in case the memory allocation fails. Once the allocation fails, a NULL pointer will be processed by the parseoption function,...
Astra Linux – Vulnerability in grub2
A flaw was discovered in grub2 in versions prior to 2.06. The Setparamprefix function in the menu rendering code performs a length calculation based on the assumption that expressing a single quoted character would require 3 characters. However, in reality, it requires 4 characters. This allows a...
Astra Linux – Vulnerability in grub2
A crafted 16-bit grayscale PNG image may lead to an out-of-bounds write in the heap area. An attacker may exploit this to cause heap data corruption or, ultimately, arbitrary code execution and circumvent secure boot protections. This issue is highly complex to exploit; an attacker needs to perfo...
Astra Linux – Vulnerability in grub2
A flaw was discovered in grub2. During the network boot process, when attempting to search for the configuration file, grub copies data from a user-controlled environment variable into an internal buffer using the grubstrcpy function. During this step, it fails to consider the length of the...
Astra Linux – Vulnerability in grub2
A buffer overflow was detected in grubfontconstructglyph. A maliciously crafted pf2 font can cause an overflow when calculating the maxglyphsize value. This results in allocating a buffer that is smaller than necessary for the glyph, leading to another buffer overflow and an out-of-bounds write t...
Astra Linux – Vulnerability in grub2
A heap out-of-bounds write may occur during the handling of Huffman tables in the PNG reader. This may lead to data corruption in the heap space. The impacts on confidentiality, integrity, and availability are considered low, as it is very complex for an attacker to control the encoding and...
Astra Linux – Vulnerability in grub2
When reading data from the disk, the GRUB’s UDF filesystem module uses the user-controlled data length metadata to allocate its internal buffers. In certain scenarios, while iterating through disk sectors, it assumes that the read size from the disk is always smaller than the allocated buffer siz...
Photon OS 5.0: Grub2 PHSA-2026-5.0-91-0742
An update of the grub2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0742. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Grub2 PHSA-2026-5.0-92-0742
An update of the grub2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0742. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...