8.2 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
grub2 is vulnerable to arbitrary code execution. The vulnerability exists through a crafted grub.cfg file during boot process.
lists.opensuse.org/opensuse-security-announce/2020-08/msg00016.html
lists.opensuse.org/opensuse-security-announce/2020-08/msg00017.html
www.openwall.com/lists/oss-security/2020/07/29/3
access.redhat.com/errata/RHSA-2020:3223
access.redhat.com/security/updates/classification/#moderate
access.redhat.com/security/vulnerabilities/grub2bootloader
bugzilla.redhat.com/show_bug.cgi?id=1825243
cve.openeuler.org/#/CVEInfo/CVE-2020-10713
eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/
kb.vmware.com/s/article/80181
security.gentoo.org/glsa/202104-05
security.netapp.com/advisory/ntap-20200731-0008/
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-grub2-code-exec-xLePCAPY
usn.ubuntu.com/4432-1/
www.debian.org/security/2020/dsa-4735
www.kb.cert.org/vuls/id/174059
8.2 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P