GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed. This only affects systems where the kernel signing certificate has been imported directly into the secure boot database and the GRUB image is booted directly without the use of shim. This issue affects GRUB2 version 2.04 and prior versions.
GRUB2 presenta un fallo al comprobar la firma del kernel cuando se inicia directamente sin cuña, permitiendo que el arranque seguro sea omitido. Esto solo afecta a los sistemas en los que el certificado de firma del kernel ha sido importado directamente a la base de datos de arranque seguro y la imagen de GRUB es iniciada directamente sin el uso de cuña. Este problema afecta a GRUB2 versiones 2.04 y versiones anteriores
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
| Attack Vector | LOCAL |
|---|---|
| Attack Complexity | HIGH |
| Privileges Required | HIGH |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | HIGH |
| Integrity Impact | HIGH |
| Availability Impact | HIGH |
AV:L/AC:M/Au:N/C:P/I:P/A:P
| Access Vector | LOCAL |
|---|---|
| Access Complexity | MEDIUM |
| Authentication | NONE |
| Confidentiality Impact | PARTIAL |
| Integrity Impact | PARTIAL |
| Availability Impact | PARTIAL |
| Source | Type | Description |
|---|---|---|
| [email protected] | Secondary |
en
CWE-347
|
| [email protected] | Primary |
en
CWE-347
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| gnu | grub2 | * | <built-in method update of dict object at 0x72a9b0b3af40> | Application |
| redhat | enterprise_linux_atomic_host | - | <built-in method update of dict object at 0x72a9cc8758c0> | Application |
| redhat | openshift_container_platform | 4.0 | <built-in method update of dict object at 0x72a9b0b38740> | Application |
| canonical | ubuntu_linux | 14.04 | <built-in method update of dict object at 0x72a9b0aa7180> | Operating System |
| canonical | ubuntu_linux | 16.04 | <built-in method update of dict object at 0x72a9ccd2b9c0> | Operating System |
| canonical | ubuntu_linux | 18.04 | <built-in method update of dict object at 0x72a9ccd2b700> | Operating System |
| canonical | ubuntu_linux | 20.04 | <built-in method update of dict object at 0x72a9cc877d00> | Operating System |
| debian | debian_linux | 10.0 | <built-in method update of dict object at 0x72a9b0aa4d40> | Operating System |
| opensuse | leap | 15.1 | <built-in method update of dict object at 0x72a9cc679c80> | Operating System |
| opensuse | leap | 15.2 | <built-in method update of dict object at 0x72a9ccd2a2c0> | Operating System |
| redhat | enterprise_linux | 7.0 | <built-in method update of dict object at 0x72a9b0b3b1c0> | Operating System |
| redhat | enterprise_linux | 8.0 | <built-in method update of dict object at 0x72a9ccd28540> | Operating System |
| suse | suse_linux_enterprise_server | 11 | <built-in method update of dict object at 0x72a9b0a74980> | Operating System |
| suse | suse_linux_enterprise_server | 12 | <built-in method update of dict object at 0x72a9cc874680> | Operating System |
| suse | suse_linux_enterprise_server | 15 | <built-in method update of dict object at 0x72a9b0b3b940> | Operating System |
| microsoft | windows_10 | - | <built-in method update of dict object at 0x72a9b0b6bf80> | Operating System |
| microsoft | windows_10 | 1607 | <built-in method update of dict object at 0x72a9cc877d40> | Operating System |
| microsoft | windows_10 | 1709 | <built-in method update of dict object at 0x72a9cd086a40> | Operating System |
| microsoft | windows_10 | 1803 | <built-in method update of dict object at 0x72a9ccd28740> | Operating System |
| microsoft | windows_10 | 1809 | <built-in method update of dict object at 0x72a9b0a77280> | Operating System |
| microsoft | windows_10 | 1903 | <built-in method update of dict object at 0x72a9cc875280> | Operating System |
| microsoft | windows_10 | 1909 | <built-in method update of dict object at 0x72a9cc876540> | Operating System |
| microsoft | windows_10 | 2004 | <built-in method update of dict object at 0x72a9cc6792c0> | Operating System |
| microsoft | windows_8.1 | - | <built-in method update of dict object at 0x72a9b0b693c0> | Operating System |
| microsoft | windows_rt_8.1 | - | <built-in method update of dict object at 0x72a9ccf9ff40> | Operating System |
| microsoft | windows_server_2012 | - | <built-in method update of dict object at 0x72a9cc774640> | Operating System |
| microsoft | windows_server_2012 | r2 | <built-in method update of dict object at 0x72a9b0aa7d80> | Operating System |
| microsoft | windows_server_2016 | - | <built-in method update of dict object at 0x72a9ccf9fe80> | Operating System |
| microsoft | windows_server_2016 | 1903 | <built-in method update of dict object at 0x72a9ccd2b2c0> | Operating System |
| microsoft | windows_server_2016 | 1909 | <built-in method update of dict object at 0x72a9cd0d9cc0> | Operating System |
| microsoft | windows_server_2016 | 2004 | <built-in method update of dict object at 0x72a9cd087480> | Operating System |
| microsoft | windows_server_2019 | - | <built-in method update of dict object at 0x72a9ccd2a040> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:gnu:grub2:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:redhat:enterprise_linux_atomic_host:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:* |
| Yes | cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* |
| Yes | cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* |
| Yes | cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:* |
| Yes | cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:suse:suse_linux_enterprise_server:11:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:suse:suse_linux_enterprise_server:12:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:suse:suse_linux_enterprise_server:15:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:* |