2020-07-14 02:01:21 +00:00
{
"CVE_data_meta" : {
2020-07-29 13:35:42 -04:00
"ASSIGNER" : "security@ubuntu.com" ,
"DATE_PUBLIC" : "2020-07-29T17:00:00.000Z" ,
2020-07-14 02:01:21 +00:00
"ID" : "CVE-2020-15706" ,
2020-07-29 13:35:42 -04:00
"STATE" : "PUBLIC" ,
"TITLE" : "GRUB2 contains a race condition leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing."
} ,
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"product_name" : "grub2 in Ubuntu" ,
"version" : {
"version_data" : [
{
"version_affected" : "<" ,
"version_name" : "20.04 LTS" ,
"version_value" : "2.04-1ubuntu26.1"
} ,
{
"version_affected" : "<" ,
"version_name" : "18.04 LTS" ,
"version_value" : "2.02-2ubuntu8.16"
} ,
{
"version_affected" : "<" ,
"version_name" : "16.04 LTS" ,
"version_value" : "2.02~beta2-36ubuntu3.26"
} ,
{
"version_affected" : "<" ,
"version_name" : "14.04 ESM" ,
"version_value" : "2.02~beta2-9ubuntu1.20"
}
]
}
}
]
} ,
"vendor_name" : "Ubuntu"
}
]
}
2020-07-14 02:01:21 +00:00
} ,
2020-07-29 13:35:42 -04:00
"credit" : [
{
"lang" : "eng" ,
"value" : "Chris Coulson"
}
] ,
"data_format" : "MITRE" ,
"data_type" : "CVE" ,
"data_version" : "4.0" ,
2020-07-14 02:01:21 +00:00
"description" : {
"description_data" : [
{
"lang" : "eng" ,
2020-07-29 13:35:42 -04:00
"value" : "GRUB2 contains a race condition in grub_script_function_create() leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing, leading to arbitrary code execution and secure boot restriction bypass. This issue affects GRUB2 version 2.04 and prior versions."
2020-07-14 02:01:21 +00:00
}
]
2020-07-29 13:35:42 -04:00
} ,
"generator" : {
"engine" : "Vulnogram 0.0.9"
} ,
"impact" : {
"cvss" : {
"attackComplexity" : "HIGH" ,
"attackVector" : "LOCAL" ,
"availabilityImpact" : "HIGH" ,
"baseScore" : 6.4 ,
"baseSeverity" : "MEDIUM" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
"privilegesRequired" : "HIGH" ,
"scope" : "UNCHANGED" ,
"userInteraction" : "NONE" ,
"vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" ,
"version" : "3.1"
}
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "CWE-362 Race Condition (Concurrent Execution using Shared Resource with Improper Synchronization)"
}
]
}
]
} ,
"references" : {
"reference_data" : [
{
"name" : "https://www.eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/" ,
"refsource" : "CONFIRM" ,
"url" : "https://www.eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/"
} ,
{
"name" : "https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/GRUB2SecureBootBypass" ,
"refsource" : "UBUNTU" ,
"url" : "https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/GRUB2SecureBootBypass"
} ,
{
"name" : "http://ubuntu.com/security/notices/USN-4432-1" ,
"refsource" : "UBUNTU" ,
"url" : "http://ubuntu.com/security/notices/USN-4432-1"
} ,
{
"name" : "https://www.debian.org/security/2020-GRUB-UEFI-SecureBoot" ,
"refsource" : "DEBIAN" ,
"url" : "https://www.debian.org/security/2020-GRUB-UEFI-SecureBoot"
} ,
{
"name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV200011" ,
"refsource" : "CONFIRM" ,
"url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV200011"
} ,
{
"name" : "https://access.redhat.com/security/vulnerabilities/grub2bootloader" ,
"refsource" : "REDHAT" ,
"url" : "https://access.redhat.com/security/vulnerabilities/grub2bootloader"
} ,
{
"name" : "https://www.suse.com/c/suse-addresses-grub2-secure-boot-issue/" ,
"refsource" : "SUSE" ,
"url" : "https://www.suse.com/c/suse-addresses-grub2-secure-boot-issue/"
} ,
{
"name" : "https://www.suse.com/support/kb/doc/?id=000019673" ,
"refsource" : "SUSE" ,
"url" : "https://www.suse.com/support/kb/doc/?id=000019673"
} ,
{
"name" : "https://www.openwall.com/lists/oss-security/2020/07/29/3" ,
"refsource" : "CONFIRM" ,
"url" : "https://www.openwall.com/lists/oss-security/2020/07/29/3"
} ,
{
"name" : "https://lists.gnu.org/archive/html/grub-devel/2020-07/msg00034.html" ,
"refsource" : "CONFIRM" ,
"url" : "https://lists.gnu.org/archive/html/grub-devel/2020-07/msg00034.html"
2020-07-29 19:01:29 +00:00
} ,
{
"refsource" : "DEBIAN" ,
"name" : "DSA-4735" ,
"url" : "https://www.debian.org/security/2020/dsa-4735"
2020-07-29 21:01:26 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[oss-security] 20200729 multiple secure boot grub2 and linux kernel vulnerabilities" ,
"url" : "http://www.openwall.com/lists/oss-security/2020/07/29/3"
2020-07-31 14:01:23 +00:00
} ,
{
"refsource" : "CONFIRM" ,
"name" : "https://security.netapp.com/advisory/ntap-20200731-0008/" ,
"url" : "https://security.netapp.com/advisory/ntap-20200731-0008/"
2020-08-04 21:03:35 +00:00
} ,
{
"refsource" : "UBUNTU" ,
"name" : "USN-4432-1" ,
"url" : "https://usn.ubuntu.com/4432-1/"
2020-08-08 18:01:23 +00:00
} ,
{
"refsource" : "SUSE" ,
"name" : "openSUSE-SU-2020:1169" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00017.html"
} ,
{
"refsource" : "SUSE" ,
"name" : "openSUSE-SU-2020:1168" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00016.html"
2021-05-01 02:01:06 +00:00
} ,
{
"refsource" : "GENTOO" ,
"name" : "GLSA-202104-05" ,
"url" : "https://security.gentoo.org/glsa/202104-05"
2020-07-29 13:35:42 -04:00
}
]
} ,
"source" : {
"advisory" : "USN 4432-1" ,
"discovery" : "INTERNAL"
2020-07-14 02:01:21 +00:00
}
2020-07-29 19:01:29 +00:00
}
