Malwaremedium

GRUB2 boot loader maintainers fixed hundreds of flaws

Security Affairsby @securityaffairsMar 4, 2021 · 10:20 UTC (Mar 4, 2021)3 min read1 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2020-10713 CVE-2020-14372 CVE-2020-25632 CVE-2020-25647 CVE-2020-27749 CVE-2020-27779 CVE-2021-3418 CVE-2020-15705 CVE-2021-20225 CVE-2021-20233

Tags: cve-2020-10713 cve-2020-14372 cve-2020-25632 cve-2020-25647 cve-2020-27749 malware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Published
CVE-2020-10713	A flaw was found in grub2, prior to version 2.06	8.2	2%	Jul 30, 2020
CVE-2020-25632 +6 related CVEs CVE-2021-20233 CVE-2020-25647 CVE-2020-14372 CVE-2020-27779 CVE-2021-20225 CVE-2020-27749	A flaw was found in grub2 in versions prior to 2.06	8.2 group max	1%	Mar 3, 2021
CVE-2020-15705	GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed	6.4	1%	Jul 29, 2020
CVE-2021-3418	If certificates that signed grub are installed into db, grub can be booted directly	6.4	<1%	Mar 15, 2021

From the original article

3 min read at securityaffairs.com

Now maintainers at the GRUB project have released security updates to address more than 100 vulnerabilities. GRUB2 (the GR and U nified B ootloader version 2 ) is a replacement for the original GRUB Legacy boot loader, which is now referred to as “GRUB Legacy”. The mechanism is designed to protect the boot process from attacks.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.