Search: “grub2”

15 stories

Security AffairsMar 4, 10:20 UTC · Mar 4, 2021Malware CVE-2020-10713 CVE-2020-14372 CVE-2020-25632+7 CVEs

BootHole issue allows installing a stealthy and persistent malware

Security AffairsJul 30, 05:49 UTC · Jul 30, 2020Malware CVE-2020-10713

Critical GRUB2 Bootloader Bug Affects Billions of Linux and Windows Systems

The Hacker NewsJul 29, 19:50 UTC · Jul 29, 2020Malware CVE-2020-10713

Press backspace 28 times to hack a Linux PC with Grub2

Security AffairsDec 17, 07:24 UTC · Dec 17, 2015Exploit / PoC

Bug in widely used bootloader opens Windows, Linux devices to persistent compromise

Help Net SecurityAug 3, 11:37 UTC · Aug 3, 2020Malware CVE-2020-10713

Updates provided by Red Hat for BootHole cause systems to hang

Security AffairsJul 31, 20:51 UTC · Jul 31, 2020Vulnerability CVE-2020-10713

New bug in PC booting process could take years to fix, researchers say

CyberScoopJul 29, 18:01 UTC · Jul 29, 2020Ransomware in the wild

GNU GRUB 2.14: serial-MMIO lockdown bypass in Canonical-signed gcdx64.efi

Canonical-signed GRUB2 serial command accepts arbitrary MMIO addresses, letting local attackers with grub.cfg control bypass Secure Boot lockdown.

A vulnerability in Canonical's grub-efi-amd64-signed (gcdx64.efi, GRUB 2.14) exposes a serial command that accepts a caller-supplied 64-bit MMIO base address. The lockdown path does not restrict this command even when lockdown=y under UEFI Secure Boot, and the serial implementation does not validate that the requested register span belongs to a real UART rather than ordinary RAM. A local attacker with control of GRUB's boot configuration can abuse this to bypass the Secure Boot lockdown.