CVE-2020-25647

EUVD-2020-18312

03.03.2021, 17:15

A flaw was found in grub2 in versions prior to 2.06. During USB device initialization, descriptors are read with very little bounds checking and assumes the USB device is providing sane values. If properly exploited, an attacker could trigger memory corruption leading to arbitrary code execution allowing a bypass of the Secure Boot mechanism. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.6 HIGH	PHYSICAL	LOW	NONE	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 1%

Affected Products (NVD)

Vendor	Product	Version
gnu	grub2	𝑥 < 2.06
redhat	enterprise_linux	7.0
redhat	enterprise_linux	8.0
redhat	enterprise_linux_server_aus	7.2
redhat	enterprise_linux_server_aus	7.3
redhat	enterprise_linux_server_aus	7.4
redhat	enterprise_linux_server_aus	7.6
redhat	enterprise_linux_server_aus	7.7
redhat	enterprise_linux_server_aus	8.2
redhat	enterprise_linux_server_eus	7.6
redhat	enterprise_linux_server_eus	7.7
redhat	enterprise_linux_server_eus	8.1
redhat	enterprise_linux_server_tus	7.4
redhat	enterprise_linux_server_tus	7.6
redhat	enterprise_linux_server_tus	7.7
redhat	enterprise_linux_server_tus	8.2
redhat	enterprise_linux_workstation	7.0
netapp	ontap_select_deploy_administration_utility	-

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

grub2

bookworm	2.06-13+deb12u1 fixed
bookworm (security)	2.06-13+deb12u1 fixed
bullseye	2.06-3~deb11u6 fixed
bullseye (security)	2.06-3~deb11u6 fixed
sid	2.12-5 fixed
stretch	ignored
trixie	2.12-5 fixed