CVE-2020-15705

Published: Jul 29, 2020Modified: Jun 17, 2026

6.4

Vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.5 / Impact: 5.9

Source: NVD

Description

GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed. This only affects systems where the kernel signing certificate has been imported directly into the secure boot database and the GRUB image is booted directly without the use of shim. This issue affects GRUB2 version 2.04 and prior versions.

Affected (32)

Products: Gnu: Grub2 · Canonical: Ubuntu Linux · Debian: Debian Linux · +4 more

Show all products

1 product

1 product

1 product

1 product

3 products

Enterprise Linux Atomic Host

Openshift Container Platform

Suse

1 product

Suse Linux Enterprise Server

6 products

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gnu Grub2	Up to 2.04

Configuration B

14 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 16.04
Canonical Ubuntu Linux	Version 18.04
Canonical Ubuntu Linux	Version 20.04
Debian Debian Linux	Version 10.0
Opensuse Leap	Version 15.1
Opensuse Leap	Version 15.2
Redhat Enterprise Linux	Version 7.0
Redhat Enterprise Linux	Version 8.0
Redhat Enterprise Linux Atomic Host	All versions
Redhat Openshift Container Platform	Version 4.0
Suse Suse Linux Enterprise Server	Version 11
Suse Suse Linux Enterprise Server	Version 12
Suse Suse Linux Enterprise Server	Version 15

Configuration C

17 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows 10	All versions
Microsoft Windows 10	Version 1607
Microsoft Windows 10	Version 1709
Microsoft Windows 10	Version 1803
Microsoft Windows 10	Version 1809
Microsoft Windows 10	Version 1903
Microsoft Windows 10	Version 1909
Microsoft Windows 10	Version 2004
Microsoft Windows 8.1	All versions
Microsoft Windows Rt 8.1	All versions
Microsoft Windows Server 2012	All versions
Microsoft Windows Server 2012	Version r2
Microsoft Windows Server 2016	All versions
Microsoft Windows Server 2016	Version 1903
Microsoft Windows Server 2016	Version 1909
Microsoft Windows Server 2016	Version 2004
Microsoft Windows Server 2019	All versions

Related CWEs

CWE-347

Improper Verification of Cryptographic Signature

The product does not verify, or incorrectly verifies, the cryptographic signature for data.

References (40)

http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00067.html

Source: security@ubuntu.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00069.html

Source: security@ubuntu.com

Mailing ListThird Party Advisory

http://ubuntu.com/security/notices/USN-4432-1

Source: security@ubuntu.com

Third Party Advisory

http://www.openwall.com/lists/oss-security/2020/07/29/3

Source: security@ubuntu.com

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2021/03/02/3

Source: security@ubuntu.com

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2021/09/17/2

Source: security@ubuntu.com

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2021/09/17/4

Source: security@ubuntu.com

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2021/09/21/1

Source: security@ubuntu.com

Mailing ListThird Party Advisory

https://access.redhat.com/security/vulnerabilities/grub2bootloader

Source: security@ubuntu.com

Third Party Advisory

https://lists.gnu.org/archive/html/grub-devel/2020-07/msg00034.html

Source: security@ubuntu.com

Issue TrackingVendor Advisory

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV200011

Source: security@ubuntu.com

PatchThird Party AdvisoryVendor Advisory

https://security.gentoo.org/glsa/202104-05

Source: security@ubuntu.com

Third Party Advisory

https://security.netapp.com/advisory/ntap-20200731-0008/

Source: security@ubuntu.com

Third Party Advisory

https://usn.ubuntu.com/4432-1/

Source: security@ubuntu.com

Third Party Advisory

https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/GRUB2SecureBootBypass

Source: security@ubuntu.com

Third Party Advisory

https://www.debian.org/security/2020-GRUB-UEFI-SecureBoot

Source: security@ubuntu.com

Third Party Advisory

https://www.eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/

Source: security@ubuntu.com

Third Party Advisory

https://www.openwall.com/lists/oss-security/2020/07/29/3

Source: security@ubuntu.com

Mailing ListThird Party Advisory

https://www.suse.com/c/suse-addresses-grub2-secure-boot-issue/

Source: security@ubuntu.com

Third Party Advisory

https://www.suse.com/support/kb/doc/?id=000019673

Source: security@ubuntu.com

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00067.html