{"schemaVersion":3,"id":"CVE-2020-15705","aliases":["ALPINE-CVE-2020-15705","SUSE-SU-2020:14461-1","SUSE-SU-2020:2303-1","SUSE-SU-2020:2304-1","SUSE-SU-2020:2305-1","SUSE-SU-2020:2306-1","SUSE-SU-2020:2307-1","SUSE-SU-2020:2308-1","UBUNTU-CVE-2020-15705","openSUSE-SU-2020:1280-1","openSUSE-SU-2020:1282-1"],"status":"published","duplicateOf":null,"title":null,"description":"GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed. This only affects systems where the kernel signing certificate has been imported directly into the secure boot database and the GRUB image is booted directly without the use of shim. This issue affects GRUB2 version 2.04 and prior versions.","dates":{"published":"2020-07-29T17:45:33.422Z","modified":"2024-09-17T00:06:01.169Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.4,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":6.4,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Alpine","score":6.4,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","exploitability":1.3,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":6.4,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","exploitability":1.3,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":6.4,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":4.4,"severity":"medium","vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.01392,"percentile":0.71933,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.01392},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01392,"percentile":0.71933}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01392,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01392,"percentile":0.71933}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-347","name":"Improper Verification of Cryptographic Signature","description":"The product does not verify, or incorrectly verifies, the cryptographic signature for data.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/347.html"}],"affected":[{"vendor":"alpine","product":"grub","name":"grub","label":"grub","ecosystem":"Alpine Linux","cpePart":null,"purl":"pkg:apk/alpine/grub","purlType":"apk","versions":[{"text":"< 2.06-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.06-r0","eol":null,"hubHref":null},{"vendor":"canonical","product":"ubuntu_linux","name":"ubuntu linux","label":"ubuntu_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"14.04","noFixRecorded":false,"fixedIn":null},{"text":"16.04","noFixRecorded":false,"fixedIn":null},{"text":"18.04","noFixRecorded":false,"fixedIn":null},{"text":"20.04","noFixRecorded":false,"fixedIn":null}],"versionsText":"14.04 | 16.04 | 18.04 | 20.04","eol":{"isEol":true,"eolDate":"2019-04-02T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"14.04","label":"14.04 'Trusty Tahr' (LTS)","eolFrom":"2019-04-02T00:00:00.000Z","isLts":true,"isMaintained":false,"latestVersion":"14.04.6"},"product":{"name":"ubuntu","label":"Ubuntu","category":"os"}},"hubHref":"/vendor/canonical/ubuntu_linux"},{"vendor":"ubuntu","product":"grub2","name":"grub2","label":"grub2","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/grub2","purlType":"deb","versions":[{"text":"< 2.02~beta2-9ubuntu1.20","noFixRecorded":false,"fixedIn":null},{"text":"< 2.02~beta2-36ubuntu3.26","noFixRecorded":false,"fixedIn":null},{"text":"< 2.02-2ubuntu8.16","noFixRecorded":false,"fixedIn":null},{"text":"< 2.04-1ubuntu26.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.02~beta2-9ubuntu1.20 | < 2.02~beta2-36ubuntu3.26 | < 2.02-2ubuntu8.16 | < 2.04-1ubuntu26.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"grub2-signed","name":"grub2-signed","label":"grub2-signed","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/grub2-signed","purlType":"deb","versions":[{"text":"< 1.34.22","noFixRecorded":false,"fixedIn":null},{"text":"< 1.66.26","noFixRecorded":false,"fixedIn":null},{"text":"< 1.93.18","noFixRecorded":false,"fixedIn":null},{"text":"< 1.142.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.34.22 | < 1.66.26 | < 1.93.18 | < 1.142.3","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"grub2-unsigned","name":"grub2-unsigned","label":"grub2-unsigned","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/grub2-unsigned","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"debian","product":"debian_linux","name":"debian linux","label":"debian_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"10.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"10.0","eol":{"isEol":true,"eolDate":"2024-06-30T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"10","label":"10 (Buster)","eolFrom":"2024-06-30T00:00:00.000Z","isLts":false,"isMaintained":true,"latestVersion":"10.13"},"product":{"name":"debian","label":"Debian","category":"os"}},"hubHref":"/vendor/debian/debian_linux"},{"vendor":"gnu","product":"grub2","name":"grub2","label":"grub2","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.04","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 2.04","eol":null,"hubHref":"/vendor/gnu/grub2"},{"vendor":"microsoft","product":"windows_10","name":"windows 10","label":"windows_10","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null},{"text":"1607","noFixRecorded":false,"fixedIn":null},{"text":"1709","noFixRecorded":false,"fixedIn":null},{"text":"1803","noFixRecorded":false,"fixedIn":null},{"text":"1809","noFixRecorded":false,"fixedIn":null},{"text":"1903","noFixRecorded":false,"fixedIn":null},{"text":"1909","noFixRecorded":false,"fixedIn":null},{"text":"2004","noFixRecorded":false,"fixedIn":null}],"versionsText":"na | 1607 | 1709 | 1803 | 1809 | 1903 | 1909 | 2004","eol":null,"hubHref":"/vendor/microsoft/windows_10"},{"vendor":"microsoft","product":"windows_8.1","name":"windows 8.1","label":"windows_8.1","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/windows_81"},{"vendor":"microsoft","product":"windows_rt_8.1","name":"windows rt 8.1","label":"windows_rt_8.1","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/windows_rt_81"},{"vendor":"microsoft","product":"windows_server_2012","name":"windows server 2012","label":"windows_server_2012","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null},{"text":"r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"na | r2","eol":null,"hubHref":"/vendor/microsoft/windows_server_2012"},{"vendor":"microsoft","product":"windows_server_2016","name":"windows server 2016","label":"windows_server_2016","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null},{"text":"1903","noFixRecorded":false,"fixedIn":null},{"text":"1909","noFixRecorded":false,"fixedIn":null},{"text":"2004","noFixRecorded":false,"fixedIn":null}],"versionsText":"na | 1903 | 1909 | 2004","eol":null,"hubHref":"/vendor/microsoft/windows_server_2016"},{"vendor":"microsoft","product":"windows_server_2019","name":"windows server 2019","label":"windows_server_2019","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/windows_server_2019"},{"vendor":"opensuse","product":"leap","name":"leap","label":"leap","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"15.1","noFixRecorded":false,"fixedIn":null},{"text":"15.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"15.1 | 15.2","eol":{"isEol":true,"eolDate":"2021-02-02T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"15.1","label":"Leap 15.1","eolFrom":"2021-02-02T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"opensuse","label":"openSUSE","category":"os"}},"hubHref":"/vendor/opensuse/leap"},{"vendor":"redhat","product":"enterprise_linux","name":"enterprise linux","label":"enterprise_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.0","noFixRecorded":false,"fixedIn":null},{"text":"8.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.0 | 8.0","eol":{"isEol":true,"eolDate":"2024-06-30T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"7","label":"7 (ELS)","eolFrom":"2024-06-30T00:00:00.000Z","isLts":true,"isMaintained":true,"latestVersion":"7.9"},"product":{"name":"rhel","label":"Red Hat Enterprise Linux","category":"os"}},"hubHref":"/vendor/redhat/enterprise_linux"},{"vendor":"redhat","product":"enterprise_linux_atomic_host","name":"enterprise linux atomic host","label":"enterprise_linux_atomic_host","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_atomic_host"},{"vendor":"redhat","product":"openshift_container_platform","name":"openshift container platform","label":"openshift_container_platform","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"4.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"4.0","eol":null,"hubHref":"/vendor/redhat/openshift_container_platform"},{"vendor":"opensuse","product":"grub2&distro=openSUSE Leap 15.1","name":"grub2","label":"grub2&distro=openSUSE Leap 15.1","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/grub2&distro=openSUSE Leap 15.1","purlType":"rpm","versions":[{"text":"< 2.02-lp151.21.27.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.02-lp151.21.27.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"grub2&distro=openSUSE Leap 15.2","name":"grub2","label":"grub2&distro=openSUSE Leap 15.2","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/grub2&distro=openSUSE Leap 15.2","purlType":"rpm","versions":[{"text":"< 2.04-lp152.7.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.04-lp152.7.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"grub2&distro=HPE Helion OpenStack 8","name":"grub2","label":"grub2&distro=HPE Helion OpenStack 8","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/grub2&distro=HPE Helion OpenStack 8","purlType":"rpm","versions":[{"text":"< 2.02-4.61.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.02-4.61.1","eol":null,"hubHref":null},{"vendor":"suse","product":"grub2&distro=SUSE Enterprise Storage 5","name":"grub2","label":"grub2&distro=SUSE Enterprise Storage 5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/grub2&distro=SUSE Enterprise Storage 5","purlType":"rpm","versions":[{"text":"< 2.02-4.61.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.02-4.61.1","eol":null,"hubHref":null},{"vendor":"suse","product":"grub2&distro=SUSE Linux Enterprise High Performance Computing 15-ESPOS","name":"grub2","label":"grub2&distro=SUSE Linux Enterprise High Performance Computing 15-ESPOS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/grub2&distro=SUSE Linux Enterprise High Performance Computing 15-ESPOS","purlType":"rpm","versions":[{"text":"< 2.02-19.56.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.02-19.56.1","eol":null,"hubHref":null},{"vendor":"suse","product":"grub2&distro=SUSE Linux Enterprise High Performance Computing 15-LTSS","name":"grub2","label":"grub2&distro=SUSE Linux Enterprise High Performance Computing 15-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/grub2&distro=SUSE Linux Enterprise High Performance Computing 15-LTSS","purlType":"rpm","versions":[{"text":"< 2.02-19.56.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.02-19.56.1","eol":null,"hubHref":null},{"vendor":"suse","product":"grub2&distro=SUSE Linux Enterprise Module for Basesystem 15 SP1","name":"grub2","label":"grub2&distro=SUSE Linux Enterprise Module for Basesystem 15 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/grub2&distro=SUSE Linux Enterprise Module for Basesystem 15 SP1","purlType":"rpm","versions":[{"text":"< 2.02-26.33.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.02-26.33.1","eol":null,"hubHref":null},{"vendor":"suse","product":"grub2&distro=SUSE Linux Enterprise Module for Basesystem 15 SP2","name":"grub2","label":"grub2&distro=SUSE Linux Enterprise Module for Basesystem 15 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/grub2&distro=SUSE Linux Enterprise Module for Basesystem 15 SP2","purlType":"rpm","versions":[{"text":"< 2.04-9.15.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.04-9.15.1","eol":null,"hubHref":null},{"vendor":"suse","product":"grub2&distro=SUSE Linux Enterprise Module for Server Applications 15 SP1","name":"grub2","label":"grub2&distro=SUSE Linux Enterprise Module for Server Applications 15 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/grub2&distro=SUSE Linux Enterprise Module for Server Applications 15 SP1","purlType":"rpm","versions":[{"text":"< 2.02-26.33.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.02-26.33.1","eol":null,"hubHref":null},{"vendor":"suse","product":"grub2&distro=SUSE Linux Enterprise Module for Server Applications 15 SP2","name":"grub2","label":"grub2&distro=SUSE Linux Enterprise Module for Server Applications 15 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/grub2&distro=SUSE Linux Enterprise Module for Server Applications 15 SP2","purlType":"rpm","versions":[{"text":"< 2.04-9.15.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.04-9.15.1","eol":null,"hubHref":null},{"vendor":"suse","product":"grub2&distro=SUSE Linux Enterprise Server 11 SP4-LTSS","name":"grub2","label":"grub2&distro=SUSE Linux Enterprise Server 11 SP4-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/grub2&distro=SUSE Linux Enterprise Server 11 SP4-LTSS","purlType":"rpm","versions":[{"text":"< 2.00-0.66.21.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.00-0.66.21.1","eol":null,"hubHref":null},{"vendor":"suse","product":"grub2&distro=SUSE Linux Enterprise Server 12 SP2-BCL","name":"grub2","label":"grub2&distro=SUSE Linux Enterprise Server 12 SP2-BCL","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/grub2&distro=SUSE Linux Enterprise Server 12 SP2-BCL","purlType":"rpm","versions":[{"text":"< 2.02~beta2-115.56.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.02~beta2-115.56.1","eol":null,"hubHref":null},{"vendor":"suse","product":"grub2&distro=SUSE Linux Enterprise Server 12 SP2-LTSS","name":"grub2","label":"grub2&distro=SUSE Linux Enterprise Server 12 SP2-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/grub2&distro=SUSE Linux Enterprise Server 12 SP2-LTSS","purlType":"rpm","versions":[{"text":"< 2.02~beta2-115.56.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.02~beta2-115.56.1","eol":null,"hubHref":null},{"vendor":"suse","product":"grub2&distro=SUSE Linux Enterprise Server 12 SP3-BCL","name":"grub2","label":"grub2&distro=SUSE Linux Enterprise Server 12 SP3-BCL","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/grub2&distro=SUSE Linux Enterprise Server 12 SP3-BCL","purlType":"rpm","versions":[{"text":"< 2.02-4.61.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.02-4.61.1","eol":null,"hubHref":null},{"vendor":"suse","product":"grub2&distro=SUSE Linux Enterprise Server 12 SP3-LTSS","name":"grub2","label":"grub2&distro=SUSE Linux Enterprise Server 12 SP3-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/grub2&distro=SUSE Linux Enterprise Server 12 SP3-LTSS","purlType":"rpm","versions":[{"text":"< 2.02-4.61.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.02-4.61.1","eol":null,"hubHref":null},{"vendor":"suse","product":"grub2&distro=SUSE Linux Enterprise Server 12 SP4-LTSS","name":"grub2","label":"grub2&distro=SUSE Linux Enterprise Server 12 SP4-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/grub2&distro=SUSE Linux Enterprise Server 12 SP4-LTSS","purlType":"rpm","versions":[{"text":"< 2.02-12.39.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.02-12.39.1","eol":null,"hubHref":null},{"vendor":"suse","product":"grub2&distro=SUSE Linux Enterprise Server 12 SP5","name":"grub2","label":"grub2&distro=SUSE Linux Enterprise Server 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/grub2&distro=SUSE Linux Enterprise Server 12 SP5","purlType":"rpm","versions":[{"text":"< 2.02-12.39.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.02-12.39.1","eol":null,"hubHref":null},{"vendor":"suse","product":"grub2&distro=SUSE Linux Enterprise Server 15-LTSS","name":"grub2","label":"grub2&distro=SUSE Linux Enterprise Server 15-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/grub2&distro=SUSE Linux Enterprise Server 15-LTSS","purlType":"rpm","versions":[{"text":"< 2.02-19.56.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.02-19.56.1","eol":null,"hubHref":null},{"vendor":"suse","product":"grub2&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","name":"grub2","label":"grub2&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/grub2&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","purlType":"rpm","versions":[{"text":"< 2.02~beta2-115.56.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.02~beta2-115.56.1","eol":null,"hubHref":null},{"vendor":"suse","product":"grub2&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3","name":"grub2","label":"grub2&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/grub2&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3","purlType":"rpm","versions":[{"text":"< 2.02-4.61.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.02-4.61.1","eol":null,"hubHref":null},{"vendor":"suse","product":"grub2&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4","name":"grub2","label":"grub2&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/grub2&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4","purlType":"rpm","versions":[{"text":"< 2.02-12.39.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.02-12.39.1","eol":null,"hubHref":null},{"vendor":"suse","product":"grub2&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","name":"grub2","label":"grub2&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/grub2&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","purlType":"rpm","versions":[{"text":"< 2.02-12.39.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.02-12.39.1","eol":null,"hubHref":null},{"vendor":"suse","product":"grub2&distro=SUSE Linux Enterprise Server for SAP Applications 15","name":"grub2","label":"grub2&distro=SUSE Linux Enterprise Server for SAP Applications 15","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/grub2&distro=SUSE Linux Enterprise Server for SAP Applications 15","purlType":"rpm","versions":[{"text":"< 2.02-19.56.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.02-19.56.1","eol":null,"hubHref":null},{"vendor":"suse","product":"grub2&distro=SUSE OpenStack Cloud 7","name":"grub2","label":"grub2&distro=SUSE OpenStack Cloud 7","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/grub2&distro=SUSE OpenStack Cloud 7","purlType":"rpm","versions":[{"text":"< 2.02~beta2-115.56.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.02~beta2-115.56.1","eol":null,"hubHref":null},{"vendor":"suse","product":"grub2&distro=SUSE OpenStack Cloud 8","name":"grub2","label":"grub2&distro=SUSE OpenStack Cloud 8","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/grub2&distro=SUSE OpenStack Cloud 8","purlType":"rpm","versions":[{"text":"< 2.02-4.61.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.02-4.61.1","eol":null,"hubHref":null},{"vendor":"suse","product":"grub2&distro=SUSE OpenStack Cloud 9","name":"grub2","label":"grub2&distro=SUSE OpenStack Cloud 9","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/grub2&distro=SUSE OpenStack Cloud 9","purlType":"rpm","versions":[{"text":"< 2.02-12.39.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.02-12.39.1","eol":null,"hubHref":null},{"vendor":"suse","product":"grub2&distro=SUSE OpenStack Cloud Crowbar 8","name":"grub2","label":"grub2&distro=SUSE OpenStack Cloud Crowbar 8","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/grub2&distro=SUSE OpenStack Cloud Crowbar 8","purlType":"rpm","versions":[{"text":"< 2.02-4.61.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.02-4.61.1","eol":null,"hubHref":null},{"vendor":"suse","product":"grub2&distro=SUSE OpenStack Cloud Crowbar 9","name":"grub2","label":"grub2&distro=SUSE OpenStack Cloud Crowbar 9","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/grub2&distro=SUSE OpenStack Cloud Crowbar 9","purlType":"rpm","versions":[{"text":"< 2.02-12.39.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.02-12.39.1","eol":null,"hubHref":null},{"vendor":"suse","product":"suse_linux_enterprise_server","name":"suse linux enterprise server","label":"suse_linux_enterprise_server","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"11","noFixRecorded":false,"fixedIn":null},{"text":"12","noFixRecorded":false,"fixedIn":null},{"text":"15","noFixRecorded":false,"fixedIn":null}],"versionsText":"11 | 12 | 15","eol":{"isEol":null,"eolDate":null,"matchMethod":"name_exact","cycle":null,"product":{"name":"sles","label":"SUSE Linux Enterprise Server","category":"os"}},"hubHref":"/vendor/suse/suse_linux_enterprise_server"},{"vendor":"ubuntu","product":"grub2 in ubuntu","name":"grub2 in Ubuntu","label":"grub2 in ubuntu","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 20.04 LTS, < 2.04-1ubuntu26.1","noFixRecorded":false,"fixedIn":null},{"text":"≥ 18.04 LTS, < 2.02-2ubuntu8.16","noFixRecorded":false,"fixedIn":null},{"text":"≥ 16.04 LTS, < 2.02~beta2-36ubuntu3.26","noFixRecorded":false,"fixedIn":null},{"text":"≥ 14.04 ESM, < 2.02~beta2-9ubuntu1.20","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 20.04 LTS, < 2.04-1ubuntu26.1 | ≥ 18.04 LTS, < 2.02-2ubuntu8.16 | ≥ 16.04 LTS, < 2.02~beta2-36ubuntu3.26 | ≥ 14.04 ESM, < 2.02~beta2-9ubuntu1.20","eol":null,"hubHref":"/vendor/ubuntu/grub2_in_ubuntu"}],"affectedCount":47,"eol":{"hasEol":true,"count":4},"references":[{"url":"https://www.eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/","label":"www.eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/","hostname":"www.eclypsium.com","tags":["X Refsource CONFIRM","REPORT","Third Party Advisory"]},{"url":"https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/GRUB2SecureBootBypass","label":"wiki.ubuntu.com/SecurityTeam/KnowledgeBase/GRUB2SecureBootBypass","hostname":"wiki.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","REPORT","Third Party Advisory"]},{"url":"http://ubuntu.com/security/notices/USN-4432-1","label":"ubuntu.com/security/notices/USN-4432-1","hostname":"ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"https://www.debian.org/security/2020-GRUB-UEFI-SecureBoot","label":"www.debian.org/security/2020-GRUB-UEFI-SecureBoot","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN","Third Party Advisory"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV200011","label":"portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV200011","hostname":"portal.msrc.microsoft.com","tags":["X Refsource CONFIRM","Patch","Third Party Advisory","Vendor Advisory"]},{"url":"https://access.redhat.com/security/vulnerabilities/grub2bootloader","label":"access.redhat.com/security/vulnerabilities/grub2bootloader","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"https://www.suse.com/c/suse-addresses-grub2-secure-boot-issue/","label":"www.suse.com/c/suse-addresses-grub2-secure-boot-issue/","hostname":"www.suse.com","tags":["Vendor Advisory","X Refsource SUSE","Third Party Advisory"]},{"url":"https://www.suse.com/support/kb/doc/?id=000019673","label":"www.suse.com/support/kb/doc/?id=000019673","hostname":"www.suse.com","tags":["Vendor Advisory","X Refsource SUSE","Third Party Advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2020/07/29/3","label":"www.openwall.com/lists/oss-security/2020/07/29/3","hostname":"www.openwall.com","tags":["X Refsource CONFIRM","REPORT","Mailing List","Third Party Advisory"]},{"url":"https://lists.gnu.org/archive/html/grub-devel/2020-07/msg00034.html","label":"lists.gnu.org/archive/html/grub-devel/2020-07/msg00034.html","hostname":"lists.gnu.org","tags":["X Refsource CONFIRM","REPORT","Issue Tracking","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2020/07/29/3","label":"www.openwall.com/lists/oss-security/2020/07/29/3","hostname":"www.openwall.com","tags":["Mailing List","X Refsource MLIST","Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20200731-0008/","label":"security.netapp.com/advisory/ntap-20200731-0008/","hostname":"security.netapp.com","tags":["X Refsource CONFIRM","Third Party Advisory"]},{"url":"https://usn.ubuntu.com/4432-1/","label":"usn.ubuntu.com/4432-1/","hostname":"usn.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00067.html","label":"lists.opensuse.org/opensuse-security-announce/2020-08/msg00067.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00069.html","label":"lists.opensuse.org/opensuse-security-announce/2020-08/msg00069.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/03/02/3","label":"www.openwall.com/lists/oss-security/2021/03/02/3","hostname":"www.openwall.com","tags":["Mailing List","X Refsource MLIST","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202104-05","label":"security.gentoo.org/glsa/202104-05","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/09/17/2","label":"www.openwall.com/lists/oss-security/2021/09/17/2","hostname":"www.openwall.com","tags":["Mailing List","X Refsource MLIST","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/09/17/4","label":"www.openwall.com/lists/oss-security/2021/09/17/4","hostname":"www.openwall.com","tags":["Mailing List","X Refsource MLIST","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/09/21/1","label":"www.openwall.com/lists/oss-security/2021/09/21/1","hostname":"www.openwall.com","tags":["Mailing List","X Refsource MLIST","Third Party Advisory"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-15705","label":"security.alpinelinux.org/vuln/CVE-2020-15705","hostname":"security.alpinelinux.org","tags":["Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-202014461-1/","label":"www.suse.com/support/update/announcement/2020/suse-su-202014461-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1174421","label":"bugzilla.suse.com/1174421","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15705","label":"www.suse.com/security/cve/CVE-2020-15705","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20202303-1/","label":"www.suse.com/support/update/announcement/2020/suse-su-20202303-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1172745","label":"bugzilla.suse.com/1172745","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20202304-1/","label":"www.suse.com/support/update/announcement/2020/suse-su-20202304-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20202305-1/","label":"www.suse.com/support/update/announcement/2020/suse-su-20202305-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20202306-1/","label":"www.suse.com/support/update/announcement/2020/suse-su-20202306-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20202307-1/","label":"www.suse.com/support/update/announcement/2020/suse-su-20202307-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20202308-1/","label":"www.suse.com/support/update/announcement/2020/suse-su-20202308-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-15705","label":"ubuntu.com/security/CVE-2020-15705","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-4432-1","label":"ubuntu.com/security/notices/USN-4432-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-15705","label":"www.cve.org/CVERecord?id=CVE-2020-15705","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VHOMHHK6YNMLF2MBP6E2P2NPYVKF47G6/","label":"lists.opensuse.org/archives/…","hostname":"lists.opensuse.org","tags":["Advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UGKES3MGRD44EG6DD3EOHLZZXMVRVSC3/","label":"lists.opensuse.org/archives/…","hostname":"lists.opensuse.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-15705","label":"nvd.nist.gov/vuln/detail/CVE-2020-15705","hostname":"nvd.nist.gov","tags":["Oval","Advisory"]}],"lineage":{"upstream":[],"downstream":["MGASA-2021-0315","OPENSUSE-SU-2024:10824-1","RHSA-2020:3216","RHSA-2020:3217","RHSA-2020:3223","RHSA-2020:3227","RHSA-2020:3271","RHSA-2020:3273","RHSA-2020:3274","RHSA-2020:3275","RHSA-2020:3276","USN-4432-1"],"duplicates":[],"related":["OPENSUSE-SU-2024:10824-1","USN-4432-1"]},"timeline":[{"kind":"published","date":"2020-07-29T17:45:33.422Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-09-17T00:06:01.169Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":26,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T21:47:04.972Z","stale":false,"partial":false}}