Not rated
CVE-2021-3418 If certificates that signed grub are installed into db, grub can be booted directly
Description
If certificates that signed grub are installed into db, grub can be booted directly. It will then boot any kernel without signature validation. The booted kernel will think it was booted in secureboot mode and will implement lockdown, yet it could have been tampered. This flaw is a reintroduction of CVE-2020-15705 and only affects grub2 versions prior to 2.06 and upstream and distributions using the shim_lock mechanism.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| grub2 | Versions not published |
References
- bugzilla.redhat.com bugzilla.redhat.com
Timeline
- Published
- Last modified
Other CVEs of grub2
The 14 CVEs of grub2 →
CVE-2022-3775
When rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed glyph's width and…
7.1
High
CVE-2022-2601
A buffer overflow was found in grub_font_construct_glyph()
8.6
High
CVE-2021-3697
A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written…
Not rated
CVE-2021-3696
A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader
Not rated