USN-4432-1

See a problem?
Source
https://ubuntu.com/security/notices/USN-4432-1
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/USN-4432-1.json
JSON Data
https://api.osv.dev/v1/vulns/USN-4432-1
Related
Published
2020-07-29T18:50:12.003664Z
Modified
2020-07-29T18:50:12.003664Z
Summary
grub2, grub2-signed vulnerabilities
Details

Jesse Michael and Mickey Shkatov discovered that the configuration parser in GRUB2 did not properly exit when errors were discovered, resulting in heap-based buffer overflows. A local attacker could use this to execute arbitrary code and bypass UEFI Secure Boot restrictions. (CVE-2020-10713)

Chris Coulson discovered that the GRUB2 function handling code did not properly handle a function being redefined, leading to a use-after-free vulnerability. A local attacker could use this to execute arbitrary code and bypass UEFI Secure Boot restrictions. (CVE-2020-15706)

Chris Coulson discovered that multiple integer overflows existed in GRUB2 when handling certain filesystems or font files, leading to heap-based buffer overflows. A local attacker could use these to execute arbitrary code and bypass UEFI Secure Boot restrictions. (CVE-2020-14309, CVE-2020-14310, CVE-2020-14311)

It was discovered that the memory allocator for GRUB2 did not validate allocation size, resulting in multiple integer overflows and heap-based buffer overflows when handling certain filesystems, PNG images or disk metadata. A local attacker could use this to execute arbitrary code and bypass UEFI Secure Boot restrictions. (CVE-2020-14308)

Mathieu Trudel-Lapierre discovered that in certain situations, GRUB2 failed to validate kernel signatures. A local attacker could use this to bypass Secure Boot restrictions. (CVE-2020-15705)

Colin Watson and Chris Coulson discovered that an integer overflow existed in GRUB2 when handling the initrd command, leading to a heap-based buffer overflow. A local attacker could use this to execute arbitrary code and bypass UEFI Secure Boot restrictions. (CVE-2020-15707)

References

Affected packages

Ubuntu:Pro:18.04:LTS / grub2

Package

Name
grub2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.02-2ubuntu8.16

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "grub-linuxbios": "2.02-2ubuntu8.16",
            "grub-ieee1275-bin": "2.02-2ubuntu8.16",
            "grub-xen": "2.02-2ubuntu8.16",
            "grub-theme-starfield": "2.02-2ubuntu8.16",
            "grub-pc": "2.02-2ubuntu8.16",
            "grub-efi-arm64": "2.02-2ubuntu8.16",
            "grub-uboot-bin": "2.02-2ubuntu8.16",
            "grub-efi-ia32-bin": "2.02-2ubuntu8.16",
            "grub-ieee1275": "2.02-2ubuntu8.16",
            "grub-efi-amd64-bin": "2.02-2ubuntu8.16",
            "grub-mount-udeb": "2.02-2ubuntu8.16",
            "grub-emu": "2.02-2ubuntu8.16",
            "grub-efi-arm-bin": "2.02-2ubuntu8.16",
            "grub-pc-bin": "2.02-2ubuntu8.16",
            "grub-uboot": "2.02-2ubuntu8.16",
            "grub-coreboot": "2.02-2ubuntu8.16",
            "grub-efi-arm": "2.02-2ubuntu8.16",
            "grub-efi-amd64": "2.02-2ubuntu8.16",
            "grub-efi": "2.02-2ubuntu8.16",
            "grub-efi-arm64-bin": "2.02-2ubuntu8.16",
            "grub2": "2.02-2ubuntu8.16",
            "grub-rescue-pc": "2.02-2ubuntu8.16",
            "grub-xen-bin": "2.02-2ubuntu8.16",
            "grub-firmware-qemu": "2.02-2ubuntu8.16",
            "grub2-common": "2.02-2ubuntu8.16",
            "grub-xen-host": "2.02-2ubuntu8.16",
            "grub-coreboot-bin": "2.02-2ubuntu8.16",
            "grub-common": "2.02-2ubuntu8.16",
            "grub-efi-ia32": "2.02-2ubuntu8.16"
        }
    ]
}

Ubuntu:Pro:18.04:LTS / grub2-signed

Package

Name
grub2-signed

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.93.18

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "grub-efi-arm64-signed": "1.93.18+2.02-2ubuntu8.16",
            "grub-efi-amd64-signed": "1.93.18+2.02-2ubuntu8.16"
        }
    ]
}

Ubuntu:Pro:14.04:LTS / grub2

Package

Name
grub2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.02~beta2-9ubuntu1.20

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "grub-linuxbios": "2.02~beta2-9ubuntu1.20",
            "grub-ieee1275-bin": "2.02~beta2-9ubuntu1.20",
            "grub-xen": "2.02~beta2-9ubuntu1.20",
            "grub-theme-starfield": "2.02~beta2-9ubuntu1.20",
            "grub-pc": "2.02~beta2-9ubuntu1.20",
            "grub-efi-arm64": "2.02~beta2-9ubuntu1.20",
            "grub-uboot-bin": "2.02~beta2-9ubuntu1.20",
            "grub-efi-ia32-bin": "2.02~beta2-9ubuntu1.20",
            "grub-ieee1275": "2.02~beta2-9ubuntu1.20",
            "grub-efi-amd64-bin": "2.02~beta2-9ubuntu1.20",
            "grub-mount-udeb": "2.02~beta2-9ubuntu1.20",
            "grub-emu": "2.02~beta2-9ubuntu1.20",
            "grub-efi-arm-bin": "2.02~beta2-9ubuntu1.20",
            "grub-pc-bin": "2.02~beta2-9ubuntu1.20",
            "grub-uboot": "2.02~beta2-9ubuntu1.20",
            "grub-coreboot": "2.02~beta2-9ubuntu1.20",
            "grub-efi-arm": "2.02~beta2-9ubuntu1.20",
            "grub-efi-amd64": "2.02~beta2-9ubuntu1.20",
            "grub-efi": "2.02~beta2-9ubuntu1.20",
            "grub-efi-arm64-bin": "2.02~beta2-9ubuntu1.20",
            "grub2": "2.02~beta2-9ubuntu1.20",
            "grub-rescue-pc": "2.02~beta2-9ubuntu1.20",
            "grub-xen-bin": "2.02~beta2-9ubuntu1.20",
            "grub-firmware-qemu": "2.02~beta2-9ubuntu1.20",
            "grub2-common": "2.02~beta2-9ubuntu1.20",
            "grub-coreboot-bin": "2.02~beta2-9ubuntu1.20",
            "grub-common": "2.02~beta2-9ubuntu1.20",
            "grub-efi-ia32": "2.02~beta2-9ubuntu1.20"
        }
    ]
}

Ubuntu:Pro:14.04:LTS / grub2-signed

Package

Name
grub2-signed

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.34.22

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "grub-efi-amd64-signed": "1.34.22+2.02~beta2-9ubuntu1.20"
        }
    ]
}

Ubuntu:Pro:20.04:LTS / grub2

Package

Name
grub2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.04-1ubuntu26.1

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "grub-linuxbios": "2.04-1ubuntu26.1",
            "grub-ieee1275-bin": "2.04-1ubuntu26.1",
            "grub-xen": "2.04-1ubuntu26.1",
            "grub-efi-arm64-signed-template": "2.04-1ubuntu26.1",
            "grub-theme-starfield": "2.04-1ubuntu26.1",
            "grub-pc": "2.04-1ubuntu26.1",
            "grub-efi-arm64": "2.04-1ubuntu26.1",
            "grub-uboot-bin": "2.04-1ubuntu26.1",
            "grub-efi-ia32-bin": "2.04-1ubuntu26.1",
            "grub-ieee1275": "2.04-1ubuntu26.1",
            "grub-efi-amd64-bin": "2.04-1ubuntu26.1",
            "grub-mount-udeb": "2.04-1ubuntu26.1",
            "grub-emu": "2.04-1ubuntu26.1",
            "grub-efi-arm-bin": "2.04-1ubuntu26.1",
            "grub-pc-bin": "2.04-1ubuntu26.1",
            "grub-uboot": "2.04-1ubuntu26.1",
            "grub-coreboot": "2.04-1ubuntu26.1",
            "grub-efi-arm": "2.04-1ubuntu26.1",
            "grub-efi-amd64-signed-template": "2.04-1ubuntu26.1",
            "grub-efi-amd64": "2.04-1ubuntu26.1",
            "grub-efi": "2.04-1ubuntu26.1",
            "grub-efi-arm64-bin": "2.04-1ubuntu26.1",
            "grub2": "2.04-1ubuntu26.1",
            "grub-rescue-pc": "2.04-1ubuntu26.1",
            "grub-xen-bin": "2.04-1ubuntu26.1",
            "grub-firmware-qemu": "2.04-1ubuntu26.1",
            "grub2-common": "2.04-1ubuntu26.1",
            "grub-xen-host": "2.04-1ubuntu26.1",
            "grub-coreboot-bin": "2.04-1ubuntu26.1",
            "grub-common": "2.04-1ubuntu26.1",
            "grub-efi-ia32": "2.04-1ubuntu26.1"
        }
    ]
}

Ubuntu:Pro:20.04:LTS / grub2-signed

Package

Name
grub2-signed

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.142.3

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "grub-efi-arm64-signed": "1.142.3+2.04-1ubuntu26.1",
            "grub-efi-amd64-signed": "1.142.3+2.04-1ubuntu26.1"
        }
    ]
}

Ubuntu:Pro:16.04:LTS / grub2

Package

Name
grub2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.02~beta2-36ubuntu3.26

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "grub-linuxbios": "2.02~beta2-36ubuntu3.26",
            "grub-ieee1275-bin": "2.02~beta2-36ubuntu3.26",
            "grub-xen": "2.02~beta2-36ubuntu3.26",
            "grub-theme-starfield": "2.02~beta2-36ubuntu3.26",
            "grub-pc": "2.02~beta2-36ubuntu3.26",
            "grub-efi-arm64": "2.02~beta2-36ubuntu3.26",
            "grub-uboot-bin": "2.02~beta2-36ubuntu3.26",
            "grub-efi-ia32-bin": "2.02~beta2-36ubuntu3.26",
            "grub-ieee1275": "2.02~beta2-36ubuntu3.26",
            "grub-efi-amd64-bin": "2.02~beta2-36ubuntu3.26",
            "grub-mount-udeb": "2.02~beta2-36ubuntu3.26",
            "grub-emu": "2.02~beta2-36ubuntu3.26",
            "grub-efi-arm-bin": "2.02~beta2-36ubuntu3.26",
            "grub-pc-bin": "2.02~beta2-36ubuntu3.26",
            "grub-uboot": "2.02~beta2-36ubuntu3.26",
            "grub-coreboot": "2.02~beta2-36ubuntu3.26",
            "grub-efi-arm": "2.02~beta2-36ubuntu3.26",
            "grub-efi-amd64": "2.02~beta2-36ubuntu3.26",
            "grub-efi": "2.02~beta2-36ubuntu3.26",
            "grub-efi-arm64-bin": "2.02~beta2-36ubuntu3.26",
            "grub2": "2.02~beta2-36ubuntu3.26",
            "grub-rescue-pc": "2.02~beta2-36ubuntu3.26",
            "grub-xen-bin": "2.02~beta2-36ubuntu3.26",
            "grub-firmware-qemu": "2.02~beta2-36ubuntu3.26",
            "grub2-common": "2.02~beta2-36ubuntu3.26",
            "grub-xen-host": "2.02~beta2-36ubuntu3.26",
            "grub-coreboot-bin": "2.02~beta2-36ubuntu3.26",
            "grub-common": "2.02~beta2-36ubuntu3.26",
            "grub-efi-ia32": "2.02~beta2-36ubuntu3.26"
        }
    ]
}

Ubuntu:Pro:16.04:LTS / grub2-signed

Package

Name
grub2-signed

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.66.26

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "grub-efi-arm64-signed": "1.66.26+2.02~beta2-36ubuntu3.26",
            "grub-efi-amd64-signed": "1.66.26+2.02~beta2-36ubuntu3.26"
        }
    ]
}