
CVE catalog
CVE-2020-15707
grub2: CVE-2020-15707
- Severity
- Medium · CVSS 6.4
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 1.59% · Oct 25, 2026
Integer overflows were discovered in the functions grub_cmd_initrd and grub_initrd_init in the efilinux component of GRUB2, as shipped in Debian, Red Hat, and Ubuntu (the functionality is not included in GRUB2 upstream), leading to a heap-based buffer overflow. These could be triggered by an extremely large number of arguments to the initrd command on 32-bit architectures, or a crafted filesystem with very large files on any architecture. An attacker could use this to execute arbitrary code and bypass UEFI Secure Boot restrictions. This issue affects GRUB2 version 2.04 and prior versions.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | grub2 | sid | 2.14-4 | fixed |
| Debian | grub2 | forky | 2.14-4 | fixed |
| Debian | grub2 | trixie | 2.12-9+deb13u2 | fixed |
| Debian | grub2 | bookworm | 2.06-13+deb12u2 | fixed |
| Debian | grub2 | bookworm-security | 2.06-13+deb12u1 | fixed |
| Alpine | grub | 3.17 | 2.06-r0 | fixed |
| Alpine | grub | 3.18 | 2.06-r0 | fixed |
| Alpine | grub | 3.19 | 2.06-r0 | fixed |
| Alpine | grub | 3.20 | 2.06-r0 | fixed |
| Alpine | grub | 3.21 | 2.06-r0 | fixed |
| Alpine | grub | 3.22 | 2.06-r0 | fixed |
| Alpine | grub | 3.23 | 2.06-r0 | fixed |
| Alpine | grub | 3.24 | 2.06-r0 | fixed |
| Ubuntu | grub2 | pro | 2.00-19ubuntu2 | vulnerable |
| Ubuntu | grub2 | pro | 2.00-19ubuntu3 | vulnerable |
| Ubuntu | grub2 | pro | 2.00-19ubuntu4 | vulnerable |
| Ubuntu | grub2 | pro | 2.00-20 | vulnerable |
| Ubuntu | grub2 | pro | 2.00-21 | vulnerable |
| Ubuntu | grub2 | pro | 2.00-22 | vulnerable |
| Ubuntu | grub2 | pro | 2.02~beta2-5 | vulnerable |
| Ubuntu | grub2 | pro | 2.02~beta2-6 | vulnerable |
| Ubuntu | grub2 | pro | 2.02~beta2-7 | vulnerable |
| Ubuntu | grub2 | pro | 2.02~beta2-8 | vulnerable |
| Ubuntu | grub2 | pro | 2.02~beta2-9 | vulnerable |
| Ubuntu | grub2 | pro | 2.02~beta2-9ubuntu1 | vulnerable |
| Ubuntu | grub2 | pro | 2.02~beta2-9ubuntu1.1 | vulnerable |
| Ubuntu | grub2 | pro | 2.02~beta2-9ubuntu1.2 | vulnerable |
| Ubuntu | grub2 | pro | 2.02~beta2-9ubuntu1.3 | vulnerable |
| Ubuntu | grub2 | pro | 2.02~beta2-9ubuntu1.4 | vulnerable |
| Ubuntu | grub2 | pro | 2.02~beta2-9ubuntu1.5 | vulnerable |
| Ubuntu | grub2 | pro | 2.02~beta2-9ubuntu1.6 | vulnerable |
| Ubuntu | grub2 | pro | 2.02~beta2-9ubuntu1.7 | vulnerable |
| Ubuntu | grub2 | pro | 2.02~beta2-9ubuntu1.8 | vulnerable |
| Ubuntu | grub2 | pro | 2.02~beta2-9ubuntu1.11 | vulnerable |
| Ubuntu | grub2 | pro | 2.02~beta2-9ubuntu1.12 | vulnerable |
| Ubuntu | grub2 | pro | 2.02~beta2-9ubuntu1.14 | vulnerable |
| Ubuntu | grub2 | pro | 2.02~beta2-9ubuntu1.15 | vulnerable |
| Ubuntu | grub2 | pro | 2.02~beta2-9ubuntu1.16 | vulnerable |
| Ubuntu | grub2 | pro | 2.02~beta2-9ubuntu1.17 | vulnerable |
| Ubuntu | grub2 | pro | 2.02~beta2-9ubuntu1.20 | fixed |
| Ubuntu | grub2-signed | pro | 1.22 | vulnerable |
| Ubuntu | grub2-signed | pro | 1.23 | vulnerable |
| Ubuntu | grub2-signed | pro | 1.24 | vulnerable |
| Ubuntu | grub2-signed | pro | 1.25 | vulnerable |
| Ubuntu | grub2-signed | pro | 1.26 | vulnerable |
| Ubuntu | grub2-signed | pro | 1.27 | vulnerable |
| Ubuntu | grub2-signed | pro | 1.30 | vulnerable |
| Ubuntu | grub2-signed | pro | 1.31 | vulnerable |
| Ubuntu | grub2-signed | pro | 1.32 | vulnerable |
| Ubuntu | grub2-signed | pro | 1.33 | vulnerable |
| Ubuntu | grub2-signed | pro | 1.34 | vulnerable |
| Ubuntu | grub2-signed | pro | 1.34.1 | vulnerable |
| Ubuntu | grub2-signed | pro | 1.34.2 | vulnerable |
| Ubuntu | grub2-signed | pro | 1.34.3 | vulnerable |
| Ubuntu | grub2-signed | pro | 1.34.4 | vulnerable |
| Ubuntu | grub2-signed | pro | 1.34.5 | vulnerable |
| Ubuntu | grub2-signed | pro | 1.34.6 | vulnerable |
| Ubuntu | grub2-signed | pro | 1.34.7 | vulnerable |
| Ubuntu | grub2-signed | pro | 1.34.8 | vulnerable |
| Ubuntu | grub2-signed | pro | 1.34.9 | vulnerable |
| Ubuntu | grub2-signed | pro | 1.34.13 | vulnerable |
| Ubuntu | grub2-signed | pro | 1.34.14 | vulnerable |
| Ubuntu | grub2-signed | pro | 1.34.16 | vulnerable |
| Ubuntu | grub2-signed | pro | 1.34.17 | vulnerable |
| Ubuntu | grub2-signed | pro | 1.34.18 | vulnerable |
| Ubuntu | grub2-signed | pro | 1.34.20 | vulnerable |
| Ubuntu | grub2-signed | pro | 1.34.22 | fixed |
| Ubuntu | grub2 | 16.04 | 2.02~beta2-29 | vulnerable |
| Ubuntu | grub2 | 16.04 | 2.02~beta2-31 | vulnerable |
| Ubuntu | grub2 | 16.04 | 2.02~beta2-31ubuntu1 | vulnerable |
| Ubuntu | grub2 | 16.04 | 2.02~beta2-32 | vulnerable |
| Ubuntu | grub2 | 16.04 | 2.02~beta2-32ubuntu1 | vulnerable |
| Ubuntu | grub2 | 16.04 | 2.02~beta2-35 | vulnerable |
| Ubuntu | grub2 | 16.04 | 2.02~beta2-35ubuntu1 | vulnerable |
| Ubuntu | grub2 | 16.04 | 2.02~beta2-36 | vulnerable |
| Ubuntu | grub2 | 16.04 | 2.02~beta2-36ubuntu1 | vulnerable |
| Ubuntu | grub2 | 16.04 | 2.02~beta2-36ubuntu2 | vulnerable |
| Ubuntu | grub2 | 16.04 | 2.02~beta2-36ubuntu3 | vulnerable |
| Ubuntu | grub2 | 16.04 | 2.02~beta2-36ubuntu3.1 | vulnerable |
| Ubuntu | grub2 | 16.04 | 2.02~beta2-36ubuntu3.2 | vulnerable |
| Ubuntu | grub2 | 16.04 | 2.02~beta2-36ubuntu3.6 | vulnerable |
| Ubuntu | grub2 | 16.04 | 2.02~beta2-36ubuntu3.7 | vulnerable |
| Ubuntu | grub2 | 16.04 | 2.02~beta2-36ubuntu3.8 | vulnerable |
| Ubuntu | grub2 | 16.04 | 2.02~beta2-36ubuntu3.9 | vulnerable |
| Ubuntu | grub2 | 16.04 | 2.02~beta2-36ubuntu3.11 | vulnerable |
| Ubuntu | grub2 | 16.04 | 2.02~beta2-36ubuntu3.12 | vulnerable |
| Ubuntu | grub2 | 16.04 | 2.02~beta2-36ubuntu3.14 | vulnerable |
| Ubuntu | grub2 | 16.04 | 2.02~beta2-36ubuntu3.15 | vulnerable |
| Ubuntu | grub2 | 16.04 | 2.02~beta2-36ubuntu3.16 | vulnerable |
| Ubuntu | grub2 | 16.04 | 2.02~beta2-36ubuntu3.17 | vulnerable |
| Ubuntu | grub2 | 16.04 | 2.02~beta2-36ubuntu3.18 | vulnerable |
| Ubuntu | grub2 | 16.04 | 2.02~beta2-36ubuntu3.19 | vulnerable |
| Ubuntu | grub2 | 16.04 | 2.02~beta2-36ubuntu3.20 | vulnerable |
| Ubuntu | grub2 | 16.04 | 2.02~beta2-36ubuntu3.21 | vulnerable |
| Ubuntu | grub2 | 16.04 | 2.02~beta2-36ubuntu3.22 | vulnerable |
| Ubuntu | grub2 | 16.04 | 2.02~beta2-36ubuntu3.23 | vulnerable |
| Ubuntu | grub2 | 16.04 | 2.02~beta2-36ubuntu3.26 | fixed |
| Ubuntu | grub2-signed | 16.04 | 1.55 | vulnerable |
| Ubuntu | grub2-signed | 16.04 | 1.56 | vulnerable |
| Ubuntu | grub2-signed | 16.04 | 1.57 | vulnerable |
| Ubuntu | grub2-signed | 16.04 | 1.58 | vulnerable |
| Ubuntu | grub2-signed | 16.04 | 1.59 | vulnerable |
| Ubuntu | grub2-signed | 16.04 | 1.61 | vulnerable |
| Ubuntu | grub2-signed | 16.04 | 1.62 | vulnerable |
| Ubuntu | grub2-signed | 16.04 | 1.63 | vulnerable |
| Ubuntu | grub2-signed | 16.04 | 1.64 | vulnerable |
| Ubuntu | grub2-signed | 16.04 | 1.65 | vulnerable |
| Ubuntu | grub2-signed | 16.04 | 1.66 | vulnerable |
| Ubuntu | grub2-signed | 16.04 | 1.66.1 | vulnerable |
| Ubuntu | grub2-signed | 16.04 | 1.66.2 | vulnerable |
| Ubuntu | grub2-signed | 16.04 | 1.66.6 | vulnerable |
| Ubuntu | grub2-signed | 16.04 | 1.66.7 | vulnerable |
| Ubuntu | grub2-signed | 16.04 | 1.66.8 | vulnerable |
| Ubuntu | grub2-signed | 16.04 | 1.66.9 | vulnerable |
| Ubuntu | grub2-signed | 16.04 | 1.66.11 | vulnerable |
| Ubuntu | grub2-signed | 16.04 | 1.66.12 | vulnerable |
| Ubuntu | grub2-signed | 16.04 | 1.66.14 | vulnerable |
| Ubuntu | grub2-signed | 16.04 | 1.66.15 | vulnerable |
| Ubuntu | grub2-signed | 16.04 | 1.66.16 | vulnerable |
| Ubuntu | grub2-signed | 16.04 | 1.66.17 | vulnerable |
| Ubuntu | grub2-signed | 16.04 | 1.66.18 | vulnerable |
| Ubuntu | grub2-signed | 16.04 | 1.66.19 | vulnerable |
| Ubuntu | grub2-signed | 16.04 | 1.66.20 | vulnerable |
| Ubuntu | grub2-signed | 16.04 | 1.66.21 | vulnerable |
| Ubuntu | grub2-signed | 16.04 | 1.66.22 | vulnerable |
| Ubuntu | grub2-signed | 16.04 | 1.66.23 | vulnerable |
| Ubuntu | grub2-signed | 16.04 | 1.66.26 | fixed |
| Ubuntu | grub2-unsigned | 16.04 | 2.04-1ubuntu44 | vulnerable |
| Ubuntu | grub2-unsigned | 16.04 | 2.04-1ubuntu44.1 | vulnerable |
| Ubuntu | grub2-unsigned | 16.04 | 2.04-1ubuntu44.1.2 | vulnerable |
| Ubuntu | grub2 | 18.04 | 2.02~beta3-4ubuntu7 | vulnerable |
| Ubuntu | grub2 | 18.04 | 2.02-2ubuntu1 | vulnerable |
| Ubuntu | grub2 | 18.04 | 2.02-2ubuntu2 | vulnerable |
| Ubuntu | grub2 | 18.04 | 2.02-2ubuntu4 | vulnerable |
| Ubuntu | grub2 | 18.04 | 2.02-2ubuntu6 | vulnerable |
| Ubuntu | grub2 | 18.04 | 2.02-2ubuntu7 | vulnerable |
| Ubuntu | grub2 | 18.04 | 2.02-2ubuntu8 | vulnerable |
| Ubuntu | grub2 | 18.04 | 2.02-2ubuntu8.1 | vulnerable |
| Ubuntu | grub2 | 18.04 | 2.02-2ubuntu8.2 | vulnerable |
| Ubuntu | grub2 | 18.04 | 2.02-2ubuntu8.3 | vulnerable |
| Ubuntu | grub2 | 18.04 | 2.02-2ubuntu8.4 | vulnerable |
| Ubuntu | grub2 | 18.04 | 2.02-2ubuntu8.6 | vulnerable |
| Ubuntu | grub2 | 18.04 | 2.02-2ubuntu8.7 | vulnerable |
| Ubuntu | grub2 | 18.04 | 2.02-2ubuntu8.9 | vulnerable |
| Ubuntu | grub2 | 18.04 | 2.02-2ubuntu8.10 | vulnerable |
| Ubuntu | grub2 | 18.04 | 2.02-2ubuntu8.12 | vulnerable |
| Ubuntu | grub2 | 18.04 | 2.02-2ubuntu8.13 | vulnerable |
| Ubuntu | grub2 | 18.04 | 2.02-2ubuntu8.14 | vulnerable |
| Ubuntu | grub2 | 18.04 | 2.02-2ubuntu8.15 | vulnerable |
| Ubuntu | grub2 | 18.04 | 2.02-2ubuntu8.16 | fixed |
| Ubuntu | grub2-signed | 18.04 | 1.85 | vulnerable |
| Ubuntu | grub2-signed | 18.04 | 1.86 | vulnerable |
| Ubuntu | grub2-signed | 18.04 | 1.87 | vulnerable |
| Ubuntu | grub2-signed | 18.04 | 1.89 | vulnerable |
| Ubuntu | grub2-signed | 18.04 | 1.91 | vulnerable |
| Ubuntu | grub2-signed | 18.04 | 1.92 | vulnerable |
| Ubuntu | grub2-signed | 18.04 | 1.93 | vulnerable |
| Ubuntu | grub2-signed | 18.04 | 1.93.1 | vulnerable |
| Ubuntu | grub2-signed | 18.04 | 1.93.2 | vulnerable |
| Ubuntu | grub2-signed | 18.04 | 1.93.3 | vulnerable |
| Ubuntu | grub2-signed | 18.04 | 1.93.4 | vulnerable |
| Ubuntu | grub2-signed | 18.04 | 1.93.5 | vulnerable |
| Ubuntu | grub2-signed | 18.04 | 1.93.7 | vulnerable |
| Ubuntu | grub2-signed | 18.04 | 1.93.8 | vulnerable |
| Ubuntu | grub2-signed | 18.04 | 1.93.10 | vulnerable |
| Ubuntu | grub2-signed | 18.04 | 1.93.11 | vulnerable |
| Ubuntu | grub2-signed | 18.04 | 1.93.13 | vulnerable |
| Ubuntu | grub2-signed | 18.04 | 1.93.14 | vulnerable |
| Ubuntu | grub2-signed | 18.04 | 1.93.15 | vulnerable |
| Ubuntu | grub2-signed | 18.04 | 1.93.16 | vulnerable |
| Ubuntu | grub2-signed | 18.04 | 1.93.18 | fixed |
| Ubuntu | grub2 | 20.04 | 2.04-1ubuntu12 | vulnerable |
| Ubuntu | grub2 | 20.04 | 2.04-1ubuntu13 | vulnerable |
| Ubuntu | grub2 | 20.04 | 2.04-1ubuntu14 | vulnerable |
| Ubuntu | grub2 | 20.04 | 2.04-1ubuntu16 | vulnerable |
| Ubuntu | grub2 | 20.04 | 2.04-1ubuntu18 | vulnerable |
| Ubuntu | grub2 | 20.04 | 2.04-1ubuntu20 | vulnerable |
| Ubuntu | grub2 | 20.04 | 2.04-1ubuntu21 | vulnerable |
| Ubuntu | grub2 | 20.04 | 2.04-1ubuntu22 | vulnerable |
| Ubuntu | grub2 | 20.04 | 2.04-1ubuntu23 | vulnerable |
| Ubuntu | grub2 | 20.04 | 2.04-1ubuntu24 | vulnerable |
| Ubuntu | grub2 | 20.04 | 2.04-1ubuntu25 | vulnerable |
| Ubuntu | grub2 | 20.04 | 2.04-1ubuntu26 | vulnerable |
| Ubuntu | grub2 | 20.04 | 2.04-1ubuntu26.1 | fixed |
| Ubuntu | grub2-signed | 20.04 | 1.128 | vulnerable |
| Ubuntu | grub2-signed | 20.04 | 1.129 | vulnerable |
| Ubuntu | grub2-signed | 20.04 | 1.130 | vulnerable |
| Ubuntu | grub2-signed | 20.04 | 1.131 | vulnerable |
| Ubuntu | grub2-signed | 20.04 | 1.133 | vulnerable |
| Ubuntu | grub2-signed | 20.04 | 1.134 | vulnerable |
| Ubuntu | grub2-signed | 20.04 | 1.135 | vulnerable |
| Ubuntu | grub2-signed | 20.04 | 1.136 | vulnerable |
| Ubuntu | grub2-signed | 20.04 | 1.137 | vulnerable |
| Ubuntu | grub2-signed | 20.04 | 1.138 | vulnerable |
| Ubuntu | grub2-signed | 20.04 | 1.139 | vulnerable |
| Ubuntu | grub2-signed | 20.04 | 1.140 | vulnerable |
| Ubuntu | grub2-signed | 20.04 | 1.141 | vulnerable |
| Ubuntu | grub2-signed | 20.04 | 1.142 | vulnerable |
| Ubuntu | grub2-signed | 20.04 | 1.142.1 | vulnerable |
| Ubuntu | grub2-signed | 20.04 | 1.142.3 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | grub2 | source | sid | 2.04-9 | not yet assigned | Not reported | Not reported |
| Debian | grub2 | source | forky | 2.04-9 | not yet assigned | Not reported | Not reported |
| Debian | grub2 | source | trixie | 2.04-9 | not yet assigned | Not reported | Not reported |
| Debian | grub2 | source | bookworm | 2.04-9 | not yet assigned | Not reported | Not reported |
| Alpine | grub | apk | 3.17 | 2.06-r0 | Not reported | ALPINE-CVE-2020-15707 | Not reported |
| Alpine | grub | apk | 3.18 | 2.06-r0 | Not reported | ALPINE-CVE-2020-15707 | Not reported |
| Alpine | grub | apk | 3.19 | 2.06-r0 | Not reported | ALPINE-CVE-2020-15707 | Not reported |
| Alpine | grub | apk | 3.20 | 2.06-r0 | Not reported | ALPINE-CVE-2020-15707 | Not reported |
| Alpine | grub | apk | 3.21 | 2.06-r0 | Not reported | ALPINE-CVE-2020-15707 | Not reported |
| Alpine | grub | apk | 3.22 | 2.06-r0 | Not reported | ALPINE-CVE-2020-15707 | Not reported |
| Alpine | grub | apk | 3.23 | 2.06-r0 | Not reported | ALPINE-CVE-2020-15707 | Not reported |
| Alpine | grub | apk | 3.24 | 2.06-r0 | Not reported | ALPINE-CVE-2020-15707 | Not reported |
| Ubuntu | grub2 | deb | pro | 2.02~beta2-9ubuntu1.20 | Not reported | UBUNTU-CVE-2020-15707 | Not reported |
| Ubuntu | grub2-signed | deb | pro | 1.34.22 | Not reported | UBUNTU-CVE-2020-15707 | Not reported |
| Ubuntu | grub2 | deb | 16.04 | 2.02~beta2-36ubuntu3.26 | Not reported | UBUNTU-CVE-2020-15707 | Not reported |
| Ubuntu | grub2-signed | deb | 16.04 | 1.66.26 | Not reported | UBUNTU-CVE-2020-15707 | Not reported |
| Ubuntu | grub2 | deb | 18.04 | 2.02-2ubuntu8.16 | Not reported | UBUNTU-CVE-2020-15707 | Not reported |
| Ubuntu | grub2-signed | deb | 18.04 | 1.93.18 | Not reported | UBUNTU-CVE-2020-15707 | Not reported |
| Ubuntu | grub2 | deb | 20.04 | 2.04-1ubuntu26.1 | Not reported | UBUNTU-CVE-2020-15707 | Not reported |
| Ubuntu | grub2-signed | deb | 20.04 | 1.142.3 | Not reported | UBUNTU-CVE-2020-15707 | Not reported |
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [grub2]Fixed
Details (3)
2.06-13+deb12u2· amd64 · bookwormFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.12-1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.06-13+deb12u1· amd64 · bookworm-securityFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
- [grub2-common]Fixed
Source package: [grub2]
Details (6)
2.06-13+deb12u2· amd64 · bookwormFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.06-13+deb12u2· arm64 · bookwormFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.12-1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.12-1~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.06-13+deb12u1· amd64 · bookworm-securityFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.06-13+deb12u1· arm64 · bookworm-securityFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
- [grub-common]Fixed
Source package: [grub2]
Details (6)
2.06-13+deb12u2· amd64 · bookwormFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.06-13+deb12u2· arm64 · bookwormFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.12-1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.12-1~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.06-13+deb12u1· amd64 · bookworm-securityFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.06-13+deb12u1· arm64 · bookworm-securityFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
- [grub-coreboot]Fixed
Source package: [grub2]
Details (3)
2.06-13+deb12u2· amd64 · bookwormFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.12-1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.06-13+deb12u1· amd64 · bookworm-securityFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
- [grub-coreboot-bin]Fixed
Source package: [grub2]
Details (3)
2.06-13+deb12u2· amd64 · bookwormFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.12-1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.06-13+deb12u1· amd64 · bookworm-securityFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
- [grub-coreboot-dbg]Fixed
Source package: [grub2]
Details (3)
2.06-13+deb12u2· amd64 · bookwormFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.12-1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.06-13+deb12u1· amd64 · bookworm-securityFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
- [grub-efi]Fixed
Source package: [grub2]
Details (6)
2.06-13+deb12u2· amd64 · bookwormFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.06-13+deb12u2· arm64 · bookwormFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.12-1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.12-1~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.06-13+deb12u1· amd64 · bookworm-securityFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.06-13+deb12u1· arm64 · bookworm-securityFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
- [grub-efi-amd64]Fixed
Source package: [grub2]
Details (3)
2.06-13+deb12u2· amd64 · bookwormFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.12-1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.06-13+deb12u1· amd64 · bookworm-securityFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
- [grub-efi-amd64-bin]Fixed
Source package: [grub2]
Details (3)
2.06-13+deb12u2· amd64 · bookwormFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.12-1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.06-13+deb12u1· amd64 · bookworm-securityFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
- [grub-efi-amd64-dbg]Fixed
Source package: [grub2]
Details (3)
2.06-13+deb12u2· amd64 · bookwormFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.12-1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.06-13+deb12u1· amd64 · bookworm-securityFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
Source package: [grub2]
Details (3)
2.06-13+deb12u2· amd64 · bookwormFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.12-1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.06-13+deb12u1· amd64 · bookworm-securityFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
- [grub-efi-arm64]Fixed
Source package: [grub2]
Details (3)
2.06-13+deb12u2· arm64 · bookwormFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.12-1~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.06-13+deb12u1· arm64 · bookworm-securityFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
- [grub-efi-arm64-bin]Fixed
Source package: [grub2]
Details (3)
2.06-13+deb12u2· arm64 · bookwormFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.12-1~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.06-13+deb12u1· arm64 · bookworm-securityFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
- [grub-efi-arm64-dbg]Fixed
Source package: [grub2]
Details (3)
2.06-13+deb12u2· arm64 · bookwormFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.12-1~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.06-13+deb12u1· arm64 · bookworm-securityFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
Source package: [grub2]
Details (3)
2.06-13+deb12u2· arm64 · bookwormFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.12-1~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.06-13+deb12u1· arm64 · bookworm-securityFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
- [grub-efi-ia32]Fixed
Source package: [grub2]
Details (3)
2.06-13+deb12u2· amd64 · bookwormFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.12-1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.06-13+deb12u1· amd64 · bookworm-securityFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
- [grub-efi-ia32-bin]Fixed
Source package: [grub2]
Details (3)
2.06-13+deb12u2· amd64 · bookwormFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.12-1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.06-13+deb12u1· amd64 · bookworm-securityFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
- [grub-efi-ia32-dbg]Fixed
Source package: [grub2]
Details (3)
2.06-13+deb12u2· amd64 · bookwormFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.12-1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.06-13+deb12u1· amd64 · bookworm-securityFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
- [grub-emu]Fixed
Source package: [grub2]
Details (3)
2.06-13+deb12u2· amd64 · bookwormFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.12-1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.06-13+deb12u1· amd64 · bookworm-securityFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
- [grub-emu-dbg]Fixed
Source package: [grub2]
Details (3)
2.06-13+deb12u2· amd64 · bookwormFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.12-1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
2.06-13+deb12u1· amd64 · bookworm-securityFixed · Fixed:
2.04-9dsa · grub2 · debian · bookworm; dsa · grub2 · debian · 12
Observed:
References
- [https://access.redhat.com/errata/RHSA-2020:3275]
- [https://ftp.suse.com/pub/projects/security/csaf/suse-su-2020_14440-1.json]
- [https://osv.dev/vulnerability/ALPINE-CVE-2020-15707]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2020-15707]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2020-15707]
- [https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2021/icsa-21-336-06.json]
- [https://security-tracker.debian.org/tracker/CVE-2020-15707]
- [https://wid.cert-bund.de/.well-known/csaf/white/2020/wid-sec-w-2022-0553.json]
[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]