Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatcveRedhat.comRH:CVE-2021-3418
HistoryMar 03, 2021 - 7:47 p.m.

CVE-2021-3418

2021-03-0319:47:54
redhat.com
access.redhat.com
13

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

CVSS3

6.4

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

33.3%

JSON

A flaw was found in grub. If certificates that signed grub are installed into db, grub can be booted directly. It will then boot any kernel without signature validation. The booted kernel will think it was booted in secureboot mode and will implement lockdown, yet it could have been tampered. This flaw is a reintroduction of CVE-2020-15705 and only affects upstream and distributions using the shim_lock mechanism.

Related

prion 2
nvd 2
alpinelinux 2
cve 2
osv 2
cvelist 2
ubuntucve 2
debiancve 2
suse 2
openvas 22
nessus 38
redhatcve 1
veracode 2
cbl_mariner 3
rosalinux 1
mscve 1
hp 1
redos 1
redhat 9
f5 1
ubuntu 2
oraclelinux 3
centos 1
qualysblog 1
photon 12
fedora 2
ibm 3
mageia 1
gentoo 1
ics 1
prion
prion
Input validation
2021-03-15 22:15:00
Code injection
2020-07-29 18:15:00
nvd
nvd
CVE-2021-3418
2021-03-15 22:15:13
CVE-2020-15705
2020-07-29 18:15:14
alpinelinux
alpinelinux
CVE-2021-3418
2021-03-15 22:15:13
CVE-2020-15705
2020-07-29 18:15:14
cve
cve
CVE-2021-3418
2021-03-15 22:15:13
CVE-2020-15705
2020-07-29 18:15:14
osv
osv
CVE-2021-3418
2021-03-15 22:15:13
CVE-2020-15705
2020-07-29 18:15:14
cvelist
cvelist
CVE-2021-3418
2021-03-15 21:17:52
CVE-2020-15705 GRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shim
2020-07-29 00:00:00
ubuntucve
ubuntucve
CVE-2021-3418
2021-03-02 00:00:00
CVE-2020-15705
2020-07-29 00:00:00
debiancve
debiancve
CVE-2021-3418
2021-03-15 22:15:13
CVE-2020-15705
2020-07-29 18:15:14
suse
suse
Security update for grub2 (important)
2020-08-29 00:00:00
Security update for grub2 (important)
2020-08-29 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2020:2305-1)
2021-04-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:2307-1)
2021-06-09 00:00:00
SUSE Linux Enterprise Server: Security Advisory (SUSE-SU-2020:2308-1)
2021-04-19 00:00:00
nessus
nessus
openSUSE Security Update : grub2 (openSUSE-2020-1282)
2020-08-31 00:00:00
SUSE SLES12 Security Update : grub2 (SUSE-SU-2020:2304-1)
2020-08-26 00:00:00
SUSE SLED15 / SLES15 Security Update : grub2 (SUSE-SU-2020:2306-1)
2020-08-26 00:00:00
redhatcve
redhatcve
CVE-2020-15705
2020-07-29 17:06:17
veracode
veracode
Denial Of Service (DoS)
2020-07-30 02:02:34
Insecure Cryptographic Function
2022-07-30 10:38:51
cbl_mariner
cbl_mariner
CVE-2020-15705 affecting package grub2 2.02-26
2020-11-30 19:30:41
CVE-2021-3418 affecting package grub2 for versions less than 2.06~rc1-7
2022-04-26 20:17:11
CVE-2021-3418 affecting package grub2 2.06~rc1-10
2021-05-06 23:56:52
rosalinux
rosalinux
Advisory ROSA-SA-2021-1849
2021-07-02 17:01:29
mscve
mscve
Microsoft Guidance for Addressing Security Feature Bypass in GRUB
2020-07-29 07:00:00
hp
hp
HPSBHF03678 rev. 2 - GRUB2 Bootloader Arbitrary Code Execution
2020-07-25 00:00:00
redos
redos
ROS-20220920-01
2022-09-20 00:00:00
redhat
redhat
(RHSA-2020:3273) Moderate: grub2 security and bug fix update
2020-08-03 10:36:49
(RHSA-2020:3227) Moderate: grub2 security update
2020-07-29 19:56:15
(RHSA-2020:3271) Moderate: grub2 security and bug fix update
2020-08-03 10:36:06
f5
f5
K48187630 : Multiple grub2 vulnerabilities
2021-03-18 00:00:00
ubuntu
ubuntu
GRUB 2 vulnerabilities
2020-07-29 00:00:00
GRUB2 regression
2020-08-04 00:00:00
oraclelinux
oraclelinux
grub2 security update
2020-07-29 00:00:00
grub2 security update
2020-07-29 00:00:00
grub2 security update
2020-07-29 00:00:00
centos
centos
grub2, mokutil, shim security update
2020-07-30 00:08:50
qualysblog
qualysblog
GRUB2 Boothole Buffer Overflow Vulnerability (CVE-2020-10713) – Automatically Discover, Prioritize and Remediate Using Qualys VMDR®
2020-08-03 21:35:38
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-1.0-0311
2020-07-30 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0267
2020-07-30 00:00:00
Important Photon OS Security Update - PHSA-2020-0120
2020-07-23 00:00:00
fedora
fedora
[SECURITY] Fedora 31 Update: grub2-2.02-110.fc31
2020-09-27 01:05:37
[SECURITY] Fedora 32 Update: grub2-2.04-22.fc32
2020-09-14 13:26:52
ibm
ibm
Security Bulletin: GRUB2 as used by IBM QRadar SIEM is vulnerable to arbitrary code execution
2021-07-26 13:09:02
Security Bulletin: IBM QRadar Network Packet Capture is vulnerable to Using Components with Known Vulnerabilities
2020-10-30 16:18:45
Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities
2023-12-19 17:14:04
mageia
mageia
Updated grub2 packages fix security vulnerabilities
2021-07-09 01:43:19
gentoo
gentoo
GRUB: Multiple vulnerabilities
2021-04-30 00:00:00
ics
ics
Hitachi Energy APM Edge (Update A)
2022-10-18 12:00:00

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

CVSS3

6.4

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

33.3%

JSON
Related for RH:CVE-2021-3418
prion2nvd2alpinelinux2cve2osv2cvelist2ubuntucve2debiancve2suse2openvas22nessus38redhatcve1veracode2cbl_mariner3rosalinux1mscve1hp1redos1redhat9f51ubuntu2oraclelinux3centos1qualysblog1photon12fedora2ibm3mageia1gentoo1ics1