Lucene search
Ubuntu.comUB:CVE-2022-28735HistoryJul 20, 2023 - 12:00 a.m.
CVE-2022-28735
2023-07-2000:00:00
ubuntu.com
ubuntu.com
15
grub2
shim_lock verifier
unverified files
secure boot
trust-chain
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
5.1%
The GRUB2’s shim_lock verifier allows non-kernel files to be loaded on
shim-powered secure boot systems. Allowing such files to be loaded may lead
to unverified code and modules to be loaded in GRUB2 breaking the secure
boot trust-chain.
Bugs
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | grub2-signed | < 1.187.3~18.04.1 | UNKNOWN |
| ubuntu | 20.04 | noarch | grub2-signed | < 1.187.3~20.04.1 | UNKNOWN |
| ubuntu | 22.04 | noarch | grub2-signed | < 1.187.3~22.04.1 | UNKNOWN |
| ubuntu | 14.04 | noarch | grub2-signed | < any | UNKNOWN |
| ubuntu | 16.04 | noarch | grub2-signed | < any | UNKNOWN |
| ubuntu | 18.04 | noarch | grub2-unsigned | < 2.06-2ubuntu14.1 | UNKNOWN |
| ubuntu | 20.04 | noarch | grub2-unsigned | < 2.06-2ubuntu14.1 | UNKNOWN |
| ubuntu | 22.04 | noarch | grub2-unsigned | < 2.06-2ubuntu14.1 | UNKNOWN |
| ubuntu | 16.04 | noarch | grub2-unsigned | < any | UNKNOWN |
Related
cbl_mariner
cbl_mariner
CVE-2022-28735 affecting package grub2 for versions less than 2.06-12
2023-11-08 02:07:28
CVE-2022-28735 affecting package grub2 for versions less than 2.06-14
2024-03-19 17:21:46
cve
cve
CVE-2022-28735
2023-07-20 01:15:10
redhatcve
redhatcve
CVE-2022-28735
2022-06-07 17:19:55
nvd
nvd
CVE-2022-28735
2023-07-20 01:15:10
cvelist
cvelist
CVE-2022-28735
2023-07-20 00:22:51
debiancve
debiancve
CVE-2022-28735
2023-07-20 01:15:10
prion
prion
Code injection
2023-07-20 01:15:00
nessus
nessus
CBL Mariner 2.0 Security Update: grub2 (CVE-2022-28735)
2024-07-03 00:00:00
Oracle Linux 7 : grub2 (ELSA-2022-9469)
2022-06-07 00:00:00
SUSE SLED15 / SLES15 Security Update : grub2 (SUSE-SU-2022:2064-1)
2022-06-14 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2022-4.0-0303
2022-12-21 00:00:00
Important Photon OS Security Update - PHSA-2022-3.0-0507
2022-12-21 00:00:00
suse
suse
Security update for grub2 (important)
2022-06-10 00:00:00
Security update for grub2 (important)
2022-06-13 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: grub2-2.06-11.fc35
2022-06-22 01:25:16
[SECURITY] Fedora 36 Update: grub2-2.06-42.fc36
2022-06-10 01:15:49
openvas
openvas
Fedora: Security Advisory for grub2 (FEDORA-2022-9b4f9af4ce)
2022-06-23 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:2074-1)
2022-06-15 00:00:00
openSUSE: Security Advisory for grub2 (SUSE-SU-2022:2064-1)
2022-06-14 00:00:00
redos
redos
ROS-20240208-03
2024-02-08 00:00:00
oraclelinux
oraclelinux
grub2 security update
2022-06-07 00:00:00
grub2 security update
2023-10-27 00:00:00
grub2 security update
2022-06-07 00:00:00
osv
osv
Important: grub2, mokutil, shim, and shim-unsigned-x64 security update
2022-06-16 00:00:00
Important: grub2, mokutil, shim, and shim-unsigned-x64 security update
2022-06-16 13:10:10
Important: grub2, mokutil, shim, and shim-unsigned-x64 security update
2022-06-16 13:17:13
redhat
redhat
almalinux
almalinux
Important: grub2, mokutil, shim, and shim-unsigned-x64 security update
2022-06-16 00:00:00
Important: grub2, mokutil, shim, and shim-unsigned-x64 security update
2022-06-16 00:00:00
rocky
rocky
grub2, mokutil, shim, and shim-unsigned-x64 security update
2022-06-16 13:10:10
grub2, mokutil, shim, and shim-unsigned-x64 security update
2022-06-16 13:17:13
amazon
amazon
Important: grub2
2023-07-17 17:40:00
gentoo
gentoo
GRUB: Multiple Vulnerabilities
2022-09-25 00:00:00
ubuntu
ubuntu
GRUB2 vulnerabilities
2023-09-08 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2300
2023-12-05 10:31:19
hp
hp
HP ThinPro 8.0 SP 7 Security Updates
2024-01-26 00:00:00
HP ThinPro 8.0 SP 8 Security Updates
2024-03-01 00:00:00
avleonov
avleonov
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
5.1%
Related for UB:CVE-2022-28735