CVE:CVE-2020-15706
CNNVD:CNNVD-202007-1718
grub2是GNU社区的一款Linux系统引导程序。
grub2 2.04及之前版本中的‘grub_script_function_create()’函数存在资源管理错误漏洞。攻击者可利用该漏洞执行任意代码并绕过安全启动限制。
solution:Upgrade gnu grub2 to a higher version than 2.04,and avoid the version (,2.04]; Upgrade redhat enterprise_linux_atomic_host to a higher version than -; Upgrade redhat openshift_container_platform to a higher version than 4.0,and avoid the version 4.0; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,20.04,and avoid the version 14.04,16.04,18.04,20.04; Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0; Upgrade redhat enterprise_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade suse suse_linux_enterprise_server to a higher version than 11,12,15,and avoid the version 11,12,15; Upgrade microsoft windows_10 to a higher version than -,1607,1709,1803,1809,1903,1909,2004,and avoid the version 1607,1709,1803,1809,1903,1909,2004; Upgrade microsoft windows_8.1 to a higher version than -; Upgrade microsoft windows_rt_8.1 to a higher version than -; Upgrade microsoft windows_server_2012 to a higher version than -,r2,and avoid the version r2; Upgrade microsoft windows_server_2016 to a higher version than -,1903,1909,2004,and avoid the version 1903,1909,2004; Upgrade microsoft windows_server_2019 to a higher version than -; Upgrade opensuse leap to a higher version than 15.1,15.2,and avoid the version 15.1,15.2