| 标题 | GRUB2: crafted grub.cfg file can lead to arbitrary code execution during boot process |
|---|
| 描述 | In the course of Eclypsium’s analysis, we have identified a buffer overflow vulnerability in the way that GRUB2 parses content from the GRUB2 config file (grub.cfg). Of note: The GRUB2 config file is a text file and typically is not signed like other files and executables. This vulnerability enables arbitrary code execution within GRUB2 and thus control over the booting of the operating system. As a result, an attacker could modify the contents of the GRUB2 configuration file to ensure that attack code is run before the operating system is loaded. In this way, attackers gain persistence on the device.
This vulnerability was assigned CVE-2020-10713 “GRUB2: crafted grub.cfg file can lead to arbitrary code execution during boot process” with a CVSS rating of 8.2 (High) / CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H. |
|---|
| 来源 | ⚠️ https://eclypsium.com/2020/07/29/theres-a-hole-in-the-boot |
|---|
| 用户 | misc (UID 3) |
|---|
| 提交 | 2020-07-30 07時51分 (6 年前) |
|---|
| 管理 | 2020-07-30 08時34分 (43 minutes later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 159143 [grub2 Config File Parser grub.cfg BootHole 内存损坏] |
|---|
| 积分 | 20 |
|---|