CVE-2020-10713 PoC — grub2 缓冲区错误漏洞

Source

Associated Vulnerability

Title:grub2 缓冲区错误漏洞 (CVE-2020-10713)
Description:grub2是美国GNU社区的一款Linux系统引导程序。 grub2 2.06之前版本中存在缓冲区错误漏洞。攻击者可利用该漏洞执行任意代码，影响数据机密性和完整性以及系统可用性。

Description

BootHole vulnerability (CVE-2020-10713). detection script, links and other mitigation related materials

Readme

# BootHole
## General information
This repository was created to contain relevant helpful scripts and any additional tools or information that
can assist others in managing their BootHole vulnerability mitigation plans.

## Windows Based Platforms
We have created a Powershell script that will check the EFI System Partition for signed executable files that were revoked by Microsoft in the BootHole DBX Update

## Linux Based Platforms
Similarly to the Windows Powershell script above,  we have also created a Linux Bash script that will check for any signed executable files revoked in the BootHole DBX update .


# If you encounter any issues please report them and we will try our best to assist you as soon as we can.

File Snapshot


 [4.0K]  /data/pocs/fa539494c54bcfd5d8d65498941592394549c059
├── [3.3K]  ADVISORIES.md
├── [4.0K]  Bash
│   ├── [ 27K]  BootHoleDetection.sh
│   └── [ 181]  README.md
├── [ 34K]  LICENSE
├── [4.0K]  Powershell
│   └── [ 15K]  BootHoleDetection.ps1
└── [ 736]  README.md

2 directories, 6 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!