All 3 CVE vulnerabilities found in grub2 in Ubuntu, with AI-generated Chinese analysis, references, and POCs.
Vendor: Ubuntu
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2020-15707 | GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow. CWE-362 | 5.7 | Medium | 2020-07-29 |
| CVE-2020-15706 | GRUB2 contains a race condition leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing. CWE-362 | 6.4 | Medium | 2020-07-29 |
| CVE-2020-15705 | GRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shim CWE-347 | 6.4 | Medium | 2020-07-29 |
All 3 known CVE vulnerabilities affecting grub2 in Ubuntu with full Chinese analysis, references, and POCs where available.