CVE-2021-3418
Medium
Description
If certificates that signed grub are installed into db, grub can be booted directly. It will then boot any kernel without signature validation. The booted kernel will think it was booted in secureboot mode and will implement lockdown, yet it could have been tampered. This flaw is a reintroduction of CVE-2020-15705 and only affects grub2 versions prior to 2.06 and upstream and distributions using the shim_lock mechanism.
SeverityMedium
CVSS6.4
Exploit probability—
Product
Gnu Grub2
PublishedMar 15, 2021
First seenMar 15, 2021
Weakness typeCWE-281CWE-281
How to fix
Update
- gnu grub22.06 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gnu grub2 | v < 2.06 | 2.06 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.