CVE-2020-15707

MediumCVSS 6.4/10Last modified Jun 17, 2026

Description

Integer overflows were discovered in the functions grub_cmd_initrd and grub_initrd_init in the efilinux component of GRUB2, as shipped in Debian, Red Hat, and Ubuntu (the functionality is not included in GRUB2 upstream), leading to a heap-based buffer overflow. These could be triggered by an extremely large number of arguments to the initrd command on 32-bit architectures, or a crafted filesystem with very large files on any architecture. An attacker could use this to execute arbitrary code and bypass UEFI Secure Boot restrictions. This issue affects GRUB2 version 2.04 and prior versions.

Metrics

CVSS 3.1 6.4/10CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-362CWE-190

Affected software

VendorProductVersions
Ubuntugrub2 in Ubuntu>= 20.04 LTS, < 2.04-1ubuntu26.1; >= 18.04 LTS, < 2.02-2ubuntu8.16; >= 16.04 LTS, < 2.02~beta2-36ubuntu3.26; >= 14.04 ESM, < 2.02~beta2-9ubuntu1.20

References

Timeline

Published
Jul 29, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-157087.8Ubuntu's packaging of libvirt in 20.04 LTS created a control socket with world read and write permissions. An attacker could use this to oveCVE-2020-157095.5Versions of add-apt-repository before 0.98.9.2, 0.96.24.32.14, 0.96.20.10, and 0.92.37.8ubuntu0.1~esm1, printed a PPA (personal package archCVE-2020-15717.3An elevation of privilege vulnerability exists in Windows Setup in the way it handles permissions. A locally authenticated attacker could ruCVE-2020-157106.1Potential double free in Bluez 5 module of PulseAudio could allow a local attacker to leak memory or crash the program. The modargs variableCVE-2020-157118.8In MISP before 2.4.129, setting a favourite homepage was not CSRF protected.CVE-2020-157124.3rConfig 3.9.5 could allow a remote authenticated attacker to traverse directories on the system. An attacker could send a crafted request toCVE-2020-157138.8rConfig 3.9.5 is vulnerable to SQL injection. A remote authenticated attacker could send crafted SQL statements to the devices.php script usCVE-2020-157148.8rConfig 3.9.5 is vulnerable to SQL injection. A remote authenticated attacker could send crafted SQL statements to the devices.crud.php scriCVE-2020-157159.9rConfig 3.9.5 could allow a remote authenticated attacker to execute arbitrary code on the system, because of an error in the search.crud.phCVE-2020-157166.1RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the Preferences.php script. A remote attackerCVE-2020-157176.1RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the Search.inc.php script. A remote attacker CVE-2020-157186.1RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the PrintSchedules.php script. A remote attac
CVE-2020-15707: Medium severity, CVSS 6.4 | Vulnix