CVE-2015-5281

The grub2 package before 2.02-0.29 in Red Hat Enterprise Linux (RHEL) 7, when used on UEFI systems, allows local users to bypass intended Secure Boot…

published November 24, 2015

CVSS
—
EPSS
0%
Percentile
25.7
In the wild
Unconfirmed
What it is

The grub2 package before 2.02-0.29 in Red Hat Enterprise Linux (RHEL) 7, when used on UEFI systems, allows local users to bypass intended Secure Boot restrictions and execute non-verified code via a crafted (1) multiboot or (2) multiboot2 module in the configuration file or physically proximate attackers to bypass intended Secure Boot restrictions and execute non-verified code via the (3) boot menu.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00337 · 25.7th percentile
Published
2015-11-24T20:00Z
EPSS history
Timeline
  • 24 NOV 20:00Z
    The grub2 package before 2.02-0.29 in Red Hat Enterprise Linux (RHEL) 7, when used on UEFI systems, allows local users to bypass intended Secure Boot…
    cvelistv5