NVD

Id
26480  
Name
CVE-2015-5281  
Description
The grub2 package before 2.02-0.29 in Red Hat Enterprise Linux (RHEL) 7, when used on UEFI systems, allows local users to bypass intended Secure Boot restrictions and execute non-verified code via a crafted (1) multiboot or (2) multiboot2 module in the configuration file or physically proximate attackers to bypass intended Secure Boot restrictions and execute non-verified code via the (3) boot menu.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2015-11-24  
Modified Date
2016-12-07  
Seq
2015-5281  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
140006 26480 CVE-2015-5281 FEDORA-2015-c3b4fef3af  View
140007 26480 CVE-2015-5281 FEDORA-2015-2c155d7632  View
140008 26480 CVE-2015-5281 RHSA-2015:2401  View
140009 26480 CVE-2015-5281 http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html  View
140010 26480 CVE-2015-5281 77983  View
140011 26480 CVE-2015-5281 1034198  View
140012 26480 CVE-2015-5281 https://bugzilla.redhat.com/show_bug.cgi?id=1264103  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
10692 JVNDB-2015-006012 Red Hat Enterprise Linux の grub2 パッケージにおける Secure Boot 制限を回避される脆弱性 Red Hat Enterprise Linux (RHEL) の grub2 パッケージは、UEFI システム上で使用される場合、Secure Boot 制限を回避され、検証されていないコードを実行される脆弱性が存在します。 CVE-2015-5281 82506 CVE-2015-5281 26480 2.6 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006012.html 2015-07-02 2015-11-26 View