Billions of Linux and Windows Systems at risk due to Critical GRUB2 vulnerabilities

Modified on Sun, 16 Mar at 8:10 PM

Overview:

A team of cybersecurity researchers found multiple vulnerabilities that are affecting billions of devices that run on either Windows or Linux. Affected devices include laptops, servers, workstations, or even IoT devices. GRUB2 boot loader which is not only used by Linux but other Operating Systems where Secure Boot trusts the 3rd-party UEFI CA, is affected by these vulnerabilities. If and when this is exploited, the Operating system's booting process can be compromised to execute arbitrary code.

CVEs assigned:

CVE-2020-10713, CVE-2020-14308, CVE-2020-14309, CVE-2020-14310, CVE-2020-14311, CVE-2020-15705, CVE-2020-15706, CVE-2020-15707

Affected Softwares and OS:

GRUB2
Linux systems

Solution:

To address this vulnerability, Linux vendors have released security patches. For more information, please refer to our blog:

Use SanerNow platform to apply this critical patch quickly across the organization as shown below.

SanerNow:

Vulnerability detection and patching of grub2:

1.Login to SanerNow platform
2.Switch to the account/site specific view and Go to 'VM tool'.

If your Application is vulnerable, Saner lists the above CVEs in 'Top Vulnerabilities or 'Recently Discovered Vulnerabilities' as shown in the below diagram:

3. Search for this vulnerability in VM tool. If you are affected, apply the patch through PM -> Missing Patches.
4. Select 'Groups/Devices' in the 'Asset Source' section and click 'Apply'.
5. Select the product 'GRUB2' from the 'Asset' section as shown in the below image:

6. Select ‘Apply Selected Patches’ at the rightmost corner. This will prompt for ‘Creating Patch Task’. Fill in ‘Task Name’ and ‘Remediation Schedule' as per your preference and click on ‘Apply Selected Patches' as shown below:

7. Remediation job will be created, which will fix the vulnerability by upgrading to the latest patch version.
Once remediation is done, the Saner agent automatically scans again and uploads the result to SanerNow as shown below: