bugGNU GRUB - Bugs: bug #46699, GRUB password login vulnerability

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #46699: GRUB password login vulnerability

Submitter:  Chris DeAngelis <fractal618>
Submitted:  Wed 16 Dec 2015 06:36:49 PM UTC
   
 
Category:  Security Severity:  Major
Priority:  5 - Normal Item Group:  Action Request
Status:  Fixed Privacy:  Public
Assigned to:  None Originator Name:  Chris
Open/Closed:  Closed Release:  2.00
Release:  Reproducibility:  None
Planned Release:  None

Wed 16 Dec 2015 06:39:27 PM UTC, comment #1: 

Already fixed by 451d80e52d851432e109771bb8febafca7a5f1f2.

Andrei Borzenkov <arvidjaar>
Group Member
Wed 16 Dec 2015 06:36:49 PM UTC, original submission:  

Pressing the backspace key 28 times can bypass the Grub2 bootloader's password protection and allow a hacker to install malware on a locked-down Linux system.

http://www.pcworld.com/article/3016097/vulnerability-in-popular-bootloader-puts-locked-down-linux-computers-at-risk.html

Chris DeAngelis <fractal618>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by arvidjaar (Posted a comment)
  • -email is unavailable- added by fractal618 (Submitted the item)
  • -email is unavailable- added by fractal618
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

     

    Follow 3 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2015-12-16 arvidjaar StatusNone Fixed
        Open/ClosedOpen Closed
    2015-12-16 fractal618 Carbon-Copy- Added -email is unavailable-

    Back to the top

    Powered by Savane 3.13-4b48.
    Corresponding source code