bugGNU GRUB - Bugs: bug #46699, GRUB password login vulnerability

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #46699: GRUB password login vulnerability

Submitted by:  Chris DeAngelis <fractal618>
Submitted on:  Wed 16 Dec 2015 06:36:49 PM UTC  
 
Category: SecuritySeverity: Major
Priority: 5 - NormalItem Group: Action Request
Status: FixedPrivacy: Public
Assigned to: NoneOriginator Name: Chris
Open/Closed: ClosedRelease: 
Release: 2.00Reproducibility: None
Planned Release: None

Wed 16 Dec 2015 06:39:27 PM UTC, comment #1:

Already fixed by 451d80e52d851432e109771bb8febafca7a5f1f2.

Andrei Borzenkov <arvidjaar>
Project Member
Wed 16 Dec 2015 06:36:49 PM UTC, original submission:

Pressing the backspace key 28 times can bypass the Grub2 bootloader's password protection and allow a hacker to install malware on a locked-down Linux system.

http://www.pcworld.com/article/3016097/vulnerability-in-popular-bootloader-puts-locked-down-linux-computers-at-risk.html

Chris DeAngelis <fractal618>

 

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by arvidjaar (Posted a comment)
  • -unavailable- added by fractal618 (Submitted the item)
  • -unavailable- added by fractal618
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 3 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Wed 16 Dec 2015 06:39:27 PM UTCarvidjaarStatusNone=>Fixed
      Open/ClosedOpen=>Closed
    Wed 16 Dec 2015 06:36:49 PM UTCfractal618Carbon-Copy-=>Added -unavailable-

    Back to the top


    Powered by Savane 3.1-cleanup1