PT-2021-7959 · Grub2+9 · Grub2+9

Marco Benatto · Published 2021-12-03 · Updated 2024-09-05 · CVE-2021-3981

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions grub2 versions 2.06 and earlier

Description A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set, allowing non-privileged users to read its content. This represents a low severity confidentiality issue, as those users can eventually read any encrypted passwords present in grub.cfg.

Recommendations For grub2 versions 2.06 and earlier, as a temporary workaround, consider restricting access to the grub.cfg file until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

ALSA-2022:2110

ALT-PU-2022-1151

ALT-PU-2022-1220

ALT-PU-2024-11222

AZL-34786

AZL-8937

BDU:2023-07627

CESA-2022_2110

CVE-2021-3981

OESA-2022-1597

OPENSUSE-SU-2024:11700-1

RHSA-2022:2110

RHSA-2022_2110

RLSA-2022:2110

USN-6355-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Debian

Linuxmint

Red Hat

Rocky Linux

Ubuntu

Grub2

References · 51

• https://ubuntu.com/security/CVE-2022-28736 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-3981 · Security Note
• https://ubuntu.com/security/CVE-2022-28735 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-3981 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2024-0416SE47 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-3775 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-28733 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11700-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-3981 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2022-2110.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-3981 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-34786 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-3695 · Vendor Advisory
• https://security.gentoo.org/glsa/202209-12 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6355-1 · Vendor Advisory