Oval Definition:oval:com.ubuntu.xenial:def:201552810000000
Revision Date:2015-11-24Version:1
Title:CVE-2015-5281 on Ubuntu 16.04 LTS (xenial) - low.
Description:The grub2 package before 2.02-0.29 in Red Hat Enterprise Linux (RHEL) 7, when used on UEFI systems, allows local users to bypass intended Secure Boot restrictions and execute non-verified code via a crafted (1) multiboot or (2) multiboot2 module in the configuration file or physically proximate attackers to bypass intended Secure Boot restrictions and execute non-verified code via the (3) boot menu.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2015-5281
Platform(s):Ubuntu 16.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 16.04 LTS (xenial) is installed.
  • AND Package Information
  • NOT grub-common package in xenial, while related to the CVE in some way, is not affected.
  • OR NOT grub-coreboot package in xenial, while related to the CVE in some way, is not affected.
  • OR NOT grub-coreboot-bin package in xenial, while related to the CVE in some way, is not affected.
  • OR NOT grub-efi package in xenial, while related to the CVE in some way, is not affected.
  • OR NOT grub-efi-amd64 package in xenial, while related to the CVE in some way, is not affected.
  • OR NOT grub-efi-amd64-bin package in xenial, while related to the CVE in some way, is not affected.
  • OR NOT grub-efi-arm package in xenial, while related to the CVE in some way, is not affected.
  • OR NOT grub-efi-arm-bin package in xenial, while related to the CVE in some way, is not affected.
  • OR NOT grub-efi-arm64 package in xenial, while related to the CVE in some way, is not affected.
  • OR NOT grub-efi-arm64-bin package in xenial, while related to the CVE in some way, is not affected.
  • OR NOT grub-efi-ia32 package in xenial, while related to the CVE in some way, is not affected.
  • OR NOT grub-efi-ia32-bin package in xenial, while related to the CVE in some way, is not affected.
  • OR NOT grub-emu package in xenial, while related to the CVE in some way, is not affected.
  • OR NOT grub-firmware-qemu package in xenial, while related to the CVE in some way, is not affected.
  • OR NOT grub-ieee1275 package in xenial, while related to the CVE in some way, is not affected.
  • OR NOT grub-ieee1275-bin package in xenial, while related to the CVE in some way, is not affected.
  • OR NOT grub-linuxbios package in xenial, while related to the CVE in some way, is not affected.
  • OR NOT grub-pc package in xenial, while related to the CVE in some way, is not affected.
  • OR NOT grub-pc-bin package in xenial, while related to the CVE in some way, is not affected.
  • OR NOT grub-rescue-pc package in xenial, while related to the CVE in some way, is not affected.
  • OR NOT grub-theme-starfield package in xenial, while related to the CVE in some way, is not affected.
  • OR NOT grub-uboot package in xenial, while related to the CVE in some way, is not affected.
  • OR NOT grub-uboot-bin package in xenial, while related to the CVE in some way, is not affected.
  • OR NOT grub-xen package in xenial, while related to the CVE in some way, is not affected.
  • OR NOT grub-xen-bin package in xenial, while related to the CVE in some way, is not affected.
  • OR NOT grub-xen-host package in xenial, while related to the CVE in some way, is not affected.
  • OR NOT grub2 package in xenial, while related to the CVE in some way, is not affected.
  • OR NOT grub2-common package in xenial, while related to the CVE in some way, is not affected.
  • BACK