shim-unsigned-aarch64 (AlmaLinux:8) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the AlmaLinux:8 package shim-unsigned-aarch64, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (7)

• CVE-2020-25632 — CVSS 8.2 (high): A flaw was found in grub2 in versions prior to 2.06. The rmmod implementation allows the unloading of a module used as a dependency without…
• CVE-2021-20233 — CVSS 8.2 (high): A flaw was found in grub2 in versions prior to 2.06. Setparam_prefix() in the menu rendering code performs a length calculation on the…
• CVE-2020-25647 — CVSS 7.6 (high): A flaw was found in grub2 in versions prior to 2.06. During USB device initialization, descriptors are read with very little bounds…
• CVE-2020-14372 — CVSS 7.5 (high): A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of the ACPI command when Secure Boot is…
• CVE-2020-27779 — CVSS 7.5 (high): A flaw was found in grub2 in versions prior to 2.06. The cutmem command does not honor secure boot locking allowing an privileged attacker…
• CVE-2020-27749 — CVSS 6.7 (medium): A flaw was found in grub2 in versions prior to 2.06. Variable names present are expanded in the supplied command line into their…
• CVE-2021-20225 — CVSS 6.7 (medium): A flaw was found in grub2 in versions prior to 2.06. The option parser allows an attacker to write past the end of a heap-allocated buffer…