CVEvulnerability
CVE-2020-14308
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2020-07-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.4 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.4 MEDIUM — AV:L/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-190
Description
In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic overflows on the requested allocation size. This leads the function to return invalid memory allocations which can be further used to cause possible integrity, confidentiality and availability impacts during the boot process.
Affected configurations
• gnu grub2 (< 2.06)
• opensuse leap 15.1
• opensuse leap 15.2
Related
Weakness · CWE (1)
- CWE-190 Integer Overflow or Wraparound weakness
References
- http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00016.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00017.html Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2020/07/29/3 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/09/17/2 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/09/17/4 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/09/21/1 Mailing List, Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1852009 Issue Tracking, Third Party Advisory
- https://security.gentoo.org/glsa/202104-05 Third Party Advisory
- https://security.netapp.com/advisory/ntap-20200731-0008/ Third Party Advisory
- https://usn.ubuntu.com/4432-1/ Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00016.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00017.html Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2020/07/29/3 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/09/17/2 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/09/17/4 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/09/21/1 Mailing List, Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1852009 Issue Tracking, Third Party Advisory
- https://security.gentoo.org/glsa/202104-05 Third Party Advisory
- https://security.netapp.com/advisory/ntap-20200731-0008/ Third Party Advisory
- https://usn.ubuntu.com/4432-1/ Third Party Advisory