Heap-based Buffer Overflow in GRUB2 Affecting Multiple Distributions
CVE-2020-14309

6.7MEDIUM

Key Information:

Vendor
Gnu
Status
Grub
Vendor
CVE Published:
30 July 2020

Summary

A vulnerability in GRUB2 affects all versions before 2.06, specifically when processing squashfs filesystems containing symbolic links that have a name length of UINT32 bytes. This leads to an arithmetic overflow that can cause a zero-size allocation, eventually resulting in a heap-based buffer overflow that may be exploited by attackers to execute arbitrary code or compromise system integrity.

Affected Version(s)

Grub All grub2 versions before 2.06

References

https://bugzilla.redhat.com/show_bug.cgi?id=1852022
x_refsource_MISC
https://security.netapp.com/advisory/ntap-20200731-0008/
x_refsource_CONFIRM
https://usn.ubuntu.com/4432-1/
vendor-advisoryx_refsource_UBUNTU

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.