CVE-2020-14309

6.7MEDIUM

Key Information:

Vendor
Gnu
Status
Grub
Vendor
CVE Published:
30 July 2020

Summary

There's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems containing a symbolic link with name length of UINT32 bytes in size. The name size leads to an arithmetic overflow leading to a zero-size allocation further causing a heap-based buffer overflow with attacker controlled data.

Affected Version(s)

Grub All grub2 versions before 2.06

References

https://bugzilla.redhat.com/show_bug.cgi?id=1852022
x_refsource_MISC
https://security.netapp.com/advisory/ntap-20200731-0008/
x_refsource_CONFIRM
https://usn.ubuntu.com/4432-1/
vendor-advisoryx_refsource_UBUNTU

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.