CVE-2020-14308
- State
- Published
- Severity
- Not scored
- Published
- Jul 29, 2020
- Updated
- Aug 4, 2024
- Reserved
- Jun 17, 2020
Description
In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic overflows on the requested allocation size. This leads the function to return invalid memory allocations which can be further used to cause possible integrity, confidentiality and availability impacts during the boot process.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
Grubn/a |
|
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1852009
- [oss-security] 20200729 multiple secure boot grub2 and linux kernel vulnerabilitiesmailing-list
- https://security.netapp.com/advisory/ntap-20200731-0008/
- USN-4432-1vendor-advisory
- openSUSE-SU-2020:1169vendor-advisory
- openSUSE-SU-2020:1168vendor-advisory
- GLSA-202104-05vendor-advisory
- [oss-security] 20210916 Containers-optimized OS (COS) membership in the linux-distros listmailing-list
- [oss-security] 20210917 Re: Containers-optimized OS (COS) membership in the linux-distros listmailing-list
- [oss-security] 20210920 Re: Containers-optimized OS (COS) membership in the linux-distros listmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.