Medium severity · published Jul 29, 2020
CVE-2020-14308
In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic overflows on the requested allocation size
6.4
CVSS
0.4%
EPSS
No
On KEV
Description
In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic overflows on the requested allocation size. This leads the function to return invalid memory allocations which can be further used to cause possible integrity, confidentiality and availability impacts during the boot process.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
High
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 37% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GR
Grub2 · Gnu
before 2.06 · source: NVD
LE
Leap · Opensuse
15.1; 15.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-14308
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-14308
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00016.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00017.html
Mailing List
http://www.openwall.com/lists/oss-security/2020/07/29/3
Mailing List
http://www.openwall.com/lists/oss-security/2021/09/17/2
Mailing List
http://www.openwall.com/lists/oss-security/2021/09/17/4
Mailing List
http://www.openwall.com/lists/oss-security/2021/09/21/1
More from Grub2
8.8
CVE-2024-56737
GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem
8.6
CVE-2022-2601
A buffer overflow was found in grub_font_construct_glyph()
8.2
CVE-2021-20233
A flaw was found in grub2 in versions prior to 2.06
8.2
CVE-2020-25632
A flaw was found in grub2 in versions prior to 2.06
8.2
CVE-2020-10713
A flaw was found in grub2, prior to version 2.06