CVE-2020-14309
Severity
6.7MEDIUM
EPSS
0.0%
top 86.40%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJul 30
Latest updateMay 24
Description
There's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems containing a symbolic link with name length of UINT32 bytes in size. The name size leads to an arithmetic overflow leading to a zero-size allocation further causing a heap-based buffer overflow with attacker controlled data.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 0.8 | Impact: 5.9
Affected Packages4 packages
🔴Vulnerability Details
3📋Vendor Advisories
4Red Hat▶
grub2: Integer overflow in grub_squash_read_symlink may lead to heap-based buffer overflow↗2020-07-29
Microsoft▶
There's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems containing a symbolic link with name length of UINT32 bytes in size. The name size leads to an arithmetic ove↗2020-07-14
Debian▶
CVE-2020-14309: grub2 - There's an issue with grub2 in all versions before 2.06 when handling squashfs f...↗2020