Skip to content
Sign in
Not rated

CVE-2020-14308 In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic overflows on the requested…

Description

In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic overflows on the requested allocation size. This leads the function to return invalid memory allocations which can be further used to cause possible integrity, confidentiality and availability impacts during the boot process.

Affected products and versions

Product Affected versions Fixed in
Grub Versions not published

Other CVEs of Grub

The 3 CVEs of Grub →
CVE-2020-10713 A flaw was found in grub2, prior to version 2.06 Not rated CVE-2020-14309 There's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems containing a symbolic link… Not rated
Track this CVE